Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be794cc7-4b77-3b74-945e-942fa8cab12b.roa
File:                     be794cc7-4b77-3b74-945e-942fa8cab12b.roa (raw, json)
Hash identifier:          BXIL2xbBO0r6VF0m6D2J9N2trdrwOA/Z54EEFJTEOC0=
Subject key identifier:   7F:CF:BA:98:F5:26:89:F2:62:01:F1:F9:84:81:01:40:13:4B:12:57
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849D85FD1356AE76E0489CBA680
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be794cc7-4b77-3b74-945e-942fa8cab12b.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     396549
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:d1:35:6a:e7:6e:04:89:cb:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=a11ab0bb-4ff9-4310-b3b6-16c45b4db398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cb:60:dc:7b:dd:ce:97:99:d9:8b:7c:9d:45:
                    2f:16:ae:6b:fb:cc:83:3b:a7:0c:86:e3:6b:e5:74:
                    91:03:87:f4:bc:7d:20:8f:25:ba:59:aa:4a:d3:72:
                    f6:c7:6d:6c:54:43:6e:04:15:c5:63:1e:08:23:f7:
                    0f:a6:bd:d3:2e:89:80:19:92:c4:f1:f1:0a:3f:9f:
                    98:1b:fb:b8:00:96:82:64:43:6e:ca:b0:62:38:94:
                    ac:e8:b4:79:da:14:61:ca:d5:74:6e:09:b9:1f:62:
                    a3:57:2e:bb:0e:60:d3:01:ea:43:a0:8d:05:4b:49:
                    2d:cc:d7:a8:6c:ff:32:b2:d2:a8:b2:03:58:87:10:
                    8b:15:58:5e:cb:6b:c8:d9:d3:d5:92:11:df:89:d3:
                    c9:dd:0f:51:1e:ca:c4:3e:82:58:13:21:c2:53:af:
                    b7:6e:35:e3:64:65:50:e4:fa:45:d4:ee:58:c2:93:
                    9d:b0:a9:da:77:6c:de:29:df:52:80:a1:8d:1c:c5:
                    f5:41:f9:bb:99:b3:d1:6b:40:32:ad:b6:ae:49:50:
                    61:84:b6:42:ef:44:e0:fc:e7:dc:96:bf:78:23:5a:
                    26:bb:ae:92:d0:15:bc:da:d6:06:d0:17:91:47:d4:
                    14:37:3b:03:d8:2f:b7:18:29:be:9a:da:5b:71:8f:
                    12:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CF:BA:98:F5:26:89:F2:62:01:F1:F9:84:81:01:40:13:4B:12:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be794cc7-4b77-3b74-945e-942fa8cab12b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:93:00:a8:65:61:55:d4:5d:72:9f:6a:89:a6:37:f9:f5:90:
         77:0d:f0:db:14:77:4e:34:69:a4:7e:ec:90:e8:c2:53:c7:2b:
         08:bf:50:c7:1b:e9:6e:24:01:e9:74:7c:db:d8:bf:10:70:31:
         bc:70:a5:f7:0e:a2:bf:e8:09:05:f4:89:37:53:ca:1b:02:1d:
         01:1d:fa:ff:16:88:03:54:f6:f9:18:aa:b4:c1:bb:a3:41:b9:
         b3:39:ee:05:c0:02:2f:e3:07:a3:f6:ce:77:e0:bd:1a:cf:47:
         6a:1e:b0:d9:c8:b9:d6:6a:22:5e:15:19:60:26:c4:26:60:d4:
         89:73:8d:41:9f:de:2f:13:6b:6d:56:a9:9c:0d:b0:c5:c8:93:
         11:33:ed:26:16:a2:1b:a8:b3:af:69:d4:07:1f:02:e1:6c:64:
         ab:98:5d:07:b4:78:a6:7c:22:ce:24:54:24:96:ba:d9:75:89:
         c7:07:a4:41:e1:17:71:41:1b:47:e6:95:2a:73:aa:79:90:00:
         5d:ac:8e:8a:18:64:05:d0:79:66:a0:87:78:b9:6f:1b:31:86:
         a8:07:f8:7d:a7:4e:ce:6f:b5:a6:6f:a7:d2:58:32:1a:30:39:
         f6:82:63:03:43:af:ce:33:c0:25:e9:cc:25:29:02:52:5a:0c:
         8f:84:9d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:44:19 2025 by rpki-client