Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/154193b3-4343-3606-a090-abe104264035.roa
File:                     154193b3-4343-3606-a090-abe104264035.roa (raw, json)
Hash identifier:          xcQ35zjNj+7bqqun8PReEiKONrCTKiknYx5AaPjUE9Y=
Subject key identifier:   9C:D7:58:1B:D6:52:AA:4C:8E:EC:41:81:1A:45:A7:C9:77:0C:4B:BE
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584993F9E95035FE3DCE16BCC8C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/154193b3-4343-3606-a090-abe104264035.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     7342
IP address blocks:        2620:74:7b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:e9:50:35:fe:3d:ce:16:bc:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=c48020b0-8bc6-4cbc-86e5-6eb30c75fde4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:84:e3:f6:77:17:27:fb:44:11:4f:da:0a:03:
                    1f:d4:2a:89:05:ae:73:fa:4d:21:93:02:8b:48:ca:
                    37:18:1c:ea:b1:b1:c9:a9:da:7f:fa:fc:52:b9:1c:
                    aa:86:75:be:f8:8a:97:44:0b:ec:ed:85:33:bc:24:
                    75:d4:67:45:09:d5:08:e4:4f:76:c9:76:53:b0:22:
                    8c:4d:25:da:db:c2:a1:5f:83:62:bb:89:19:25:09:
                    db:cc:05:90:f8:81:68:c5:d7:0f:76:80:af:6e:a8:
                    4d:df:13:13:8a:2d:2c:a0:c8:d7:08:5a:10:ac:93:
                    a1:f7:26:c2:8f:5d:81:c4:2f:85:03:a1:0a:88:4f:
                    a4:f1:15:6e:00:c9:1b:11:51:0b:67:35:02:14:db:
                    c1:fe:36:03:9f:02:59:75:32:41:74:4e:a7:24:10:
                    0e:81:6b:6c:f3:ad:13:62:07:97:dd:c5:de:00:f6:
                    62:e7:de:40:25:ba:d7:4b:f1:9d:04:5f:7c:22:da:
                    55:36:79:1e:47:aa:42:11:24:ae:05:6b:bb:4b:63:
                    77:90:ba:7b:46:a8:2e:0d:d5:a0:5c:a3:c5:0a:ce:
                    4e:c8:e7:cf:0f:e4:14:97:d0:81:37:96:02:fb:b5:
                    ac:79:f1:3d:0e:e9:aa:00:93:d0:bb:6b:3a:4c:62:
                    a2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D7:58:1B:D6:52:AA:4C:8E:EC:41:81:1A:45:A7:C9:77:0C:4B:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/154193b3-4343-3606-a090-abe104264035.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:7b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:7d:28:bb:c2:e0:f9:6d:27:e2:e1:4f:3c:79:ad:ad:6d:f7:
         9f:97:25:c3:a4:f9:7b:ae:4a:f9:b1:e4:e1:6c:f8:5d:64:98:
         16:cb:08:4e:9e:a8:88:10:83:b6:67:f4:bb:7d:5d:5e:6b:47:
         a2:a1:9f:12:7c:81:08:19:22:f6:2e:a8:3a:c6:57:3f:c5:bb:
         01:bf:5b:6f:2f:5f:aa:eb:63:a5:a8:e8:b4:44:ec:3a:e0:e8:
         75:02:e5:68:4d:8b:ae:ab:27:8e:0c:28:49:2e:23:40:67:9b:
         c4:e9:67:2d:13:c9:4f:70:6c:f9:98:56:c4:0b:71:81:b9:60:
         2c:8e:a3:36:f8:ac:1f:04:70:eb:cf:81:0b:33:da:ba:61:9c:
         70:26:c9:08:c7:9d:20:18:7b:e5:d1:1c:30:fe:62:d6:96:41:
         66:b1:ef:b9:c7:f1:d4:12:01:0d:47:10:aa:9f:7a:61:40:3b:
         e3:12:85:04:90:fd:12:bc:d3:93:f5:4f:67:6b:14:fd:3d:28:
         8a:96:b8:8d:6c:51:d0:40:d1:6c:35:74:e3:2a:30:f5:32:37:
         58:aa:28:50:1f:76:3e:e5:4f:f8:fa:51:8f:2a:ef:6a:73:8a:
         f5:77:6f:b1:4d:9b:39:b6:44:6d:3d:64:6a:fa:f4:a2:91:1c:
         42:ea:ba:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:58:47 2025 by rpki-client