Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ee50aa70-5340-3bd2-bf36-cf0cb3096659.roa
File:                     ee50aa70-5340-3bd2-bf36-cf0cb3096659.roa (raw, json)
Hash identifier:          hVttD667J5QgLo35kJnPFstyj6RpG5BUAVxsMITafsA=
Subject key identifier:   C5:6A:8B:7F:16:81:B1:68:72:EB:90:FF:43:BA:6B:91:FC:8B:8B:4B
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849F87A97EA38ED53EB8E31A300
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ee50aa70-5340-3bd2-bf36-cf0cb3096659.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     36616
IP address blocks:        2620:74:20::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:97:ea:38:ed:53:eb:8e:31:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=73c232cc-bbe5-4241-901a-035c54c1d5de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:dd:c0:f9:1c:8a:db:46:fc:37:62:fc:53:ba:
                    51:ae:0b:68:08:c8:e9:bd:88:42:40:69:13:60:0a:
                    b0:9c:5e:68:83:08:ec:6a:c5:f0:bf:69:96:0b:0d:
                    d5:61:1f:72:7f:50:f5:cd:1b:af:95:91:98:65:3b:
                    89:09:64:2e:7a:19:74:b0:9a:90:7d:3c:ab:f5:e0:
                    8c:6c:56:0b:f0:77:95:cb:72:f6:9b:06:8c:bd:10:
                    d9:c2:27:ba:5f:84:3d:4c:3f:bb:87:d1:d0:17:51:
                    ed:77:34:4b:da:51:e8:ae:e1:d4:e9:ba:5a:1d:23:
                    29:47:c8:44:cd:7e:bd:06:4f:47:3f:c0:22:65:25:
                    3b:39:5b:61:15:14:a2:f8:fb:a6:7b:02:13:5f:f0:
                    e4:33:6a:97:64:c0:48:83:71:8c:65:36:a7:bf:7c:
                    33:34:40:74:e5:c2:a9:c0:b1:1b:fe:52:76:5e:9d:
                    68:5b:2f:41:aa:1e:f0:4a:ca:36:e7:12:60:47:0d:
                    30:d3:28:92:79:e6:42:9a:28:81:6d:03:e0:07:c2:
                    db:55:08:29:64:2f:f8:99:4b:93:46:cf:aa:84:e1:
                    cd:af:b6:e8:7d:a2:5d:13:c3:2e:b4:ae:c4:97:81:
                    54:96:19:46:eb:32:b1:71:e7:50:4d:3c:83:5e:29:
                    4b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6A:8B:7F:16:81:B1:68:72:EB:90:FF:43:BA:6B:91:FC:8B:8B:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ee50aa70-5340-3bd2-bf36-cf0cb3096659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:f5:c2:ef:c1:e3:ef:be:a7:27:b8:f5:00:67:15:e4:b2:96:
         16:0b:84:41:b7:3c:78:64:58:47:6c:49:1a:df:86:f0:e5:eb:
         a6:6c:9e:36:6e:f7:f2:83:c8:1f:ed:96:3a:c5:52:6b:4a:0f:
         2f:fb:9d:22:bc:06:a8:8d:a9:9f:42:03:72:41:ad:e1:5b:d6:
         21:a8:42:57:5b:a4:10:9a:6e:03:f9:20:db:a3:3e:96:00:c5:
         4d:2b:a4:94:b0:f9:ff:87:04:36:39:5b:60:66:eb:da:12:bb:
         68:be:a2:1e:47:c7:9e:42:94:34:89:88:bc:56:51:e3:b2:38:
         30:f4:09:b8:e8:e2:29:30:c8:4d:a6:ef:5c:d5:23:c4:c3:1d:
         b0:75:60:9a:db:32:b8:fb:62:ed:fe:e0:c4:38:de:97:6b:8b:
         ce:5e:47:81:15:43:eb:63:3f:88:be:3e:84:43:ab:73:f8:b8:
         17:eb:f0:0e:07:a4:ab:28:91:49:84:5a:61:d6:45:53:a2:f5:
         05:1b:e0:eb:bd:1a:68:12:c6:b9:33:7d:9a:3a:b5:02:7c:89:
         6e:35:e5:55:b5:60:47:30:a1:aa:43:43:80:ef:ee:f0:4d:15:
         9b:4b:ab:ce:c1:3c:fa:f5:94:95:a0:25:f0:3c:65:c7:7d:2a:
         5c:b3:ad:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:32:59 2025 by rpki-client