Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95def923-049e-3b12-9fdc-a6faaf428489.roa
File:                     95def923-049e-3b12-9fdc-a6faaf428489.roa (raw, json)
Hash identifier:          9J+B/d6EGZWnLrsLCNmkr+RC9/fXnbzbTh+pagEhTy0=
Subject key identifier:   B7:33:D3:74:C4:A3:0D:AE:15:B1:65:7E:12:4E:14:95:91:44:F3:93
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849D85FD3ACEF93D1B04ADA3800
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95def923-049e-3b12-9fdc-a6faaf428489.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     396594
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:d3:ac:ef:93:d1:b0:4a:da:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=ba988934-cf4b-4a44-8cd6-92d1c50533d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f9:82:1a:de:88:5a:15:d2:c7:cc:7e:2c:5a:
                    fe:4c:81:56:60:5e:04:e3:c7:10:67:e6:d3:a2:33:
                    69:f6:10:8c:66:10:5e:a8:7b:5a:d3:84:2c:30:b0:
                    67:3b:30:43:58:c7:a3:49:ff:76:8c:77:b1:fa:ed:
                    cf:ba:64:ae:2e:fa:a7:2f:3b:6d:4f:cc:5c:ad:a0:
                    f6:f7:14:ed:5c:b1:0d:e9:d5:d0:f2:c7:7b:d4:eb:
                    dc:ac:8c:b6:f6:71:11:00:23:2a:f4:68:97:29:c5:
                    d6:36:88:df:42:cc:0d:d1:30:a4:3e:cc:fc:3a:56:
                    f9:98:89:75:b8:f2:a2:b1:56:bb:27:c7:05:28:ee:
                    eb:2a:cc:5f:05:5b:94:13:3b:8d:de:cd:7e:f0:24:
                    b1:6a:57:67:8b:76:f9:47:21:8c:65:55:36:8e:0b:
                    6f:77:59:79:3d:9f:3f:d4:b5:8a:fd:7e:d4:c1:87:
                    85:4d:4c:fa:69:c2:5b:67:c8:86:e7:6a:7c:d9:b5:
                    93:de:ed:b3:e2:30:b6:ca:c3:62:e0:45:c6:97:a7:
                    31:c7:f8:04:60:c2:75:57:46:e6:f2:bc:92:14:9f:
                    5f:7a:ab:2a:d1:0b:c1:39:37:2d:3c:6b:4d:9d:0f:
                    8b:2a:40:90:6c:32:6c:ba:cf:d5:69:ae:99:51:63:
                    2a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:33:D3:74:C4:A3:0D:AE:15:B1:65:7E:12:4E:14:95:91:44:F3:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95def923-049e-3b12-9fdc-a6faaf428489.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:b4:ed:fd:85:d6:03:8a:75:f7:51:8a:60:fa:c5:96:09:f5:
         91:96:72:9b:79:0c:8e:b1:35:c7:c5:7a:22:2e:bb:0c:de:19:
         1d:fb:2d:33:73:07:68:65:c7:df:1e:07:ad:5b:1d:a8:be:8f:
         5c:42:34:91:93:d4:94:e4:5b:44:8d:8d:aa:54:f1:e5:e9:fb:
         9e:12:56:0b:11:bf:57:d1:e0:0b:45:41:6e:08:6e:d2:59:0a:
         75:0e:c6:f9:b9:66:58:5e:0c:2c:66:c5:29:b0:e4:81:e8:07:
         91:11:21:59:49:ff:90:a3:24:f1:73:45:58:dd:19:6a:92:df:
         d2:36:38:85:4f:f5:d2:c7:3e:2d:87:a4:a9:98:e2:a6:ff:17:
         16:b4:df:c5:df:6b:7d:c3:db:b2:61:90:e8:c8:fa:04:11:54:
         d7:a9:df:3f:ff:8e:f1:4d:2c:b1:da:8c:55:58:25:0b:31:c8:
         f8:2c:90:0e:9b:14:74:3d:2a:0c:14:9a:41:05:a6:b0:9e:83:
         64:26:ce:b6:6d:74:57:4a:25:76:4a:b2:c4:ba:f0:1a:77:c4:
         d0:9a:0e:41:35:31:08:dd:60:6c:49:1c:52:c9:9f:11:3f:57:
         19:86:9f:0b:5c:26:91:fa:72:e4:27:f4:9c:a7:7b:5f:2d:80:
         e2:6f:29:d1
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnYX9Os75PRsEraOAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
YmE5ODg5MzQtY2Y0Yi00YTQ0LThjZDYtOTJkMWM1MDUzM2QxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPmCGt6IWhXSx8x+LFr+TIFWYF4E48cQZ+bT
ojNp9hCMZhBeqHta04QsMLBnOzBDWMejSf92jHex+u3PumSuLvqnLzttT8xcraD2
9xTtXLEN6dXQ8sd71OvcrIy29nERACMq9GiXKcXWNojfQswN0TCkPsz8Olb5mIl1
uPKisVa7J8cFKO7rKsxfBVuUEzuN3s1+8CSxaldni3b5RyGMZVU2jgtvd1l5PZ8/
1LWK/X7UwYeFTUz6acJbZ8iG52p82bWT3u2z4jC2ysNi4EXGl6cxx/gEYMJ1V0bm
8rySFJ9feqsq0QvBOTctPGtNnQ+LKkCQbDJsus/Vaa6ZUWMqawIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFLcz03TEow2uFbFlfhJOFJWRRPOTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTVkZWY5MjMtMDQ5ZS0z
YjEyLTlmZGMtYTZmYWFmNDI4NDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBUtO39hdYDinX3UYpg+sWWCfWRlnKbeQyOsTXH
xXoiLrsM3hkd+y0zcwdoZcffHgetWx2ovo9cQjSRk9SU5FtEjY2qVPHl6fueElYL
Eb9X0eALRUFuCG7SWQp1Dsb5uWZYXgwsZsUpsOSB6AeRESFZSf+QoyTxc0VY3Rlq
kt/SNjiFT/XSxz4th6SpmOKm/xcWtN/F32t9w9uyYZDoyPoEEVTXqd8//47xTSyx
2oxVWCULMcj4LJAOmxR0PSoMFJpBBaawnoNkJs62bXRXSiV2SrLEuvAad8TQmg5B
NTEI3WBsSRxSyZ8RP1cZhp8LXCaR+nLkJ/Scp3tfLYDibynR
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:40:11 2025 by rpki-client