Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce245307-0ba9-3916-b791-6b7aad65db0e.roa
File:                     ce245307-0ba9-3916-b791-6b7aad65db0e.roa (raw, json)
Hash identifier:          mscs+3MM3MVicoeQkH/XJ5Zzzr3Z/Hfr9zTy1M0jgFE=
Subject key identifier:   1D:D4:26:7A:01:8C:FA:0B:36:96:E5:1C:01:73:DA:5D:5E:70:42:CF
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848F9268B201A0003415CF48F20
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce245307-0ba9-3916-b791-6b7aad65db0e.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     36622
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:8b:20:1a:00:03:41:5c:f4:8f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=abf9b7d5-e686-46a0-a0e4-74bd15be1212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:b3:77:bf:8a:97:85:05:f6:dc:46:65:dc:c8:
                    31:8e:00:1d:70:d1:91:2e:f2:c8:17:68:fb:9a:d0:
                    c6:81:77:aa:25:81:fc:f9:6e:d7:a2:7f:1c:c2:87:
                    09:fe:aa:66:97:f4:d0:a6:b3:a7:4a:a3:08:a0:8d:
                    81:f6:53:ca:b1:7e:17:16:74:d4:cb:e5:9e:40:84:
                    27:fc:a4:cf:2e:47:1b:f3:3a:3a:a5:20:0c:84:11:
                    44:25:71:2d:a2:a5:f2:5d:3f:61:71:89:ac:a2:43:
                    bf:93:9f:70:89:7b:4a:f0:24:a4:cb:db:b3:9d:1c:
                    f5:58:81:70:86:3a:3c:c2:d2:65:89:dc:7e:61:17:
                    08:58:89:0c:8a:1c:ca:e7:1e:06:6e:4d:ca:c2:1e:
                    1b:26:c4:be:a6:09:65:32:85:84:71:1d:91:24:2c:
                    cd:82:31:97:0e:74:28:cc:17:eb:15:6b:94:21:e2:
                    50:0e:2d:7b:cb:72:23:b1:1c:06:b5:66:b7:fe:6b:
                    63:57:ee:36:47:25:94:d8:d8:4a:6c:ed:ab:b5:f2:
                    76:9d:0e:e9:9c:54:4e:ab:18:18:50:e0:e8:86:fb:
                    09:45:4e:f7:81:02:59:a1:48:2a:8f:9a:ff:52:8c:
                    ae:4c:b2:7c:46:45:00:99:db:c6:65:f9:d4:6a:e3:
                    c8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D4:26:7A:01:8C:FA:0B:36:96:E5:1C:01:73:DA:5D:5E:70:42:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce245307-0ba9-3916-b791-6b7aad65db0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:4b:2d:5f:5e:c0:89:3f:71:ca:24:fb:c3:bd:9c:ff:1a:f5:
         cd:fc:b3:f8:c2:40:53:0f:96:65:78:1e:ac:43:6d:f0:80:c1:
         df:ae:c6:45:5e:d8:94:c8:d1:40:e9:89:e5:41:d6:70:84:7b:
         72:62:71:b1:a3:24:3f:91:2a:ad:f0:34:0c:09:d5:b4:4f:7c:
         4a:c5:ba:2c:1e:f7:31:b2:97:51:88:3b:6f:44:28:5e:e6:72:
         ee:d7:7b:51:ff:1b:e8:6f:8a:9e:dd:d4:46:aa:e6:f6:09:22:
         4d:4c:0e:34:44:58:28:dc:41:b1:d8:b8:66:c7:79:b6:70:aa:
         48:8f:39:f8:e9:4a:a6:2e:5c:19:e6:01:a1:84:46:98:0a:94:
         8d:74:4e:30:2f:ca:e9:5f:e5:0b:ca:df:78:46:29:77:d8:6f:
         c5:7f:f7:0d:1c:31:6b:20:40:30:a3:3f:06:82:77:f0:60:85:
         39:4a:79:aa:7c:df:5f:89:8b:26:cb:6c:fb:2d:aa:8b:f4:36:
         41:76:34:60:bb:1d:52:af:9f:6f:41:cc:30:0e:4b:ec:4a:01:
         7a:ec:61:41:bb:ee:b0:34:de:10:85:4a:eb:62:0f:27:a8:6c:
         27:93:4e:8c:08:44:57:0d:79:49:28:b4:1e:c4:b0:aa:67:f7:
         91:98:e0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:19 2025 by rpki-client