Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7e0d22ec-6941-3068-98e6-655eef9099fd.roa
File:                     7e0d22ec-6941-3068-98e6-655eef9099fd.roa (raw, json)
Hash identifier:          CMA49G9yd5L7NktB+1aJYwjdA33qEOpHdVdb8qL4fGE=
Subject key identifier:   83:84:A4:F8:88:34:D2:D6:78:CE:82:0E:EB:77:D1:24:83:CE:71:AA
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584988C220D90A99799F6C53EB00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7e0d22ec-6941-3068-98e6-655eef9099fd.roa
Signing time:             Tue 15 Apr 2025 12:34:54 +0000
ROA not before:           Tue 15 Apr 2025 12:34:54 +0000
ROA not after:            Mon 14 Jul 2025 12:34:54 +0000
asID:                     396544
IP address blocks:        2620:74:2c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:c2:20:d9:0a:99:79:9f:6c:53:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr 15 12:34:54 2025 GMT
            Not After : Jul 14 12:34:54 2025 GMT
        Subject: CN=bc0d09d9-6d51-4fff-b097-1b689cc3b834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b2:22:00:fb:04:de:81:43:fd:9d:bd:9a:a1:
                    44:c1:dd:1e:e3:b4:45:1d:8a:5c:2c:60:9c:14:f8:
                    a4:e1:6e:85:1b:f4:33:10:27:44:d1:86:c9:48:eb:
                    1d:8e:82:e4:38:a2:1e:a2:5a:50:b4:31:63:6b:2f:
                    81:c2:25:41:4f:36:dc:28:9d:09:67:d9:e2:a6:49:
                    05:4f:15:d6:1f:cc:f4:ce:e7:b1:a6:de:1d:4a:ca:
                    d6:f0:3a:f3:3b:72:f4:c0:3e:42:2a:d0:fe:95:24:
                    76:4e:8a:e2:0f:7b:d3:06:d0:f3:5b:e8:a5:eb:9f:
                    5e:ed:75:f1:3e:d7:06:86:97:ba:77:5b:04:83:2f:
                    df:df:91:a5:5d:7f:60:a4:63:9e:a5:88:93:32:20:
                    ff:22:05:e1:7f:72:c6:0a:aa:ce:bd:25:07:88:29:
                    35:16:5a:66:25:43:90:ac:7a:26:ee:22:66:57:a6:
                    d7:90:5c:c7:d5:e4:0c:08:3b:81:0e:9a:d4:b3:56:
                    e4:f7:92:8e:7c:53:7c:57:b5:94:3c:fb:9c:c7:66:
                    20:20:07:64:b2:70:c8:18:33:5e:7d:8d:02:94:84:
                    0d:cd:f1:e9:45:a2:bf:a9:60:d5:7d:ad:21:9f:05:
                    0c:98:9a:06:db:ed:4f:48:c3:7c:9e:20:55:b8:5f:
                    cb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:84:A4:F8:88:34:D2:D6:78:CE:82:0E:EB:77:D1:24:83:CE:71:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7e0d22ec-6941-3068-98e6-655eef9099fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:94:c0:cc:da:a5:4e:25:83:c0:94:b8:cf:93:a8:8b:9a:c8:
         0c:1c:00:ce:88:aa:25:83:9e:ae:77:74:50:d5:61:13:82:39:
         20:ea:4d:51:39:19:ce:9a:09:66:40:81:02:6c:46:af:be:c1:
         67:c3:f3:dd:73:f2:15:88:a2:91:15:02:d8:05:81:58:c0:6b:
         60:29:6b:bd:bd:1a:f9:a1:cc:d4:36:ad:d2:8d:67:e5:19:3a:
         55:d9:b0:39:de:40:8a:3e:4b:5e:27:3c:ac:be:97:50:28:47:
         20:91:48:a1:76:2d:3c:71:89:48:32:3b:b3:56:ec:ca:3e:73:
         32:4d:7a:59:5e:0b:95:c6:28:4f:7f:ea:a9:2a:c0:e0:e3:1d:
         38:f8:8d:cc:69:7a:11:b7:d8:7a:0b:f0:30:88:2c:0e:c2:00:
         6a:c2:fb:77:a6:a6:fe:69:fe:0c:c4:87:38:a8:95:e6:09:b2:
         a1:8a:a7:6b:4d:80:bb:6a:19:19:2c:17:f3:62:56:ca:2e:ca:
         9a:17:9e:99:9a:15:88:f9:61:40:98:8d:55:e9:9e:75:a5:68:
         3a:86:b6:b4:3d:91:4a:5a:76:f5:0a:2b:81:9b:87:a8:db:e2:
         9b:39:5a:46:5a:a0:9b:41:b0:2e:dc:33:64:c6:64:75:41:ca:
         7e:72:23:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:21:45 2025 by rpki-client