Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/77d290ab-aad0-33db-9cb1-0b081e2c7ebf.roa
File:                     77d290ab-aad0-33db-9cb1-0b081e2c7ebf.roa (raw, json)
Hash identifier:          SNdMvuXP7xWCYQUeZA1zixfPhi2uEnuaykGRbBfmnVI=
Subject key identifier:   C4:43:56:AB:A0:A8:68:76:BF:B2:38:62:B2:49:88:73:0A:4D:42:F5
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584AA42B994A9ADC54703DE57900
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/77d290ab-aad0-33db-9cb1-0b081e2c7ebf.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     396597
IP address blocks:        2620:74:2a::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:99:4a:9a:dc:54:70:3d:e5:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=5d87d2c4-c566-465a-a97b-43c07a6413fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:32:7c:4a:f3:6e:12:65:fd:1b:a5:7b:1d:87:
                    80:6a:ba:0d:e8:73:17:4b:da:f0:17:07:a1:37:70:
                    41:ce:fc:99:a0:32:50:84:9e:9d:33:e1:4a:3d:23:
                    5a:e6:5a:96:c1:2b:79:54:da:72:9e:94:40:88:ba:
                    e1:39:eb:3c:70:a4:2e:01:72:eb:9f:0c:ea:6c:04:
                    7d:d2:f3:28:d5:91:9e:71:0a:37:70:09:50:4b:8c:
                    03:8f:58:ec:cb:1b:24:aa:09:46:50:93:8a:bc:ee:
                    83:d7:bd:f5:36:a0:0f:06:d7:af:e1:96:1f:f8:0d:
                    ac:b3:ab:7c:bf:27:7f:c7:e3:6b:49:2e:9e:54:f0:
                    2d:ad:29:65:47:9a:52:e5:09:62:b2:e0:23:0f:83:
                    54:de:76:e8:23:67:62:8a:40:ff:a1:2a:90:f2:51:
                    bf:ec:cd:0b:76:dd:19:11:11:0b:a2:51:f8:7a:46:
                    da:b4:2b:84:55:3d:e3:47:3c:3c:ac:f9:bb:67:4a:
                    14:81:a4:a1:18:69:a2:43:09:c2:db:04:fb:ee:fe:
                    c3:60:b6:ea:8f:59:33:e4:45:44:c5:bd:51:dc:ad:
                    f6:62:88:0c:0c:76:e8:0b:84:46:53:0b:31:a9:ad:
                    9c:a7:d7:03:99:3f:14:9c:1f:af:3b:d9:f0:4b:cd:
                    34:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:43:56:AB:A0:A8:68:76:BF:B2:38:62:B2:49:88:73:0A:4D:42:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/77d290ab-aad0-33db-9cb1-0b081e2c7ebf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:b5:37:05:fd:1a:b3:5a:81:90:4a:94:d5:0c:89:8f:3f:ae:
         ec:b0:83:7f:60:ff:bc:d8:74:11:91:40:50:72:d8:68:e6:e1:
         59:f6:12:38:9a:de:43:a6:07:d9:c5:ca:3d:95:e8:2c:4c:78:
         6e:bb:0a:52:39:f1:69:6d:19:13:09:16:76:36:74:17:20:6d:
         82:4e:a4:04:8b:d3:26:f2:30:08:69:85:b6:ee:3c:2b:28:cc:
         6a:51:77:5e:f4:9b:8c:6c:18:d6:e8:93:d0:88:bc:0c:a2:ef:
         12:91:0a:81:12:5e:d1:38:7b:91:a2:09:a8:2f:7f:df:a6:34:
         76:fc:65:49:35:d4:52:c4:ec:e6:90:e9:1c:75:3b:a1:03:c9:
         a4:ed:4e:a8:f4:9f:23:a8:0e:ce:a1:c2:ab:59:c6:0b:dc:e6:
         02:34:ed:1d:fa:f2:27:27:aa:82:1b:30:ac:b3:2e:04:84:b8:
         e1:1d:d0:6a:43:24:ce:f7:27:ff:bd:12:c1:c7:f3:d8:5b:cd:
         c0:2f:44:35:52:e2:b2:ad:d8:78:12:1a:ab:16:b8:10:7a:1b:
         5f:4c:0a:04:e0:4c:34:64:c7:3b:d7:ae:22:50:7f:cd:f0:b4:
         00:de:58:93:0a:93:19:3e:83:c5:58:08:78:56:82:7c:29:ee:
         2d:cc:4c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:11:05 2025 by rpki-client