Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3201db48-0245-36e5-820c-66b08716dfdf.roa
File:                     3201db48-0245-36e5-820c-66b08716dfdf.roa (raw, json)
Hash identifier:          EY08XssMVDEsuQHJHsxSSSPc5cqhl59JjLga4SCPdnk=
Subject key identifier:   AF:4D:10:82:29:72:2B:C5:5E:91:86:13:06:8B:C3:29:C3:5A:6D:90
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849C4D4D8529B67641245A5F7C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3201db48-0245-36e5-820c-66b08716dfdf.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     36617
IP address blocks:        2620:74:2a::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:d8:52:9b:67:64:12:45:a5:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=fbdedb7c-e59c-4da6-aeaf-156dfc652b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:11:2d:29:06:0b:f6:2c:6b:11:75:0b:23:28:
                    10:57:f3:03:c7:1c:06:e7:b3:64:af:36:3f:a0:b7:
                    57:c9:f6:d5:20:cd:a1:a5:a9:ed:bf:94:ea:6b:b8:
                    be:bf:c1:f4:c6:ad:5b:1d:5e:4e:33:88:11:7c:90:
                    96:3d:70:ed:c3:33:a5:63:2e:7d:e0:e5:5c:9a:7c:
                    82:52:39:45:46:62:ba:dc:8b:f5:fd:08:e6:5b:45:
                    64:17:8b:67:ae:91:7c:cb:aa:f3:e5:e4:a7:36:26:
                    ad:fe:bc:c9:05:1f:d8:68:75:02:8d:74:f4:60:8e:
                    71:01:82:33:4a:a0:97:cd:d5:32:24:56:bc:61:bf:
                    54:db:c8:f4:c6:06:20:24:ea:f8:3b:70:2a:92:b7:
                    1e:66:2a:72:7f:9d:f8:ac:62:e5:7c:47:a2:12:18:
                    ea:67:e8:47:0c:8d:87:63:40:d0:b5:b5:38:a7:cc:
                    9e:d2:97:a7:7a:d0:a7:5e:fa:6a:4e:a6:ab:e4:d3:
                    f1:dc:46:31:49:7d:40:14:70:a1:30:90:8d:e4:be:
                    fc:f6:91:1a:cd:3b:17:cc:2e:3b:0a:c0:5b:6c:d3:
                    b2:73:dd:9b:8e:6a:ff:8f:92:f8:75:1a:40:22:e6:
                    81:36:2d:00:4f:87:c0:c4:c6:9f:ab:78:34:ef:33:
                    c2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4D:10:82:29:72:2B:C5:5E:91:86:13:06:8B:C3:29:C3:5A:6D:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3201db48-0245-36e5-820c-66b08716dfdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:74:d3:d0:6e:e6:6a:21:20:a6:84:b8:10:e2:51:08:e4:fe:
         78:7c:ac:db:b2:81:c7:22:5b:91:ea:8f:18:3d:f4:d7:3c:7e:
         00:e4:47:3c:14:21:a7:ee:00:6e:42:74:10:1a:66:ce:55:ee:
         4c:cc:a5:27:95:66:36:39:70:1e:13:ca:42:a6:ea:ca:7d:a0:
         0d:50:15:f1:55:7c:7a:51:5e:04:f4:62:e7:82:25:c5:f6:62:
         54:f0:4c:1b:ae:9d:08:70:7a:61:6c:02:da:bc:7e:cf:4d:44:
         92:82:52:d3:05:84:44:06:15:59:31:c5:31:d6:67:b1:d3:12:
         fb:6d:d0:12:53:85:3e:b3:ad:4f:8e:47:b6:aa:f3:34:08:02:
         57:69:e5:5b:12:82:2f:75:06:49:53:8a:6e:f7:ec:8b:0a:94:
         21:64:b7:0c:a6:35:08:df:f1:b5:3c:41:8d:30:18:0d:3a:31:
         fa:aa:66:e8:de:93:67:73:b1:8e:a5:c6:85:50:2a:f9:46:8f:
         0f:c1:8f:3e:7f:fd:e2:20:4d:4d:c6:87:4e:d7:e8:82:0c:43:
         bd:00:a5:73:b9:56:cb:76:13:bc:eb:13:93:9b:6b:dd:87:e1:
         6a:4d:7d:c7:9a:f7:b1:b6:31:e7:44:7a:19:83:ae:4d:53:5f:
         2a:04:17:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:41:10 2025 by rpki-client