Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c0a8a47e-5fee-3b96-bca8-72cb3594ca04.roa
File:                     c0a8a47e-5fee-3b96-bca8-72cb3594ca04.roa (raw, json)
Hash identifier:          ISg62ka7iqHZbeZEz8PZHAf4K8hMutPS5JX20BB/Muo=
Subject key identifier:   16:0D:B9:A1:24:10:95:88:B8:2C:50:71:4F:98:2F:CA:28:98:55:15
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584AB91BE5C94EC450E62FC4A580
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c0a8a47e-5fee-3b96-bca8-72cb3594ca04.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     396555
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:e5:c9:4e:c4:50:e6:2f:c4:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=14b569c9-1a0c-466f-a744-b5c399ab72d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:49:9e:66:67:75:bb:a9:69:ac:de:49:9c:ef:
                    ee:14:80:d8:19:df:a6:89:10:bd:ce:b8:aa:52:38:
                    4b:3f:71:0f:87:6b:49:ff:ce:13:9f:0d:8c:40:35:
                    1a:c0:65:e4:1e:20:1b:4d:e4:0d:69:5c:52:ad:f5:
                    f4:b3:35:dc:a1:ab:36:ee:7a:02:ba:ab:e3:87:6a:
                    3c:06:90:50:c3:25:2a:08:f5:cd:c3:23:f0:df:da:
                    2d:09:b8:75:27:a7:1d:1f:25:5d:98:6f:79:c5:85:
                    88:98:f0:0e:96:ac:be:7c:c8:e0:41:69:62:7f:91:
                    36:ab:46:af:f7:6e:bc:a3:2a:bc:c0:ca:bf:86:5f:
                    be:62:b6:0b:19:49:b9:7f:99:9f:f2:ae:a5:ce:d6:
                    14:bf:d8:6d:80:05:1f:e4:ea:f6:c5:ce:71:cf:3e:
                    d3:f7:e5:ad:61:a3:99:bc:ae:93:5a:53:fe:94:91:
                    c4:f7:8d:32:99:f2:2c:59:b3:dc:c2:13:28:03:2a:
                    89:95:04:06:f2:84:89:75:9f:5a:fd:b7:62:6d:c4:
                    bb:0f:19:e6:c0:28:9b:a8:91:2c:89:f3:82:70:83:
                    11:f3:44:bd:44:78:a1:3a:6f:7a:8c:0c:23:4c:72:
                    b1:5e:71:82:9d:bd:c7:bf:2d:7f:75:d5:3b:8b:4b:
                    51:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0D:B9:A1:24:10:95:88:B8:2C:50:71:4F:98:2F:CA:28:98:55:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c0a8a47e-5fee-3b96-bca8-72cb3594ca04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:b3:f7:b6:35:7f:52:57:e3:78:e6:35:43:44:09:01:7e:d9:
         e0:5d:c7:ea:85:dc:59:37:57:a8:8e:5f:ce:d3:81:9c:8e:d1:
         e2:66:fb:1f:65:96:1c:d2:41:0c:ee:5a:ad:5b:f9:b7:db:d1:
         a6:e0:f4:c4:bb:f7:1c:37:64:f8:af:0c:65:89:5b:3f:16:fc:
         d9:76:4f:cb:19:a8:ba:99:06:e8:fc:08:4f:5f:8b:43:72:d5:
         68:63:e2:48:5b:10:c0:b1:d4:b5:42:8d:40:16:47:80:b2:56:
         ef:8e:84:0f:86:f0:fb:59:4a:8f:f6:d6:aa:40:18:d7:99:b5:
         dd:77:65:b4:2b:c3:59:6a:cf:51:f0:e3:c0:2e:0f:06:0c:36:
         ad:ac:bd:e4:f2:b5:15:4b:51:b1:60:14:52:f6:33:18:a6:6f:
         56:7b:a9:ee:0a:f8:9d:d7:b2:d2:5a:3a:19:4d:8c:63:ce:1c:
         b8:d6:b7:2b:69:f9:17:51:be:46:8f:94:c3:b7:ec:ee:85:ea:
         04:c3:a4:8c:0c:2b:4c:92:48:25:95:00:a3:f9:5d:83:59:28:
         c1:28:ae:4b:e5:e2:01:43:6e:ee:da:c6:d0:4b:e8:a2:c7:35:
         e8:17:a8:12:8e:d7:4f:64:4c:89:b1:47:bf:bc:74:02:f5:0e:
         f9:e0:89:0e
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEq5G+XJTsRQ5i/EpYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk
MTRiNTY5YzktMWEwYy00NjZmLWE3NDQtYjVjMzk5YWI3MmQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UmeZmd1u6lprN5JnO/uFIDYGd+miRC9zriq
UjhLP3EPh2tJ/84Tnw2MQDUawGXkHiAbTeQNaVxSrfX0szXcoas27noCuqvjh2o8
BpBQwyUqCPXNwyPw39otCbh1J6cdHyVdmG95xYWImPAOlqy+fMjgQWlif5E2q0av
9268oyq8wMq/hl++YrYLGUm5f5mf8q6lztYUv9htgAUf5Or2xc5xzz7T9+WtYaOZ
vK6TWlP+lJHE940ymfIsWbPcwhMoAyqJlQQG8oSJdZ9a/bdibcS7DxnmwCibqJEs
ifOCcIMR80S9RHihOm96jAwjTHKxXnGCnb3Hvy1/ddU7i0tRVwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFBYNuaEkEJWIuCxQcU+YL8oomFUVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzBhOGE0N2UtNWZlZS0z
Yjk2LWJjYTgtNzJjYjM1OTRjYTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBws/e2NX9SV+N45jVDRAkBftngXcfqhdxZN1eo
jl/O04GcjtHiZvsfZZYc0kEM7lqtW/m329Gm4PTEu/ccN2T4rwxliVs/FvzZdk/L
Gai6mQbo/AhPX4tDctVoY+JIWxDAsdS1Qo1AFkeAslbvjoQPhvD7WUqP9taqQBjX
mbXdd2W0K8NZas9R8OPALg8GDDatrL3k8rUVS1GxYBRS9jMYpm9We6nuCvid17LS
WjoZTYxjzhy41rcrafkXUb5Gj5TDt+zuheoEw6SMDCtMkkgllQCj+V2DWSjBKK5L
5eIBQ27u2sbQS+iixzXoF6gSjtdPZEyJsUe/vHQC9Q754IkO
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:54:12 2025 by rpki-client