Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/bf844c72-9e09-3fe8-92ad-235d85ea729b.roa
File:                     bf844c72-9e09-3fe8-92ad-235d85ea729b.roa (raw, json)
Hash identifier:          e4C5f3lVgnE7OI6hcm+FwdEoH9ojQ8FtNZUXKtI+WyA=
Subject key identifier:   57:F9:D6:D5:B7:F6:F6:10:4C:8A:CB:78:1C:DE:7E:C3:58:BB:18:9F
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584AAB26480CE8E27C1026CFD7F0
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/bf844c72-9e09-3fe8-92ad-235d85ea729b.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     715
IP address blocks:        2620:171::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:48:0c:e8:e2:7c:10:26:cf:d7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=0af04003-0d1f-4f4b-8d55-e225236959fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fa:04:aa:eb:3a:66:ad:6e:53:b3:bb:c8:0b:
                    b3:ea:56:42:2d:32:88:1f:15:24:3e:85:71:42:29:
                    e4:38:a9:b3:9f:d2:79:41:8d:fb:3b:d8:03:77:71:
                    84:46:4f:d2:f5:c6:d0:aa:fe:d4:97:f5:9c:c3:47:
                    cb:06:e3:16:0c:52:27:60:d0:89:fc:70:58:1b:12:
                    91:b4:e9:ca:ad:96:82:fd:ff:26:bb:e8:47:98:a1:
                    5e:2f:5c:89:aa:0d:ae:4e:7c:df:47:28:83:42:5d:
                    4c:a9:73:23:dc:c8:9e:6e:83:7b:e9:0b:36:e9:92:
                    1c:5b:76:c9:71:10:7a:b8:5a:e0:13:cc:b8:74:5f:
                    e8:8b:55:37:59:5c:96:1e:ae:b3:b1:fa:62:3b:05:
                    e5:f0:88:b5:80:6f:33:80:a0:3c:3f:af:59:38:28:
                    2e:6e:75:64:4d:64:fe:4e:87:f8:a9:f1:63:1d:2b:
                    91:e4:3f:3d:0d:d0:cb:1b:0a:2c:06:82:e5:34:b6:
                    d5:4c:4d:f7:bf:a1:ad:ce:bf:c5:e4:24:20:5f:0d:
                    9c:c6:be:0d:f2:81:f8:77:ab:a5:9c:23:14:52:36:
                    bb:2e:f9:aa:99:a2:51:1e:74:a2:8a:54:bb:66:5e:
                    9a:0c:a0:ae:15:7d:df:97:2c:3e:38:4c:f4:5e:bb:
                    e5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F9:D6:D5:B7:F6:F6:10:4C:8A:CB:78:1C:DE:7E:C3:58:BB:18:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/bf844c72-9e09-3fe8-92ad-235d85ea729b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:171::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:e9:f8:fe:a2:ec:bb:a1:f6:05:17:51:59:b4:dc:e0:4f:4b:
         94:1e:d2:85:24:1d:28:f5:c6:cc:74:e1:db:a4:8b:0c:b3:80:
         f7:3a:c8:58:02:0b:0d:cc:70:df:68:fa:60:e9:2a:a3:f2:18:
         4f:2c:04:e0:a3:85:1a:73:4d:53:eb:2e:26:db:74:23:42:8d:
         a7:b2:f7:94:4d:02:16:d2:1d:62:13:c4:bc:d4:57:01:2f:6b:
         3a:eb:27:89:98:db:0e:1d:07:67:0d:95:d1:89:97:fc:07:95:
         a0:80:68:dd:e3:d1:c7:43:8e:f1:f9:74:06:5a:67:a2:df:f5:
         74:46:e7:b0:26:5b:78:9e:67:96:d5:e5:4b:2a:75:4c:99:99:
         c8:0b:98:69:46:37:42:4b:d5:b4:07:98:b1:c5:7a:f2:99:1b:
         63:47:8e:30:74:ec:f7:80:86:61:e0:2e:e6:69:95:6c:3a:62:
         84:c1:64:43:6d:8e:a8:1d:e7:85:95:b1:f2:98:3f:d8:fa:6c:
         c5:cb:0d:05:c5:56:99:fc:3f:b4:3e:ae:24:5a:4c:89:0d:0f:
         45:60:27:9c:1f:c8:e4:0f:84:73:40:75:8e:49:21:21:9d:5f:
         2f:f7:c3:ce:8b:a1:b9:9b:2c:a2:cc:fa:29:1c:99:0d:a6:47:
         16:d3:63:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:48:48 2025 by rpki-client