Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/789e9b1d-868c-35eb-9b89-45836fbb5570.roa
File:                     789e9b1d-868c-35eb-9b89-45836fbb5570.roa (raw, json)
Hash identifier:          RlJOxOiG91FFzcw7WyEgvVvsE9ktxXQMl9TJRffeBKk=
Subject key identifier:   6A:8A:39:0F:18:9D:DE:48:60:9A:EC:7B:CD:BD:A3:DA:8F:94:6F:08
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849F87A9A69E75193B7D8F4D280
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/789e9b1d-868c-35eb-9b89-45836fbb5570.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     10515
IP address blocks:        2620:74:20::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:9a:69:e7:51:93:b7:d8:f4:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=00101341-409a-4432-be2f-100c78ff3125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e6:95:17:8d:41:8c:d3:a9:59:5e:29:1c:ff:
                    78:38:a8:61:85:e1:ad:48:b6:d2:1f:b5:20:5d:c8:
                    80:b8:8b:d2:4b:cd:55:ab:88:08:d6:96:e3:f3:4f:
                    5a:a1:c2:b8:d1:85:fc:9f:f2:75:3b:fb:68:ca:ce:
                    07:4d:ff:56:eb:c7:e6:d5:65:6a:b0:45:64:4b:ea:
                    ef:27:17:54:44:2b:93:43:26:54:9c:3b:90:5d:78:
                    ac:a8:93:41:29:ee:18:de:33:05:22:64:fa:23:8e:
                    69:23:d2:b1:7f:b2:52:80:c6:b1:6f:45:a4:d0:99:
                    11:c2:89:86:9d:4b:6f:0e:d8:0b:30:1f:94:a8:77:
                    c0:98:83:46:44:9b:fa:5d:7a:c4:5b:93:25:2c:89:
                    68:88:e1:56:95:98:c3:96:71:ca:03:f4:68:be:d2:
                    c3:5d:72:a7:a1:6a:85:18:0c:3f:05:a6:29:05:eb:
                    45:ff:58:30:b3:94:b4:c5:19:39:01:65:42:12:e3:
                    3c:27:6b:d6:c8:ba:07:6b:9f:5b:f7:3e:11:4d:72:
                    23:24:85:d5:5b:3e:19:ad:a9:45:2d:5f:90:2c:da:
                    eb:89:fe:50:bb:36:6d:42:76:0d:25:87:a7:d7:1b:
                    00:6c:97:cf:ca:bf:76:66:60:98:e1:09:34:69:f9:
                    51:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8A:39:0F:18:9D:DE:48:60:9A:EC:7B:CD:BD:A3:DA:8F:94:6F:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/789e9b1d-868c-35eb-9b89-45836fbb5570.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:b7:68:da:e6:44:1c:77:74:a0:5b:57:ad:b8:8d:21:7c:e7:
         c1:a9:39:bb:2e:bd:1c:47:ec:31:39:fb:79:8b:e6:a1:06:8b:
         5c:7a:71:37:60:c9:f1:cf:99:d3:5a:5e:1b:c6:b9:32:3c:bc:
         12:2e:75:60:e6:f9:42:46:32:3c:4c:0d:03:b2:98:6e:6e:b6:
         0e:77:08:6a:cf:cd:dc:42:01:c0:85:55:ee:c9:96:46:e8:4f:
         28:d5:9e:af:b2:eb:b4:d5:e7:ce:f9:83:f3:7f:7c:d1:d9:57:
         64:3c:61:da:a8:4a:95:d3:02:d7:77:86:fe:be:97:8e:ee:7d:
         01:2a:ce:02:49:e7:63:7e:6d:cd:31:46:02:c1:af:ca:28:d5:
         a6:f5:69:4b:43:42:32:48:d3:d4:7a:55:00:43:cd:c3:3d:ba:
         49:b3:a8:6f:ed:cc:37:a9:da:7f:2f:ac:f4:c0:13:40:4f:67:
         65:14:0c:28:1d:7c:f9:07:59:ac:ad:53:c4:4b:fc:85:a4:c8:
         7f:3c:46:27:5d:2f:01:d3:83:ce:47:79:a6:f3:89:43:be:61:
         10:6c:dd:e8:5b:f2:6f:b3:cf:40:a5:97:cd:70:e1:f0:7c:3c:
         8d:69:89:08:57:4e:9f:56:40:ff:f9:7b:2d:41:99:d4:1f:a0:
         65:87:d0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:34:50 2025 by rpki-client