Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e6ec1b82-b8d6-3976-9d3c-15111f688732.roa
File:                     e6ec1b82-b8d6-3976-9d3c-15111f688732.roa (raw, json)
Hash identifier:          yiWNS+qThYdsS7ymJMTUr7EUtfEAJKSlQbRjR0/NsNY=
Subject key identifier:   6D:AD:1D:27:2B:61:3F:23:8B:B0:FC:19:20:5C:2F:55:6C:6B:EC:33
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584AB91BE211EB437A8292C74900
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e6ec1b82-b8d6-3976-9d3c-15111f688732.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     396593
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:e2:11:eb:43:7a:82:92:c7:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=9e502d7d-fdc8-4984-877c-7a7e26398ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cf:27:0c:28:1e:c7:09:a7:be:da:d8:d0:37:
                    19:c8:7e:4b:38:34:e7:0d:c2:45:fe:0e:33:00:98:
                    78:d0:dd:f5:f2:6f:e2:d6:05:9f:2a:1b:4e:a6:28:
                    02:b6:ce:ff:41:0c:2b:ea:b6:30:b5:d7:5c:6f:02:
                    76:93:0a:0c:b0:5d:3f:44:41:b8:7e:c8:04:a9:bf:
                    2f:7e:c9:5e:34:ba:09:56:65:c6:92:8d:2c:52:2e:
                    83:14:1e:64:ca:ac:f8:bd:fd:24:67:1c:7b:83:cb:
                    33:9f:3b:aa:c7:46:34:f5:f8:60:96:15:90:45:79:
                    65:04:5c:3d:fb:e2:20:cc:00:e1:38:47:a8:31:7d:
                    04:30:b0:a4:e1:fe:8e:19:8b:09:a9:f2:50:fa:de:
                    43:62:12:6e:49:77:79:79:e2:f4:9e:bc:82:29:3f:
                    8a:7f:a5:55:b3:ef:75:67:0a:c9:2c:e9:46:20:a8:
                    b0:67:bc:20:63:a2:f0:ed:55:bb:4b:79:e5:f6:d3:
                    b0:f4:e4:e4:1c:af:7f:ab:7f:b0:16:38:7d:6d:b9:
                    d9:58:12:7e:46:9d:77:c5:9c:8a:15:58:3c:6a:c2:
                    b6:46:8b:0a:03:3f:06:49:a4:76:7f:03:c2:0b:93:
                    fa:cf:9f:21:1f:ef:54:3e:ea:a5:7e:38:af:3b:27:
                    29:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AD:1D:27:2B:61:3F:23:8B:B0:FC:19:20:5C:2F:55:6C:6B:EC:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e6ec1b82-b8d6-3976-9d3c-15111f688732.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:94:3d:31:25:5c:f2:10:10:1d:29:53:b8:e0:9e:80:7e:a6:
         15:a3:50:1a:33:15:30:8e:73:7f:c6:6a:99:89:20:a6:e2:69:
         98:a1:61:37:8e:51:d7:aa:6f:fb:58:1b:3a:02:16:74:42:03:
         54:48:56:a8:53:ee:ba:cf:32:ec:24:5b:30:c0:87:72:7c:77:
         7a:54:9c:93:7c:ee:0a:0a:13:87:15:2e:fd:89:b4:2e:cf:9f:
         a0:a2:e8:d7:e4:e8:55:56:f5:d3:9c:26:18:a2:b9:61:74:e5:
         a4:af:be:be:21:ac:14:1e:ce:64:45:63:2b:07:c9:89:90:74:
         ee:a8:cb:7c:99:60:d3:ef:5a:f6:90:3f:0a:24:ee:5a:97:b5:
         6b:1a:75:54:4a:93:ea:7e:80:59:00:da:6c:9d:c2:8d:81:fc:
         e3:20:f1:20:4e:03:a4:0c:43:ba:34:25:26:93:31:a0:27:8e:
         f1:f3:22:f4:97:89:2f:99:f8:26:d1:14:94:f0:c0:b4:0d:64:
         ef:b4:e2:77:9f:82:77:f4:ae:19:67:67:ee:f4:2c:98:97:a7:
         ca:6f:94:6f:e1:19:34:e1:88:a7:9e:00:97:8f:a9:3f:cc:38:
         7f:95:fb:5d:0c:78:ad:78:b8:48:62:0b:3a:22:28:b9:19:46:
         bc:db:c8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:41:58 2025 by rpki-client