Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8d78135-ba09-3e21-b9f8-0f857c1f5f83.roa
File:                     b8d78135-ba09-3e21-b9f8-0f857c1f5f83.roa (raw, json)
Hash identifier:          XJIKRo4r+WlkhzVqqcZIr+dKLn5HVif/swHvN4JOaxg=
Subject key identifier:   D0:A7:FD:45:C1:AF:D8:AC:A7:37:87:FF:69:A9:85:DF:1F:FE:57:63
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584AB91BE0BE02747B7631778160
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8d78135-ba09-3e21-b9f8-0f857c1f5f83.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     396577
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:e0:be:02:74:7b:76:31:77:81:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=a820ccd8-bbc3-46b9-a1d3-c72afa219662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b4:81:e6:c6:06:f0:e5:13:28:0f:1a:d0:e4:
                    96:7d:5a:2e:54:60:e1:47:aa:b1:31:e5:98:7e:c3:
                    1b:40:88:45:aa:22:6b:d3:87:b2:03:70:bb:c4:87:
                    a8:fa:ec:e1:4e:65:4c:86:97:13:e6:70:7f:20:d0:
                    f3:d8:53:cd:a3:7b:e0:a8:ed:09:93:0f:c5:b7:85:
                    6f:96:2d:66:40:d6:ce:b6:63:e9:43:00:fe:fb:77:
                    61:98:57:b1:5b:81:18:93:47:65:bc:ac:16:6c:d3:
                    4b:9d:a5:4d:44:d9:64:5c:a4:93:82:19:ea:60:0c:
                    27:f6:4e:4c:fc:62:70:24:1e:a2:d5:37:64:34:d6:
                    d1:47:61:f3:67:fa:fd:e5:77:e8:6f:13:b4:69:e1:
                    f0:ff:da:90:5a:81:ab:8b:ca:00:5d:dc:d2:1d:27:
                    a8:e3:5c:d2:8e:61:62:7c:9f:01:42:1c:74:aa:d2:
                    b7:83:66:16:9d:ce:ff:5d:29:73:7e:53:34:2a:04:
                    34:38:78:8a:bf:05:e4:f8:50:00:c1:b9:92:c1:8a:
                    37:20:1d:ea:77:9a:b8:c3:3c:5a:1e:86:e4:64:99:
                    9c:5e:cf:7a:52:ce:57:05:d0:0f:3a:92:2d:86:e4:
                    9d:f3:3c:1e:8d:b0:09:70:ea:15:0c:10:68:aa:f2:
                    4f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A7:FD:45:C1:AF:D8:AC:A7:37:87:FF:69:A9:85:DF:1F:FE:57:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8d78135-ba09-3e21-b9f8-0f857c1f5f83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:fb:44:99:4b:77:5c:04:21:84:25:fc:6b:64:26:f7:6c:83:
         92:ba:f0:0f:41:aa:06:ea:ca:40:1f:27:bb:1a:ae:a0:1b:79:
         d5:ba:61:b3:b7:70:db:09:f8:8b:ef:a5:5b:6f:a1:7b:76:5c:
         fd:71:6f:1b:05:2b:2e:f5:9d:9a:b4:68:6d:3f:df:fe:13:dd:
         4e:42:30:47:6b:44:5b:cf:d3:93:3b:cb:a4:04:0a:5e:0f:92:
         26:c3:0e:0f:4e:71:7b:67:d0:70:ec:3e:ed:c9:59:a0:fa:30:
         e1:96:ab:29:10:6b:4e:dd:a6:73:e6:2e:7f:31:a4:5e:03:65:
         3a:94:2c:35:5f:9c:98:25:01:35:4a:e7:73:23:f7:3e:b6:12:
         f5:aa:29:de:3c:ed:fd:d9:59:ea:38:82:18:2a:d2:f6:90:08:
         16:a9:75:d8:d2:b0:78:d1:c8:d2:7b:33:e9:0c:ec:17:78:5b:
         c1:7b:e7:18:90:2d:78:05:97:5c:e7:7b:99:6b:f9:ff:b3:68:
         1d:a2:16:2c:4f:9d:73:42:a2:d0:7f:e4:fd:48:a8:5c:7b:4b:
         d0:5d:7d:fd:19:0f:47:9c:04:3e:78:08:ca:0b:0b:6a:bf:d3:
         7f:52:49:58:0c:55:b2:78:1f:5d:90:b4:91:f6:55:cf:7d:1a:
         b4:6f:56:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:35:14 2025 by rpki-client