Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d7d5bed-3183-3f9e-82af-ee4e863b1590.roa
File:                     3d7d5bed-3183-3f9e-82af-ee4e863b1590.roa (raw, json)
Hash identifier:          b1PRpZPuMMBTt13kJsgW1J43ZzwAH7KpNgnFufl3rgI=
Subject key identifier:   27:4A:89:EA:3F:F4:3E:8C:30:53:2D:B2:7D:77:1B:1E:34:D3:54:DB
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A1193D153151534724F6D7100
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d7d5bed-3183-3f9e-82af-ee4e863b1590.roa
Signing time:             Tue 03 Jun 2025 12:47:20 +0000
ROA not before:           Tue 03 Jun 2025 12:47:20 +0000
ROA not after:            Mon 01 Sep 2025 12:47:20 +0000
asID:                     27544
IP address blocks:        2620:74:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:93:d1:53:15:15:34:72:4f:6d:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun  3 12:47:20 2025 GMT
            Not After : Sep  1 12:47:20 2025 GMT
        Subject: CN=9d19474a-a716-491b-9844-85e268bc1439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:45:dd:ac:e5:4e:7e:e8:1b:ce:21:f2:03:31:
                    13:e6:44:99:a2:6e:55:f2:88:c4:03:cc:ce:aa:f5:
                    d1:58:9f:a3:52:3d:0f:f6:86:a4:63:02:4b:b1:3b:
                    64:18:b6:b8:e1:25:4e:1a:e2:f2:be:03:b0:bc:3c:
                    30:89:87:46:a8:1c:c1:ae:07:3a:d7:df:b7:fc:b3:
                    8b:55:44:a5:1e:d3:d2:bd:87:38:cc:44:c8:25:e7:
                    76:a3:a7:83:66:e9:30:2f:65:62:9a:67:83:74:85:
                    89:6b:f5:e6:e1:5a:67:a1:b3:96:a3:c6:ba:1b:e6:
                    68:25:d6:0c:ee:d6:ef:b1:84:e2:24:c8:a4:ad:32:
                    9b:a5:c1:8f:16:a2:83:a2:d6:fb:52:10:ce:07:d0:
                    67:44:d6:7e:df:76:6e:8c:6e:62:ae:12:44:2f:76:
                    70:87:d3:a3:e7:c7:4a:8c:06:86:91:b0:4d:40:61:
                    ee:33:42:e3:55:31:a7:eb:2e:f9:20:fe:dc:60:74:
                    a1:48:b0:c9:d7:f7:95:19:db:46:fb:09:de:ae:96:
                    ce:33:4c:8f:90:40:49:48:fa:09:84:a0:a5:21:b9:
                    45:eb:9a:b9:88:28:9f:d4:47:52:21:16:b2:0c:ad:
                    f5:2f:b9:d5:d2:a1:0d:39:af:fb:ce:2b:e4:9f:1d:
                    36:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4A:89:EA:3F:F4:3E:8C:30:53:2D:B2:7D:77:1B:1E:34:D3:54:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d7d5bed-3183-3f9e-82af-ee4e863b1590.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:e1:ca:b9:d2:c1:9d:b4:c6:e4:b3:c7:dd:8e:3f:e1:61:0c:
         6c:c0:e6:5b:e5:26:b4:ba:6c:68:04:4c:19:3d:a3:5a:33:af:
         d0:97:dc:e2:b8:08:50:9f:a6:7e:f3:24:6d:95:75:66:54:6c:
         ea:70:55:87:28:2d:14:af:9a:1c:8e:d1:44:c1:59:dc:92:d4:
         6a:7a:ee:52:4f:36:2a:98:24:9c:71:77:cc:7e:ad:dd:f4:d7:
         02:5d:83:56:26:ff:6c:60:2b:c5:94:73:d8:a2:94:65:2c:c7:
         e9:28:20:e4:77:8d:0f:93:6e:22:ee:89:43:25:22:9b:cb:95:
         e3:6f:06:33:b6:d5:ce:52:67:6f:cd:f1:da:e1:29:a3:20:2f:
         b6:45:e3:a7:7d:64:dd:3d:81:92:cd:e6:3e:a0:62:c6:71:3f:
         21:f0:97:5f:74:8d:3d:5f:be:5f:68:2d:a7:5c:31:b1:8d:e2:
         04:16:fc:f2:2d:41:93:c0:b8:64:67:62:48:88:4e:0a:8a:1b:
         ef:71:5a:77:24:0d:c6:61:85:76:f8:de:0d:5e:ce:98:d9:99:
         9c:b9:3d:33:69:d6:2c:cc:0f:ce:95:1e:27:92:1c:8d:21:3a:
         b0:fe:94:99:42:f2:54:d5:51:90:85:11:59:7d:96:46:6f:56:
         11:b7:ea:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:37:58 2025 by rpki-client