Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc7f2566-5bc9-3712-af78-c0d2b94623fa.roa
File:                     bc7f2566-5bc9-3712-af78-c0d2b94623fa.roa (raw, json)
Hash identifier:          SdhbWi+ivzsZ3x1jJb6xxiSwFwLX5xWYdU7MLMAsUsE=
Subject key identifier:   1E:5A:A7:7C:40:2B:B4:79:0D:31:CF:01:A6:EA:EE:5C:8D:BB:CD:A7
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848D211138BED7836744E16425E
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc7f2566-5bc9-3712-af78-c0d2b94623fa.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     396574
IP address blocks:        2620:74:2b::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:13:8b:ed:78:36:74:4e:16:42:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=dc1612bb-35c5-4a8a-af48-690189d9ef51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a2:b3:e9:64:b5:d6:54:06:e1:88:d5:cb:b2:
                    82:a7:e7:68:f5:cf:52:33:90:e4:cf:15:9b:a1:4c:
                    16:20:92:f2:22:2d:0c:0d:42:fa:86:62:3a:4e:0b:
                    c3:bf:d9:40:57:b7:58:5b:94:18:76:12:06:05:fb:
                    3d:b8:e1:aa:33:14:bb:4b:72:78:b2:76:76:38:42:
                    a9:80:73:0e:09:65:a0:d6:86:4f:98:03:b8:1f:3f:
                    61:b1:59:5f:a9:0e:40:af:7c:3a:d6:6e:18:f4:b5:
                    93:9a:45:df:d1:17:48:8f:95:0c:b9:38:03:4d:c2:
                    7b:cb:51:81:22:5c:4c:3e:1a:fd:ce:6d:1b:59:02:
                    b8:d6:70:73:2a:de:14:ab:3b:2f:40:50:19:ba:d1:
                    da:de:3d:7a:36:45:e7:d3:fc:82:78:33:03:fe:63:
                    75:0a:f2:c3:05:26:2a:6a:f7:7f:f1:78:d5:c7:e8:
                    82:27:ff:35:72:eb:ae:25:4d:63:54:86:26:52:09:
                    57:1f:69:2d:b2:97:6d:30:6a:e0:d3:56:06:cd:85:
                    73:49:42:ff:e4:f0:3d:57:42:f5:49:fe:b8:5e:c7:
                    99:97:cb:cb:4f:30:79:3e:16:c5:f6:a2:ae:a2:cf:
                    cf:ab:a9:27:3f:b7:c8:45:65:c5:59:c8:27:08:8a:
                    40:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5A:A7:7C:40:2B:B4:79:0D:31:CF:01:A6:EA:EE:5C:8D:BB:CD:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc7f2566-5bc9-3712-af78-c0d2b94623fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:15:b6:bb:89:55:00:64:36:6d:61:ee:e2:cf:42:6a:3f:f6:
         8d:8e:bb:b9:35:22:a9:94:50:a7:42:c1:80:05:25:da:14:13:
         e1:c3:a9:6b:8f:51:84:a7:1f:89:19:fe:f9:82:c2:7a:88:97:
         21:d8:15:1f:20:80:9a:8f:45:c6:da:75:fd:b3:fb:5b:9a:7a:
         2a:7e:fb:6d:f3:9d:b8:17:98:5c:fe:d9:7c:5b:49:3a:ca:85:
         74:7e:39:14:b1:cc:ed:c1:ec:b4:3d:49:4f:45:f3:6b:c2:6c:
         3f:a3:0b:7a:af:b2:d2:57:ce:bf:6f:f9:f6:9e:d1:bf:98:73:
         b8:43:ac:ad:28:f3:ec:91:77:ba:32:78:c2:7f:e7:a7:ed:ed:
         9f:6d:a3:b5:55:93:46:e8:8f:28:4f:2c:c9:29:37:be:fa:21:
         50:d1:f4:66:fc:68:58:dd:bc:7f:f0:25:61:84:d0:78:73:ba:
         71:6c:03:f7:ae:c5:86:e7:95:86:fb:08:4b:ae:22:bf:43:9f:
         b6:5c:ed:1d:ff:c6:85:8b:60:15:97:26:a1:93:d5:00:ad:4b:
         b6:a4:72:20:13:7a:c9:e1:b7:ba:ed:f9:e9:71:aa:9c:88:45:
         59:1e:2a:99:b8:dc:94:f4:7e:a2:1d:cc:50:bc:f4:77:86:e6:
         87:42:84:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:01 2025 by rpki-client