Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3e480c9-7065-379a-a7a0-3741030cb8a7.roa
File:                     a3e480c9-7065-379a-a7a0-3741030cb8a7.roa (raw, json)
Hash identifier:          daLh13/uJ16fzIVKm1741YKDrbcB4LErAc4gAcK/CYU=
Subject key identifier:   79:17:73:39:88:1F:42:06:2E:EB:3F:ED:81:87:99:72:5D:DC:35:6D
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584AB91BDFE86C52C2F92D5E09C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3e480c9-7065-379a-a7a0-3741030cb8a7.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     396596
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:df:e8:6c:52:c2:f9:2d:5e:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=4f63aacc-7e30-4cd6-a6e3-872ad919ddb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:15:67:ce:ee:57:d6:6f:7a:28:87:07:b0:1e:
                    e4:3a:95:be:56:ee:3f:e4:b7:46:e1:56:fd:77:6b:
                    f4:2a:3f:0f:24:09:44:34:92:b3:6a:9f:d8:4c:0e:
                    6f:31:76:42:55:86:41:a9:8b:56:4e:7f:81:bd:1b:
                    af:f6:20:60:6b:c3:a3:01:9a:c0:6b:6c:0c:3b:b9:
                    5b:da:f7:5f:c4:d0:af:f6:fd:a7:f8:c3:5f:d2:91:
                    3f:c1:77:f0:a7:ce:48:21:05:91:66:24:a1:35:6b:
                    8e:20:4b:15:88:fe:50:f3:84:63:9f:29:ac:44:ea:
                    66:0b:d1:ae:00:04:6f:94:2a:e4:86:47:12:c5:1e:
                    e0:e3:c2:84:5f:cb:b5:fe:50:f5:ec:03:e9:cc:93:
                    f0:f7:ca:d6:7b:05:ad:12:95:fb:0e:3f:8c:2b:c1:
                    19:b5:85:2f:4f:40:04:63:c1:d2:2f:3e:f6:dc:83:
                    69:c0:8b:70:3c:e5:ae:61:d3:fe:aa:c0:4a:1f:ae:
                    82:96:2a:b1:0d:31:08:0e:19:0f:39:1f:79:9a:4e:
                    55:0b:bc:49:0a:c0:c4:f0:8d:62:ce:a5:65:7a:2c:
                    ca:e4:00:e5:89:8d:61:80:8f:e0:84:2f:86:7e:03:
                    e1:da:9e:ba:0f:df:1d:5d:01:a2:15:ee:50:fe:e3:
                    74:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:17:73:39:88:1F:42:06:2E:EB:3F:ED:81:87:99:72:5D:DC:35:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3e480c9-7065-379a-a7a0-3741030cb8a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:32:9c:85:07:8c:07:91:db:6f:ca:90:87:2f:13:42:7a:e7:
         c3:60:be:32:7c:30:54:f8:d0:b3:09:7b:66:a7:9f:7e:0f:53:
         00:95:75:ca:ea:67:5f:5e:40:e2:41:37:ad:69:67:4f:59:43:
         89:65:f9:61:a9:cf:77:b3:60:0f:d6:b5:08:79:f2:2f:57:09:
         eb:e5:44:4c:18:c0:35:04:51:42:76:72:a5:9c:08:82:23:95:
         01:44:c4:e0:f3:a5:94:ac:bf:b2:cf:b8:7a:6d:52:00:5f:10:
         cc:c1:0a:d2:aa:e5:45:e7:9e:1c:a8:09:37:ea:08:22:1d:4d:
         cd:4b:a6:a0:80:c9:c4:05:6d:ef:8d:0c:81:5d:3b:98:c6:09:
         ad:09:04:e5:f7:6a:d3:91:a5:8d:6d:78:99:f2:99:24:f3:4c:
         09:56:8a:5a:e1:5c:ac:22:d7:eb:60:a1:16:a8:8d:31:e3:9e:
         5e:fd:cb:59:00:28:14:a2:ba:f9:70:ae:7e:6a:a7:60:58:9d:
         01:a6:43:04:bb:fc:25:80:d4:e5:36:21:e9:2f:1c:78:f9:a8:
         0f:ce:28:d0:d5:d6:da:ff:a7:a3:b6:46:14:a6:12:71:af:bf:
         a1:2f:95:16:b1:b8:5b:22:98:5a:1a:0c:28:65:b7:09:28:c9:
         f1:e2:0c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:09:12 2025 by rpki-client