Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/843680f0-d889-3c19-99a8-65c387fb06eb.roa
File:                     843680f0-d889-3c19-99a8-65c387fb06eb.roa (raw, json)
Hash identifier:          F5C3EIJ9+MwskxypD9Bw4v4L8ECJQDqxahYW+oztkrI=
Subject key identifier:   42:BE:CB:B2:BA:EC:FF:82:6A:A0:88:D4:D9:B3:DD:95:50:49:2D:1F
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584AB91BE1BD60B1FA917E3E7380
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/843680f0-d889-3c19-99a8-65c387fb06eb.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     396610
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:e1:bd:60:b1:fa:91:7e:3e:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=1dee4878-9eb1-4cbf-9076-4486150c9b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:07:70:1f:5c:71:43:f9:59:4e:33:70:93:0c:
                    b4:ae:24:d4:db:92:5c:b0:80:ca:21:5a:bd:1e:08:
                    5d:df:4e:88:17:49:9f:24:34:20:40:c9:3c:6d:99:
                    b9:f2:6f:5f:24:b1:2b:b1:b0:b5:4c:61:ac:8c:d7:
                    b7:8f:b6:22:ae:3b:8c:0b:44:d9:cd:46:1d:e2:c3:
                    25:df:d6:ca:ee:17:61:6d:e1:0a:22:ca:bb:42:77:
                    ac:3d:4b:bf:77:72:b2:7f:b9:d9:e1:ae:11:36:66:
                    37:17:70:cb:22:e3:6e:cb:78:1f:c1:17:65:f7:0e:
                    f2:64:84:5d:9f:e4:83:a6:ee:37:e3:42:33:9a:ee:
                    10:22:01:44:12:60:d4:e5:08:8f:38:6d:2d:db:37:
                    22:21:46:f2:c0:31:46:03:7a:62:0b:44:8e:37:fe:
                    d1:86:bd:7d:1d:3e:70:ef:ab:9b:e6:fd:66:2e:82:
                    8b:7b:22:0c:02:6b:05:fe:92:c8:0a:10:6a:77:a2:
                    44:f4:e9:e6:e2:fd:78:97:9f:31:a1:2f:91:62:84:
                    15:3d:47:08:23:90:43:cd:49:50:b5:8c:20:33:b1:
                    69:07:a3:bb:9b:2c:fb:f9:15:f4:18:67:16:0a:73:
                    0a:83:3c:ee:5b:03:b6:4e:e5:4f:6e:6d:f8:ac:42:
                    83:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BE:CB:B2:BA:EC:FF:82:6A:A0:88:D4:D9:B3:DD:95:50:49:2D:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/843680f0-d889-3c19-99a8-65c387fb06eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:57:b8:a8:c8:4b:c2:fa:b1:f5:2f:7d:5e:d0:78:bf:de:8c:
         f6:16:8a:56:99:3f:be:bc:8f:29:34:59:e0:a4:e9:23:33:e6:
         aa:73:dc:92:7d:97:1d:4f:6f:1d:8a:01:04:7f:13:04:02:bf:
         77:d1:1c:39:ea:27:d2:db:28:b7:c4:3c:ef:38:31:2d:86:5f:
         54:a4:ba:30:63:53:64:4c:91:7b:23:42:39:f6:89:d2:3c:d7:
         3e:c5:4f:0f:b2:10:b0:6e:28:ac:2b:3f:e4:69:ef:69:18:17:
         73:96:5f:14:81:1d:1c:27:b4:55:1e:76:5f:bf:fa:c1:71:bc:
         ca:65:93:d4:2a:9b:6b:8d:14:1f:ce:eb:e4:e0:cf:50:16:3d:
         b0:d0:2d:a3:e3:14:96:9c:24:df:99:c7:90:01:ea:18:9b:15:
         3d:18:e7:aa:ed:82:82:11:0f:05:3f:9e:8a:62:99:74:c5:ac:
         b2:30:c0:00:9f:c4:d4:0f:57:df:98:88:89:de:57:ab:46:a8:
         97:22:1d:b5:31:5b:dd:ca:a0:7a:64:52:bc:c2:ec:3e:be:20:
         6a:dc:39:52:a2:ae:a9:ca:6b:36:b9:63:a7:7a:08:6e:15:54:
         83:98:d3:df:6d:25:fd:22:f3:90:b5:79:e5:e7:ba:15:3d:7c:
         99:77:32:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:07:03 2025 by rpki-client