Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b1ee3038-ef24-3677-9eef-55387c02c99e.roa
File:                     b1ee3038-ef24-3677-9eef-55387c02c99e.roa (raw, json)
Hash identifier:          GGCrBCcp48NgVxntw27AolHeU260oujLG4qmwMN+ubU=
Subject key identifier:   5D:46:5D:40:4D:55:04:F1:F1:B8:44:B4:C3:FF:A5:35:24:85:B3:5A
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849194195FFB6FC2CB835CF4E20
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b1ee3038-ef24-3677-9eef-55387c02c99e.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     396552
IP address blocks:        2620:74:20::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:95:ff:b6:fc:2c:b8:35:cf:4e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=a91ed392-f620-4e8e-86b1-e814c4a051bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e5:c6:f1:50:4c:58:3b:01:49:05:0f:20:c8:
                    ba:6f:6d:f4:47:19:dc:e5:91:40:66:02:85:22:55:
                    18:f3:d2:e1:54:11:ae:99:af:f0:c5:c3:59:38:98:
                    d5:da:5c:96:f3:96:52:18:d0:21:c0:f1:e1:1c:25:
                    4f:a2:1c:85:0b:07:18:56:98:fd:f5:c7:95:c9:d0:
                    f5:21:28:02:eb:55:3f:ec:8a:be:6b:af:94:bb:f4:
                    d5:a2:98:57:1d:50:bd:5f:2f:2f:35:04:e7:ff:89:
                    7c:63:cf:52:f6:36:f7:b9:67:d2:b5:c9:a7:71:df:
                    3b:f1:e6:16:ad:3d:9f:52:13:aa:03:16:6a:49:47:
                    54:31:b4:2b:a2:ae:b7:21:ff:bf:70:2c:b2:41:39:
                    58:51:15:53:02:91:a8:4b:01:69:c3:51:86:f8:bd:
                    f6:41:ab:45:ad:0e:04:3b:0b:ee:5d:8e:e9:1f:1c:
                    13:22:03:88:57:2c:06:9c:ff:48:27:65:3f:74:f0:
                    ae:9e:62:0c:90:f5:d3:80:99:cc:c7:46:19:46:c9:
                    cb:92:5c:d8:6b:dc:96:c4:69:9c:6b:2b:73:e3:00:
                    59:17:cf:ec:31:90:34:f4:cd:e4:e8:12:69:b8:86:
                    c5:2e:c2:53:9b:1d:b2:eb:a2:bb:8f:c9:3b:eb:32:
                    d8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:46:5D:40:4D:55:04:F1:F1:B8:44:B4:C3:FF:A5:35:24:85:B3:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b1ee3038-ef24-3677-9eef-55387c02c99e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:bc:9f:36:27:12:4e:1e:8c:d6:3a:6d:6f:7c:e8:ff:8b:e0:
         78:99:25:45:35:40:13:7e:c4:94:e5:a0:38:17:c0:68:1f:f0:
         98:28:01:70:fd:96:1e:af:e6:e3:3d:e3:fd:e6:af:8e:86:81:
         a1:ca:58:95:0e:00:46:65:32:89:de:0a:2c:c0:44:ea:93:06:
         a3:7a:82:6f:e3:4f:ed:0e:90:1d:1b:ba:cc:bf:39:ad:ae:13:
         2c:73:c3:6d:ec:63:18:0b:c1:1a:f6:7a:e8:c5:31:3a:0f:f2:
         06:7d:c8:cf:b2:35:03:be:04:ed:db:ed:28:c5:a2:cc:f4:5b:
         60:70:69:7f:4d:79:00:c8:15:35:61:bc:7c:a5:8d:b5:19:73:
         58:5f:58:8f:7b:cd:02:86:24:5d:a4:2c:a8:81:80:1e:6b:0b:
         b6:96:d2:a0:11:dc:51:77:65:75:ef:ff:9a:e4:c6:d3:5f:ff:
         0e:73:a9:50:ce:9f:3c:0f:36:0f:6b:ec:0d:6d:67:9e:44:95:
         91:50:2c:4b:3d:fa:a2:09:32:a5:83:d8:6a:ac:05:1c:de:5c:
         a2:d2:e2:a2:8b:7b:a3:27:1d:cb:0a:9e:d7:6c:ba:fa:c3:4d:
         e1:d3:57:16:a9:73:78:56:66:49:a1:76:74:a2:3e:16:ea:13:
         79:40:c4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:04:37 2025 by rpki-client