Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8dc85beb-071e-346d-948c-e27bdf53d3f3.roa
File:                     8dc85beb-071e-346d-948c-e27bdf53d3f3.roa (raw, json)
Hash identifier:          kTdJ4eu4SCmH/ezFPLHTbwcufl6eixywQP5AquaGgls=
Subject key identifier:   C5:7C:67:F3:88:F0:E5:A7:0B:BB:54:CD:DC:DE:33:6E:FF:2F:DC:96
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584AA42B918BA2675C8228F22E80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8dc85beb-071e-346d-948c-e27bdf53d3f3.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     396571
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:91:8b:a2:67:5c:82:28:f2:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=edea5222-6550-4fdd-b098-fceebb73d3d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:18:dd:0e:72:e7:c0:57:72:7f:3c:23:e5:43:
                    2f:eb:26:bb:f6:5f:93:9b:ac:86:01:6c:0c:f6:c7:
                    fd:6b:80:c1:f8:84:c5:e0:38:b5:04:23:1d:45:b2:
                    64:28:3f:5d:37:99:25:1f:4d:9e:67:84:30:c1:3b:
                    b4:84:63:c0:23:49:c5:d4:99:42:34:dc:2e:1a:87:
                    3f:19:ae:58:df:69:de:74:ec:10:0b:09:73:a7:95:
                    93:51:6c:f5:39:27:74:41:d8:db:dc:3a:5c:71:99:
                    de:c3:3e:b3:c6:64:5b:a8:36:1e:98:41:2c:92:2b:
                    75:9e:37:ee:85:a8:3c:62:97:ea:f6:c2:6b:c5:82:
                    31:3d:52:08:05:55:a7:29:6d:7f:18:96:17:b9:e4:
                    21:f0:da:ba:81:9a:49:85:1e:e8:35:e4:63:75:8d:
                    4f:de:a7:ed:6e:3f:04:88:20:72:52:13:bb:9a:df:
                    93:fd:51:93:ea:61:8d:73:c3:fc:c1:38:ae:77:8d:
                    0b:83:2b:17:4a:36:63:03:4b:0f:1f:5b:4c:a9:e0:
                    7c:e1:37:a7:1e:cb:4a:9c:e2:0f:5f:a8:48:cd:da:
                    b8:b7:8c:aa:97:eb:4f:6b:72:54:54:f9:0e:54:6e:
                    e7:fd:08:df:a7:ce:74:82:17:64:7e:f6:19:22:98:
                    cc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7C:67:F3:88:F0:E5:A7:0B:BB:54:CD:DC:DE:33:6E:FF:2F:DC:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8dc85beb-071e-346d-948c-e27bdf53d3f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:0f:ad:34:9c:2c:8e:89:a3:72:6f:10:0e:51:83:ca:09:3e:
         a4:43:da:34:cd:b9:3b:92:2e:dc:18:63:c0:6e:f0:c7:9e:52:
         c4:22:84:c9:5a:32:b7:f1:df:07:a9:de:4e:15:bb:b8:80:54:
         4e:4d:5b:45:b4:4b:bf:ad:8d:e8:70:b2:41:07:6a:46:66:e1:
         fc:61:48:4d:4c:2a:de:fe:b4:78:82:ff:9a:a7:e3:11:dd:1e:
         84:c5:48:2c:b2:80:c3:60:65:e6:d1:6b:88:bb:02:9f:04:9f:
         a7:c8:b1:47:10:48:e4:e5:86:49:37:06:9b:75:c1:c5:75:6d:
         fd:83:f7:06:1e:6e:af:95:f0:98:f3:4f:39:fc:1c:ad:86:5e:
         49:b8:48:a2:e1:a5:f5:cc:b8:2f:54:83:db:f0:69:e2:ff:e9:
         fd:40:0d:ad:55:93:0d:ce:97:fe:a3:e2:89:be:7d:ef:e8:2c:
         2c:0a:66:fe:75:7c:c6:f9:7a:15:69:7c:0d:b9:ce:aa:a8:4b:
         9b:d9:8a:29:4a:b5:ed:26:e5:f1:e0:cb:e4:97:ed:a2:ae:24:
         62:ea:de:60:d6:66:be:00:43:34:04:76:f3:1f:ba:e6:b1:3a:
         85:fa:31:21:6f:33:83:ef:1e:d9:9b:b6:f6:19:9a:4b:d6:d0:
         0e:50:3d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:04:32 2025 by rpki-client