Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd6ba1ac-8bcc-39d5-90ae-820cf7924122.roa
File:                     bd6ba1ac-8bcc-39d5-90ae-820cf7924122.roa (raw, json)
Hash identifier:          0c+1XGBz85UGNCmSA73swsatRgUEhnfQXlkI4r9WQys=
Subject key identifier:   62:14:91:48:E1:46:0A:C0:54:05:30:EA:BA:BC:DD:CE:53:7E:A9:38
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584BBA104DE4F3F3E4A4FB6C3F80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd6ba1ac-8bcc-39d5-90ae-820cf7924122.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     396614
IP address blocks:        2620:74:20::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:4d:e4:f3:f3:e4:a4:fb:6c:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=ee93d0d0-27bf-43db-ba47-103a9234cefa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:37:a2:53:56:5f:d3:5b:4a:f0:fa:c0:35:74:
                    36:4c:5e:5e:21:2c:d7:14:52:45:24:eb:33:1f:68:
                    71:85:97:53:b0:86:eb:96:a5:b1:29:8f:a0:08:7d:
                    de:4c:e0:5e:59:b0:37:20:cd:52:49:03:7b:08:c6:
                    24:85:54:58:31:e7:b5:5d:98:cc:3f:7b:16:6c:20:
                    e0:8f:ff:d5:65:28:26:66:c8:f4:d7:1a:e6:a9:f5:
                    3b:32:34:82:64:9e:6a:00:04:1e:e8:67:10:03:71:
                    03:2b:5d:e3:be:d1:41:35:09:e6:06:44:f3:a1:b9:
                    0f:ac:d1:5e:fb:85:f8:89:a1:09:1d:c4:18:08:ad:
                    6f:96:4c:1d:9b:af:dc:25:a6:b1:93:48:d4:78:18:
                    8d:50:c9:92:56:40:a6:52:58:dc:9b:e0:db:c7:7e:
                    85:a6:01:30:71:90:5d:da:7b:e7:23:8f:f3:fe:e4:
                    89:d2:30:30:91:5f:eb:00:49:20:02:05:b4:51:a5:
                    9b:07:e1:73:e6:95:ec:2f:21:bd:06:6e:d0:aa:b1:
                    7d:bc:d2:e5:d7:62:df:aa:01:59:18:f0:04:04:fb:
                    6c:74:09:4c:e9:c7:6f:55:5a:44:55:ce:21:f9:a4:
                    c3:6a:da:2b:51:23:89:c1:85:05:8b:66:9b:81:5c:
                    bc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:14:91:48:E1:46:0A:C0:54:05:30:EA:BA:BC:DD:CE:53:7E:A9:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd6ba1ac-8bcc-39d5-90ae-820cf7924122.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:fe:76:8a:7f:48:7e:e0:21:b5:a1:32:21:fc:d9:8d:05:6d:
         d8:40:91:11:1e:82:47:b8:16:9c:b8:7a:0d:4b:01:93:63:e0:
         76:d5:df:d9:83:a5:40:26:b0:ae:02:80:a6:63:fe:79:0c:f9:
         2f:bb:35:b3:4d:82:c1:e5:b8:f2:7e:5a:c6:b3:e7:dd:46:ab:
         5f:69:71:8d:d1:54:42:f7:8e:84:7c:1a:84:43:09:97:e6:bd:
         3b:5f:fa:5f:16:b3:53:23:e1:e5:a6:87:03:8a:25:dc:19:57:
         46:ef:38:77:4c:fd:8e:7b:ab:59:54:f2:2a:71:bf:7f:93:cf:
         b6:ce:f8:b5:e2:fc:08:30:b0:5d:d5:de:2b:85:da:94:02:6b:
         9a:19:25:79:87:15:a8:ce:71:b2:87:58:d7:33:16:da:5b:a1:
         20:ec:85:2b:82:e5:d5:89:79:91:f0:e2:1a:a2:8c:15:d6:80:
         5e:db:c5:41:a8:b4:32:83:b5:2f:d7:f7:ef:f8:55:c1:f3:3f:
         de:bc:d8:de:8f:70:5c:d4:bb:bf:68:55:05:7c:de:21:f6:a7:
         f6:d9:7e:54:d9:17:97:5b:d5:1b:e3:59:12:27:9c:78:88:72:
         34:f4:90:86:cf:40:f6:4e:62:10:aa:cf:62:5d:48:93:54:c8:
         b7:5c:95:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:01:31 2025 by rpki-client