Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51a34908-8ab6-3d61-b68d-2457f1535005.roa
File:                     51a34908-8ab6-3d61-b68d-2457f1535005.roa (raw, json)
Hash identifier:          ixGUd8Vb2kU6xVOgHG++pyP+MsULtss3ErH6KPQxb6I=
Subject key identifier:   17:0D:81:82:3D:32:D6:80:6E:73:71:2E:D0:B9:01:D5:71:8C:D9:9D
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A1193D136561EC514A61B3BC0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51a34908-8ab6-3d61-b68d-2457f1535005.roa
Signing time:             Tue 03 Jun 2025 12:47:20 +0000
ROA not before:           Tue 03 Jun 2025 12:47:20 +0000
ROA not after:            Mon 01 Sep 2025 12:47:20 +0000
asID:                     396583
IP address blocks:        2620:74:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:93:d1:36:56:1e:c5:14:a6:1b:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun  3 12:47:20 2025 GMT
            Not After : Sep  1 12:47:20 2025 GMT
        Subject: CN=1586d612-38f8-439b-9019-f105c33a62b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e8:7e:b7:d6:27:6e:71:e6:1c:1e:2e:6f:d0:
                    fb:e6:23:3d:49:df:d6:b2:d4:ce:30:2b:33:8a:f8:
                    4a:4d:e5:33:01:43:e2:e9:cd:e5:d9:da:1f:2d:87:
                    3d:54:0c:ef:38:75:86:d5:63:a7:47:a0:99:e5:9e:
                    a3:c8:04:36:45:8c:d7:34:8c:32:77:54:92:5b:f7:
                    03:bb:22:18:25:59:26:11:24:c9:02:13:da:44:44:
                    df:99:2a:7d:2e:04:a4:39:d4:43:3f:bb:fc:c7:f8:
                    a9:68:9f:cd:72:6e:01:e5:5b:f3:76:ed:5a:f5:15:
                    38:25:f0:39:c8:e0:af:d8:da:91:6e:56:3b:66:b5:
                    7c:59:f6:5a:f8:30:32:c0:61:9b:9d:fb:14:f1:12:
                    43:11:07:d0:b4:3e:10:8d:ef:99:82:78:78:ae:c5:
                    96:73:f1:56:f6:52:cf:cf:cf:9d:15:8a:74:8a:3e:
                    48:86:40:80:f8:40:20:ac:b6:c6:8c:2a:a0:17:09:
                    c5:07:b7:9c:5f:77:6a:b1:49:82:38:2e:e3:89:ab:
                    63:0e:b3:dd:06:12:19:96:a6:d8:d0:38:74:70:4e:
                    39:35:d3:c8:1b:af:cc:dd:92:16:f2:6e:25:df:d6:
                    4f:d9:be:04:37:b0:26:ff:78:b2:d6:32:ab:c7:c3:
                    89:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0D:81:82:3D:32:D6:80:6E:73:71:2E:D0:B9:01:D5:71:8C:D9:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51a34908-8ab6-3d61-b68d-2457f1535005.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:aa:53:5d:6a:ec:4d:55:e6:20:61:cc:8b:61:9c:43:6c:a0:
         01:5c:61:82:0a:6b:8a:c6:f9:94:07:48:b5:cf:34:1e:20:04:
         59:66:ab:86:f5:95:3e:6e:4b:98:ed:fe:58:7c:4e:6c:18:e7:
         af:4c:a8:80:80:3e:79:5f:ea:26:4b:e5:de:39:21:53:b1:cb:
         f1:d9:23:9a:98:0c:a2:d1:ad:ae:67:67:b0:48:2d:80:14:99:
         5b:44:89:7f:14:f3:d0:6c:34:65:40:af:d4:b0:9a:58:a6:00:
         bb:1c:b2:4b:d1:79:71:64:02:e0:65:29:17:df:2f:f4:97:6a:
         cd:d5:06:ce:45:97:d4:74:6a:f3:7a:91:14:56:5d:d9:31:6d:
         d8:33:ce:40:43:03:8c:cb:5c:a1:12:e5:f1:95:88:6e:44:b2:
         12:83:b2:04:d9:f0:82:93:11:41:b4:b7:df:04:91:96:4b:1d:
         63:62:c7:49:e9:c9:36:e7:3f:06:45:ec:00:53:30:ed:34:cf:
         cc:47:3b:e7:ea:36:b9:0d:10:b4:65:7e:95:86:a5:d8:be:ce:
         97:1e:30:2c:cc:48:3e:74:a7:2f:30:53:2d:b2:0b:d4:3c:0a:
         2b:1a:0b:ab:ee:87:bc:25:9b:9d:93:bc:31:6c:7c:30:3f:b8:
         b8:b5:f1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:06:26 2025 by rpki-client