Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc0cfba4-2ba6-317d-931e-3bb47c49738a.roa
File:                     fc0cfba4-2ba6-317d-931e-3bb47c49738a.roa (raw, json)
Hash identifier:          DTj6ADVuzhIUmwBDwOcNq4G+VP3EPmLuMPPOsqEle44=
Subject key identifier:   24:45:02:C4:DB:46:55:9B:B5:D7:50:6E:F4:4D:42:F3:53:BA:03:8C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B21CC36BEA123BDB6759FEE80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc0cfba4-2ba6-317d-931e-3bb47c49738a.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     36619
IP address blocks:        2620:74:2c::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:36:be:a1:23:bd:b6:75:9f:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=2bbb6b16-471a-4dbc-8e33-da345b79e90a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2c:23:71:3a:07:d1:28:6b:8e:4e:8e:e6:c6:
                    df:4a:3d:3a:43:21:b9:2e:ab:cc:f0:75:05:be:b1:
                    be:77:9b:d6:14:f1:ea:63:32:5e:32:eb:7b:41:80:
                    f1:b7:75:bc:e6:01:48:3f:11:9c:91:e0:76:c1:56:
                    ce:87:0b:2c:89:8a:a4:88:25:2c:85:cb:5d:57:ca:
                    10:a5:df:11:de:d6:b7:b2:38:a6:76:44:1e:ce:7e:
                    e7:f5:9d:3f:8f:ef:70:c5:e3:fa:fc:b5:a8:28:50:
                    ca:77:4f:a6:69:e3:c3:9e:cc:74:69:ba:6e:8c:67:
                    7f:cd:41:bb:3a:81:a9:64:d1:e5:95:d6:ef:2e:d3:
                    c1:43:f9:bd:a5:3a:11:f4:90:0e:59:cd:10:9f:1b:
                    b4:f4:01:fc:f7:f3:94:30:d4:ff:7b:d5:ab:0a:83:
                    1b:ef:1d:f0:e2:b8:19:75:1b:07:8e:2f:17:05:38:
                    52:d9:2e:98:f7:56:ca:d1:ee:28:66:4f:77:38:f3:
                    b6:63:81:46:45:90:41:fa:0a:b2:76:70:ea:a7:af:
                    d7:5a:34:96:65:31:a9:f4:1b:b5:49:a0:73:fe:42:
                    5d:de:2c:64:f1:e9:64:0b:73:80:1b:e8:d0:df:2e:
                    1c:89:d0:41:99:37:d7:c8:e6:fa:9c:b3:cd:83:09:
                    44:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:45:02:C4:DB:46:55:9B:B5:D7:50:6E:F4:4D:42:F3:53:BA:03:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc0cfba4-2ba6-317d-931e-3bb47c49738a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:6b:e7:68:91:53:18:f0:e9:30:19:77:e9:28:37:9b:22:0a:
         3e:fa:a1:56:93:c5:39:e8:10:29:93:bc:ce:37:43:96:37:91:
         b2:92:fe:6a:1c:63:6d:d5:ec:18:d9:85:d7:e4:b5:2f:84:b3:
         c0:6b:1e:96:90:8d:ef:e2:9f:84:40:39:79:ed:7e:e8:a0:2a:
         04:51:96:9b:6e:52:bb:17:3e:63:44:85:6a:01:7b:88:d4:8c:
         5e:a7:97:db:af:30:33:87:54:91:bd:a0:2a:18:6b:47:49:8e:
         a9:88:a8:01:a8:2c:b1:86:56:2c:71:40:23:e7:70:06:44:47:
         af:2d:fd:90:59:5b:7c:0b:c8:7d:38:55:32:f0:60:1d:aa:34:
         93:65:52:ee:85:77:c4:af:b2:31:17:77:17:15:28:65:a8:01:
         47:7b:80:2f:e5:ab:5f:7c:e1:9d:52:0e:aa:82:d5:03:73:4e:
         a9:42:75:16:8e:75:19:a2:3c:37:8a:35:84:81:80:4c:aa:e4:
         69:24:10:8e:c7:b5:bb:2a:85:4b:e1:79:45:ca:81:b6:21:e5:
         48:9c:68:07:4d:ec:16:3f:6f:52:94:dd:9b:1d:6f:7b:d5:a7:
         3e:4b:70:0f:0b:ee:89:5a:72:2a:3e:c4:cb:2d:76:a7:ed:03:
         52:78:d6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:39:08 2025 by rpki-client