Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c978a05f-a3bf-3b9c-baf3-45b517a44c2f.roa
File:                     c978a05f-a3bf-3b9c-baf3-45b517a44c2f.roa (raw, json)
Hash identifier:          kPAwJtHGJ25zqnHQYsHIflzBB9podof2xxkbHT/+2kY=
Subject key identifier:   8D:84:B3:6F:B7:24:05:E3:A2:F1:C2:C0:17:BD:7A:A7:FD:BD:C9:11
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848F9268D3023C763F293D6DE80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c978a05f-a3bf-3b9c-baf3-45b517a44c2f.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     36632
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:8d:30:23:c7:63:f2:93:d6:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=3684cb5e-9fd1-4ce1-b57a-c7143ee169ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:84:19:82:24:b8:34:6b:5a:ec:2e:b9:d7:d4:
                    92:9a:f8:e5:4a:88:1e:db:4a:81:f8:c2:e6:32:65:
                    aa:72:6b:77:95:fe:b1:89:ee:93:fb:59:76:33:61:
                    7c:2d:c0:a4:38:42:18:e9:69:7f:39:8e:70:09:fb:
                    3c:48:4c:f9:87:13:31:97:7e:30:ae:2f:68:8f:6b:
                    69:67:06:c2:6b:56:80:73:bd:4c:50:bc:30:7e:51:
                    27:17:22:bc:a9:4a:91:ca:09:ca:86:74:f3:76:19:
                    49:f3:30:a0:26:9f:da:ca:e8:8a:69:e4:7f:c7:43:
                    0d:6f:c9:6e:1f:ec:80:b7:ab:5d:95:00:aa:35:fc:
                    f0:04:a2:9a:4f:ee:1e:f5:ce:ce:79:8f:4b:cd:90:
                    28:cf:ea:fd:b4:5a:38:73:10:59:5e:ed:48:4d:4e:
                    d6:00:e7:92:aa:18:53:32:f2:64:2d:c4:3b:7c:27:
                    eb:66:d1:76:75:f1:68:14:72:49:84:96:f0:c0:09:
                    63:e6:8d:48:57:54:47:4a:e0:3f:e1:34:03:71:53:
                    a7:de:31:0c:a7:0d:e4:8c:62:ce:bf:23:b5:8d:45:
                    f1:49:b2:e6:d1:8d:4a:0c:21:cd:b1:31:a6:e0:63:
                    c2:c4:19:0e:a2:16:ea:f8:76:fd:42:98:8f:ea:a3:
                    6b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:84:B3:6F:B7:24:05:E3:A2:F1:C2:C0:17:BD:7A:A7:FD:BD:C9:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c978a05f-a3bf-3b9c-baf3-45b517a44c2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:5e:f1:1f:70:64:76:5f:4d:df:b4:ff:4b:04:b6:0e:1a:ae:
         04:07:3b:df:9c:b7:1c:19:96:5d:84:29:e7:0d:64:e0:ae:fb:
         2f:9a:d0:7a:f7:56:28:4f:a6:3d:af:91:e8:cb:a9:48:17:42:
         2f:e8:fa:2b:0a:48:25:32:ac:2b:a7:da:43:0b:8c:20:af:47:
         b6:c4:2f:92:c9:3e:6a:2d:34:3b:d7:84:d9:45:5f:a4:06:26:
         5b:5c:da:94:a9:63:d5:c8:eb:aa:e1:1e:79:60:90:cf:0b:5c:
         34:c3:36:79:86:72:24:e7:66:6f:ab:23:20:2a:5f:0c:b3:ef:
         09:80:fe:29:9b:39:ba:dc:1c:d7:b8:aa:37:3e:35:4a:93:6a:
         18:e5:41:0c:8e:64:59:43:bc:b6:15:6a:10:60:52:78:37:06:
         84:04:f1:21:6c:b0:f2:2f:82:91:af:08:e8:f0:8d:86:1d:92:
         56:10:79:1a:c6:7e:9c:71:ff:1d:2e:e3:de:3d:c2:9f:79:a6:
         06:16:96:7d:4c:b9:41:e4:14:3c:e5:32:87:6f:a3:8d:3c:ed:
         d5:ef:55:68:2e:47:1b:68:ad:67:90:8e:e6:9f:e0:5e:64:05:
         41:b7:71:c0:8f:a9:e4:47:c9:1b:04:0a:9c:cf:a2:cd:29:a7:
         49:b6:80:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:58:16 2025 by rpki-client