Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/77472d4d-ef96-3820-b864-6b287a57ef0c.roa
File:                     77472d4d-ef96-3820-b864-6b287a57ef0c.roa (raw, json)
Hash identifier:          r1zv64K/fy5WSojIXvHZhkzWV2VlPZytB3tJWn3FlMo=
Subject key identifier:   50:7E:A2:F2:E3:9A:B3:8F:35:68:97:29:4D:E1:53:1E:41:31:7C:5E
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584AB91BE5F5C6E9A06A908F1E00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/77472d4d-ef96-3820-b864-6b287a57ef0c.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     20362
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:e5:f5:c6:e9:a0:6a:90:8f:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=9a42ad63-f408-47e6-a3c7-7c4d5ac43772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:33:cf:4d:2c:a1:f7:a6:d9:c0:b5:59:e3:41:
                    ff:2e:6e:a3:fc:db:78:7d:3c:de:a7:1b:ce:4f:49:
                    a6:fb:74:60:fa:c7:a9:a3:ea:4a:a3:e2:f3:08:df:
                    2d:b9:89:d7:7a:5c:f3:46:0d:c1:11:18:1d:13:45:
                    ea:4a:3c:45:0b:d9:7e:47:67:f4:94:74:47:13:db:
                    bd:bb:80:70:09:91:cf:dc:5a:5f:19:08:7f:1e:fc:
                    22:f5:e9:41:aa:01:32:6c:3c:fa:08:27:d6:a6:af:
                    c6:d1:fd:2d:3d:19:3b:74:1e:20:82:29:e3:fa:f0:
                    d3:58:43:3c:35:c5:b9:9b:6b:2f:80:d6:bf:58:57:
                    aa:9f:d3:48:34:60:a2:48:30:9a:8d:b5:11:bd:3a:
                    38:6d:4f:f9:ef:6e:6d:d2:77:67:1f:6e:6c:f6:88:
                    10:66:80:0e:56:82:82:60:7b:da:4b:e5:2e:b2:00:
                    68:2a:28:f3:8f:e9:5f:7b:30:77:04:d6:47:6d:8f:
                    27:50:8c:de:88:85:7e:ac:05:fa:35:35:6b:19:38:
                    d1:f4:8a:0b:af:af:a3:11:69:b8:74:07:9c:d4:36:
                    80:08:b9:4f:9f:3a:cb:df:bb:11:7f:9e:44:e5:cf:
                    8d:ed:5a:55:d2:61:4b:56:16:1d:4d:7d:5e:0c:a5:
                    6d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7E:A2:F2:E3:9A:B3:8F:35:68:97:29:4D:E1:53:1E:41:31:7C:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/77472d4d-ef96-3820-b864-6b287a57ef0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:43:1b:35:d1:f9:e1:b4:b9:31:a1:c0:38:01:0d:b7:da:db:
         17:60:42:2d:2e:f0:64:60:cf:bb:53:68:5d:72:f8:87:ea:10:
         58:7c:d3:f1:72:13:40:b1:b7:34:ea:a7:6d:9f:f4:c4:56:0f:
         9e:b3:d6:76:68:12:b7:a7:99:a9:cb:96:a5:c4:5d:5d:d0:36:
         3f:5f:84:7e:e8:42:04:18:c1:00:0c:69:b0:d3:15:e6:e7:a1:
         17:08:99:ee:1f:ad:ad:5a:40:6b:aa:5f:40:27:49:1b:19:31:
         fb:2b:a1:6c:5f:7a:30:04:fd:9a:e1:6c:a2:c2:6c:4f:9f:0f:
         41:17:c5:d8:68:d1:67:ee:57:a1:fb:a9:9f:3c:9c:ba:44:f3:
         ae:f2:f8:ab:45:97:dc:9f:cf:53:c6:6e:df:93:53:f5:8c:3b:
         3c:da:15:c3:92:d8:d0:cb:c8:8f:05:a1:c6:6a:29:8e:27:88:
         4b:bf:a6:28:d7:4e:2c:ba:d5:36:92:a6:73:f7:2b:b0:66:2e:
         74:f9:47:bb:2b:45:a6:f9:77:82:fd:a4:60:93:1d:d4:91:b1:
         18:99:46:ba:aa:fc:be:6f:eb:a3:4f:9b:10:af:af:a5:ee:30:
         23:93:06:42:9b:4a:7d:eb:64:21:76:f8:b5:41:b4:6f:d9:7a:
         13:93:9b:ee
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEq5G+X1xumgapCPHgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk
OWE0MmFkNjMtZjQwOC00N2U2LWEzYzctN2M0ZDVhYzQzNzcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDPPTSyh96bZwLVZ40H/Lm6j/Nt4fTzepxvO
T0mm+3Rg+sepo+pKo+LzCN8tuYnXelzzRg3BERgdE0XqSjxFC9l+R2f0lHRHE9u9
u4BwCZHP3FpfGQh/Hvwi9elBqgEybDz6CCfWpq/G0f0tPRk7dB4gginj+vDTWEM8
NcW5m2svgNa/WFeqn9NINGCiSDCajbURvTo4bU/5725t0ndnH25s9ogQZoAOVoKC
YHvaS+UusgBoKijzj+lfezB3BNZHbY8nUIzeiIV+rAX6NTVrGTjR9IoLr6+jEWm4
dAec1DaACLlPnzrL37sRf55E5c+N7VpV0mFLVhYdTX1eDKVtBQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFFB+ovLjmrOPNWiXKU3hUx5BMXxeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzc0NzJkNGQtZWY5Ni0z
ODIwLWI4NjQtNmIyODdhNTdlZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBsQxs10fnhtLkxocA4AQ232tsXYEItLvBkYM+7
U2hdcviH6hBYfNPxchNAsbc06qdtn/TEVg+es9Z2aBK3p5mpy5alxF1d0DY/X4R+
6EIEGMEADGmw0xXm56EXCJnuH62tWkBrql9AJ0kbGTH7K6FsX3owBP2a4WyiwmxP
nw9BF8XYaNFn7leh+6mfPJy6RPOu8virRZfcn89Txm7fk1P1jDs82hXDktjQy8iP
BaHGaimOJ4hLv6Yo104sutU2kqZz9yuwZi50+Ue7K0Wm+XeC/aRgkx3UkbEYmUa6
qvy+b+ujT5sQr6+l7jAjkwZCm0p962Qhdvi1QbRv2XoTk5vu
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:01:07 2025 by rpki-client