Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3b6deeb-4079-303c-9c18-f66b49ba5941.roa
File:                     b3b6deeb-4079-303c-9c18-f66b49ba5941.roa (raw, json)
Hash identifier:          Rzd6MD3s/AoY3jKCWIsETH7cXlkqNmGiO6XVLyBvUDk=
Subject key identifier:   F3:D7:C2:6D:6D:35:CF:A4:41:3A:FD:34:27:0A:2C:3B:F5:3C:E6:D4
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849D85FD1DA35267EBF878A2700
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3b6deeb-4079-303c-9c18-f66b49ba5941.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     396595
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:d1:da:35:26:7e:bf:87:8a:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=b9f733e6-2b44-430f-9a28-82aa89855fd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d2:3e:d7:a1:dc:69:34:b6:57:2e:2d:86:38:
                    ed:40:05:4a:18:0e:cb:6a:d5:56:5d:7c:7b:3e:2a:
                    92:ca:ce:bb:b7:ac:bd:e3:7e:1b:f1:8d:ec:09:44:
                    46:71:79:9f:07:6b:10:a7:03:9f:ef:46:16:48:1a:
                    09:42:3b:be:9c:87:46:6e:c2:8d:85:fd:83:a0:e4:
                    0e:d9:6e:ab:f3:d6:d9:c5:17:54:04:7b:4e:4f:16:
                    c4:f3:6a:7a:d4:0a:6b:92:8f:e6:64:2c:21:a1:1a:
                    d7:9c:aa:54:a1:1d:8f:a8:b2:ca:a9:85:d6:f9:a8:
                    a5:85:84:5d:68:10:38:22:1f:ec:40:03:8e:49:13:
                    b5:6f:0c:7b:04:f0:e7:d0:97:a6:da:50:78:a6:31:
                    3f:96:73:82:99:37:55:fd:b5:5d:ed:ae:74:c2:84:
                    7d:99:ab:3e:56:63:1e:ac:0e:ed:d4:61:95:8c:8b:
                    0e:7e:ca:cc:66:a2:bf:1e:a3:33:dd:84:ff:1e:00:
                    17:b1:c1:fe:10:dc:1c:e5:ac:7c:83:d6:4b:2c:89:
                    0f:07:27:26:1a:f1:61:b4:eb:07:bd:ab:d6:b3:da:
                    9b:16:4d:e1:4d:3b:78:e6:ef:70:bb:16:50:ef:7f:
                    a9:cf:f8:0f:bc:78:29:9a:56:97:a4:36:a5:0c:4f:
                    9b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D7:C2:6D:6D:35:CF:A4:41:3A:FD:34:27:0A:2C:3B:F5:3C:E6:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3b6deeb-4079-303c-9c18-f66b49ba5941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:fa:aa:24:a6:5e:b2:09:55:40:61:43:b8:19:0b:06:da:68:
         45:65:72:16:4f:61:de:b7:48:09:ef:bd:25:ec:a9:f0:a4:86:
         ba:e6:f7:64:0d:6e:ac:0b:55:18:b3:62:52:d9:77:8b:e4:65:
         bd:ae:2f:36:d7:b0:48:6d:f6:da:5b:1e:c5:fb:0d:34:47:eb:
         2a:0e:08:ee:d6:75:93:85:ae:40:3a:72:ec:bc:aa:02:88:9b:
         0d:d0:c4:88:68:a0:6c:77:7a:3c:82:c4:ed:38:97:66:47:d7:
         54:a3:cf:99:db:88:a4:a3:fa:bf:a3:42:7c:9a:14:0f:c4:af:
         19:32:67:35:4c:a2:f0:2c:f6:1c:e5:f3:e3:55:77:4f:b8:be:
         54:50:78:8b:09:8f:82:22:d8:6a:92:a3:19:a9:c9:84:37:8a:
         df:45:e1:54:e1:44:5a:ef:ad:7f:18:26:09:36:b4:f6:14:d8:
         ed:24:94:6a:1f:33:bf:f5:ae:7f:f4:70:f6:65:e0:e0:62:36:
         be:c6:fc:a6:e0:c8:e3:ec:16:d9:ec:4e:1e:3c:e9:cc:b8:47:
         15:51:d6:d0:f4:63:d4:c8:3e:9d:b0:ba:b3:ae:74:71:a9:f2:
         4b:f5:9e:ee:b0:59:0f:38:61:dc:c1:04:7c:26:b8:aa:c7:84:
         fd:1a:1c:96
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnYX9HaNSZ+v4eKJwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
YjlmNzMzZTYtMmI0NC00MzBmLTlhMjgtODJhYTg5ODU1ZmQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9I+16HcaTS2Vy4thjjtQAVKGA7LatVWXXx7
PiqSys67t6y9434b8Y3sCURGcXmfB2sQpwOf70YWSBoJQju+nIdGbsKNhf2DoOQO
2W6r89bZxRdUBHtOTxbE82p61Aprko/mZCwhoRrXnKpUoR2PqLLKqYXW+ailhYRd
aBA4Ih/sQAOOSRO1bwx7BPDn0Jem2lB4pjE/lnOCmTdV/bVd7a50woR9mas+VmMe
rA7t1GGVjIsOfsrMZqK/HqMz3YT/HgAXscH+ENwc5ax8g9ZLLIkPBycmGvFhtOsH
vavWs9qbFk3hTTt45u9wuxZQ73+pz/gPvHgpmlaXpDalDE+blQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPPXwm1tNc+kQTr9NCcKLDv1PObUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjNiNmRlZWItNDA3OS0z
MDNjLTljMTgtZjY2YjQ5YmE1OTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAI+qokpl6yCVVAYUO4GQsG2mhFZXIWT2Het0gJ
770l7KnwpIa65vdkDW6sC1UYs2JS2XeL5GW9ri8217BIbfbaWx7F+w00R+sqDgju
1nWTha5AOnLsvKoCiJsN0MSIaKBsd3o8gsTtOJdmR9dUo8+Z24iko/q/o0J8mhQP
xK8ZMmc1TKLwLPYc5fPjVXdPuL5UUHiLCY+CIthqkqMZqcmEN4rfReFU4URa761/
GCYJNrT2FNjtJJRqHzO/9a5/9HD2ZeDgYja+xvym4Mjj7BbZ7E4ePOnMuEcVUdbQ
9GPUyD6dsLqzrnRxqfJL9Z7usFkPOGHcwQR8Jriqx4T9GhyW
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:53:33 2025 by rpki-client