Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0c35c8e7-2faf-3289-8021-c081874737fb.roa
File:                     0c35c8e7-2faf-3289-8021-c081874737fb.roa (raw, json)
Hash identifier:          t1CaTZ+Pao3+Rd5Y4zUxE4kbTFOGf+oDJsWLmFbzox8=
Subject key identifier:   9A:D3:62:42:47:86:61:F9:EE:9E:6C:69:61:16:1C:A6:DB:E3:A7:13
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849F2E55005B6D2DCF05FB6D000
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0c35c8e7-2faf-3289-8021-c081874737fb.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     7342
IP address blocks:        2620:74:4d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:50:05:b6:d2:dc:f0:5f:b6:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=c9f18ee4-93d6-4103-b54c-178d1759a9cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:14:6a:6f:53:f3:6a:9a:17:79:4d:f0:a2:45:
                    52:f5:57:7d:23:d6:a4:91:a5:f0:27:2a:eb:71:fb:
                    db:cb:73:6a:50:04:06:73:91:1c:f8:51:d5:b0:15:
                    55:3e:c4:4f:ab:b0:b9:4e:e0:76:35:cb:5e:f9:3b:
                    a6:e1:44:c4:d9:7e:0b:d2:96:2b:19:70:b8:11:4a:
                    25:1a:dc:07:a2:97:da:a3:3f:bd:b0:ae:70:47:40:
                    23:bb:2d:e1:b1:59:e2:82:56:cb:4f:cf:7c:78:4c:
                    b8:1c:73:28:47:e2:62:3b:59:40:d6:f6:f6:a8:38:
                    6c:00:a6:f6:16:38:6d:1e:d6:6c:c6:a0:59:80:68:
                    c0:ed:1c:1b:e3:bf:13:34:b4:b4:28:e6:7f:53:19:
                    8d:f4:bb:81:68:0e:ae:1b:da:13:74:04:b7:ac:43:
                    43:bf:31:3b:b7:1d:aa:c5:03:1d:85:1f:ab:db:aa:
                    65:4f:3e:ad:da:f0:b8:bf:e4:e4:af:fd:81:18:77:
                    4f:0e:7f:63:33:a4:f7:24:b1:b5:51:00:bb:03:a9:
                    47:4e:59:a6:69:e7:44:be:ba:30:08:75:17:04:32:
                    5d:83:0e:e7:87:ad:16:2b:26:88:d5:54:7a:68:32:
                    ec:6b:12:de:53:c7:a1:1a:0a:39:fc:de:7b:c4:43:
                    67:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D3:62:42:47:86:61:F9:EE:9E:6C:69:61:16:1C:A6:DB:E3:A7:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0c35c8e7-2faf-3289-8021-c081874737fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:4d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:ef:1e:b2:57:b4:9f:0b:91:2a:45:c5:a6:4b:75:90:fd:55:
         ef:59:41:5e:ca:dd:dc:47:ec:6d:10:32:87:c5:0b:25:b3:8d:
         94:99:d1:c2:1d:cb:2d:7f:1e:71:19:20:81:5b:d5:a3:c7:5f:
         4e:01:2b:b1:1b:b0:bc:8d:30:54:1a:a9:57:68:c5:e4:e5:14:
         66:7f:8c:17:f6:36:1a:d3:f1:17:b3:a4:51:5c:fb:dc:6a:a6:
         c4:5d:c9:64:b2:82:81:7d:5c:c9:3d:8b:ac:2c:db:9f:65:ca:
         74:19:61:7b:18:45:23:a9:31:ba:14:27:70:51:d3:74:5a:59:
         ee:b1:1c:98:2d:ee:f8:b0:4c:5c:75:44:81:34:8d:cc:a9:a2:
         3e:82:ed:c3:ff:9f:6d:9b:ce:b6:9b:78:c3:c3:ea:f7:f1:d0:
         03:1f:08:f1:ae:53:ec:b7:e4:cb:b3:d0:a7:40:f0:9e:10:03:
         f1:16:41:18:c1:66:2f:74:50:31:98:89:51:36:49:5e:a6:83:
         95:99:8f:0b:5d:cd:3f:73:58:4e:c6:15:da:b0:17:bc:c7:d3:
         99:a0:a9:6b:0e:42:48:03:cb:9e:0c:36:4c:74:6f:25:57:35:
         80:e3:0b:67:44:f7:3c:59:07:4a:e3:6f:f6:d6:11:47:ba:0c:
         62:9f:9f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:42:25 2025 by rpki-client