Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e485db44-923d-3c71-bfb8-3c76ab9770c7.roa
File:                     e485db44-923d-3c71-bfb8-3c76ab9770c7.roa (raw, json)
Hash identifier:          bex+FvOJZnFJV607VP3LPSF92JdmSFw70HEJ548kph4=
Subject key identifier:   96:6C:A1:5A:62:92:1A:66:2C:0D:1E:5F:4F:B9:D3:FD:41:DF:DF:3F
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A1193D3864D932893E808DC00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e485db44-923d-3c71-bfb8-3c76ab9770c7.roa
Signing time:             Tue 03 Jun 2025 12:47:21 +0000
ROA not before:           Tue 03 Jun 2025 12:47:21 +0000
ROA not after:            Mon 01 Sep 2025 12:47:21 +0000
asID:                     40647
IP address blocks:        2620:74:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:93:d3:86:4d:93:28:93:e8:08:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun  3 12:47:21 2025 GMT
            Not After : Sep  1 12:47:21 2025 GMT
        Subject: CN=417898a7-6270-4da8-b251-f1f87d4128ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:16:14:f4:8b:0f:f0:9c:d1:ff:2a:7b:56:74:
                    b3:43:a8:f5:88:22:ba:8c:99:c4:fb:e8:f9:2f:82:
                    bf:94:a4:4d:49:2c:1d:63:e5:ee:57:8d:73:a1:f8:
                    91:76:9a:f8:7b:5c:b4:1c:c8:3f:1a:d7:a0:09:3c:
                    fc:fa:69:57:79:8e:5a:79:30:0c:8b:f6:96:f6:5f:
                    ee:9d:76:0a:d5:d2:36:54:95:25:a0:85:16:09:9c:
                    81:3e:30:f8:df:f6:1a:bc:b1:f9:6b:b7:fb:8c:f1:
                    7a:4c:31:52:d4:62:8a:32:8e:99:d5:bd:7f:56:d9:
                    5c:e8:39:5b:ca:46:84:48:aa:41:91:2f:2c:7a:2e:
                    00:ff:e5:60:d4:2d:cd:47:7a:2e:c7:f0:ff:46:ce:
                    fe:4f:03:7b:39:ca:c3:33:c3:db:c7:52:68:77:fe:
                    b9:c0:d6:03:e9:b0:c7:b3:e2:7a:fb:06:6e:0a:0a:
                    8e:bf:78:8b:4b:16:f4:41:88:8a:86:63:32:d5:ed:
                    68:3b:e0:74:fc:89:df:b7:a1:31:13:ae:56:77:ad:
                    f9:77:ff:81:83:38:91:c4:d4:0e:54:06:21:cb:d4:
                    f2:19:65:46:bf:69:72:6a:6b:07:5b:eb:25:b4:98:
                    23:5f:52:a2:5a:53:35:ae:30:c3:03:cb:eb:98:e2:
                    dd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:6C:A1:5A:62:92:1A:66:2C:0D:1E:5F:4F:B9:D3:FD:41:DF:DF:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e485db44-923d-3c71-bfb8-3c76ab9770c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:f8:67:a4:fa:6d:b2:f0:9e:a3:92:d8:26:d7:92:72:7d:7c:
         f9:22:d6:c8:fa:99:95:d7:0b:0a:20:f5:3c:a3:9f:48:64:f6:
         6f:a9:ea:44:15:1e:63:7f:77:46:99:a5:0f:40:38:c5:a9:6e:
         6d:79:1b:ee:47:b1:91:af:48:48:4d:9d:cf:8e:27:80:b9:89:
         14:ad:96:15:6f:91:93:ee:5f:43:be:0b:21:0d:d4:31:21:9e:
         51:d5:43:d3:09:31:d6:41:63:03:f2:46:d9:f7:0e:44:12:ac:
         19:e8:23:5f:ed:35:5c:40:77:c4:cb:c3:12:b5:7a:6b:47:d7:
         63:3d:70:e3:b6:44:ae:af:4e:35:62:a6:18:6d:3f:3d:30:3f:
         a1:da:af:bd:c9:f8:8c:98:74:4c:83:6c:f8:1a:4a:87:5f:e9:
         88:af:30:a1:e0:60:f3:f8:58:99:05:f7:0b:9e:3d:64:2f:5f:
         5d:ab:3c:15:a7:41:af:2c:c9:9d:62:74:37:ad:81:dd:ac:8d:
         81:f6:7e:b0:8b:14:17:77:eb:47:37:22:76:8e:f6:69:a1:bd:
         ef:f1:43:28:e9:1c:ea:90:a0:3f:a3:2a:2c:45:4d:4f:65:f0:
         9d:e5:9f:b9:bc:8a:29:a2:d3:31:8a:61:55:d1:2a:69:e4:9f:
         eb:a5:24:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:31:40 2025 by rpki-client