Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7a756b8b-8c7a-398c-a610-8d009bd52f47.roa
File:                     7a756b8b-8c7a-398c-a610-8d009bd52f47.roa (raw, json)
Hash identifier:          tWq3rx2mCX8KQRv6lX5oAIHsCPaOCtJDgkOgsC/lXyA=
Subject key identifier:   0D:E1:65:92:E5:DA:83:FF:95:33:63:BD:86:CF:15:94:64:AF:71:5D
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849D85FD41843304E307B6C2B20
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7a756b8b-8c7a-398c-a610-8d009bd52f47.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     36626
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:d4:18:43:30:4e:30:7b:6c:2b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=21b905ee-bdf6-41f9-b445-c83076a2b8f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0f:f9:38:e2:1c:2d:90:3b:fe:64:ee:3b:e8:
                    7b:a6:4f:d8:e1:b9:d9:95:90:9b:e5:c0:24:d3:ca:
                    ba:63:8d:f7:38:e2:c9:99:96:f1:06:df:dc:2e:31:
                    31:3d:3e:ea:3b:2a:95:48:1d:d3:09:0a:65:96:2e:
                    2d:84:ac:ba:a1:a8:b4:74:79:31:7b:9e:f2:c4:51:
                    2f:d8:45:32:1f:d8:b8:6f:02:f9:0f:43:f1:f7:42:
                    38:eb:d9:c4:59:2d:79:8a:bd:a7:09:2d:49:cf:9b:
                    66:aa:57:51:aa:a0:17:23:6c:65:01:9b:38:aa:5c:
                    1a:cf:95:74:00:4e:5a:a2:8a:30:8f:c2:2f:1d:9a:
                    d0:9e:6e:8e:7d:93:67:b5:53:15:ea:63:9e:d1:df:
                    1d:aa:80:53:7c:c0:e2:41:0e:84:43:16:ee:5a:d8:
                    cd:b4:3e:25:2f:88:5a:ac:50:cc:d0:19:1c:df:2c:
                    2a:20:17:26:06:c4:31:73:3e:f8:b1:d7:57:35:96:
                    a5:51:7b:8a:b3:79:8a:e2:54:40:f0:1a:03:cc:25:
                    b7:15:36:72:53:39:80:ef:05:43:b2:86:a9:df:11:
                    c9:b0:8d:59:d0:90:9b:63:82:f4:e9:d6:b9:e7:f1:
                    00:b4:33:1d:d5:f1:b5:0a:c0:c5:c6:f4:16:af:6a:
                    9d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E1:65:92:E5:DA:83:FF:95:33:63:BD:86:CF:15:94:64:AF:71:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7a756b8b-8c7a-398c-a610-8d009bd52f47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:40:46:36:55:4b:06:1b:e5:c4:7e:17:ce:cb:b3:1d:c8:9e:
         73:b8:75:6b:66:47:14:ce:f2:d3:5f:27:dc:20:78:ae:14:62:
         74:ec:d6:26:75:ac:76:30:01:01:2a:8f:5c:74:8c:d1:d6:ed:
         7c:3e:06:99:b8:e1:68:2d:ed:80:0e:70:01:68:4e:26:55:38:
         0e:c2:9c:9f:ea:5a:94:4b:3d:9a:48:dd:b4:bb:89:79:ed:35:
         2c:f0:ec:55:54:0d:1d:6d:c1:fc:b0:93:a2:26:df:1e:02:8a:
         fc:57:e6:fe:b4:f7:58:74:81:2a:fc:a0:f9:13:e8:96:f3:a4:
         f4:25:02:79:8a:96:79:28:0c:0a:20:36:de:de:d1:19:fb:13:
         2c:24:ff:64:5e:e4:f6:53:20:9a:2e:1b:34:f1:6f:e7:65:8c:
         2f:68:7a:57:49:32:51:29:45:c0:a8:09:36:8c:16:de:25:df:
         38:53:91:30:7d:01:a7:11:20:b6:15:c2:40:17:2c:70:98:43:
         31:4e:8d:a6:77:88:94:7c:d0:ae:a9:04:7c:33:b4:e9:74:75:
         0b:58:3e:5d:64:d8:7e:3f:05:4a:39:7f:10:38:a8:0c:b5:5e:
         7b:2c:f2:8b:a9:e6:7a:61:ca:a8:2f:a9:e3:62:12:8e:8d:7a:
         77:a5:af:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:42:40 2025 by rpki-client