Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5e9a054f-b46e-35fd-9c90-ffd4222fc700.roa
File:                     5e9a054f-b46e-35fd-9c90-ffd4222fc700.roa (raw, json)
Hash identifier:          HJfEu7OIGt+8AAix60dpO9Tf5Ejq5dGjleZe+5d3/tQ=
Subject key identifier:   EA:B6:78:E6:2C:58:5C:D4:BA:00:7A:16:C5:31:1C:8F:52:5A:8C:88
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F43285849CBCF84DDE1F576B59B75EF00
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5e9a054f-b46e-35fd-9c90-ffd4222fc700.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     42
IP address blocks:        2620:171::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:84:dd:e1:f5:76:b5:9b:75:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=e9ca47d7-66f9-493f-9f34-882e076d7a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:74:82:b0:54:71:d3:38:2e:29:5f:69:6b:4a:
                    4b:6f:f9:bb:25:28:51:19:f9:1c:ea:ae:46:7b:79:
                    55:ce:72:57:1a:ec:b8:71:9c:fa:a1:2d:14:49:0f:
                    9c:2d:6d:a7:82:0a:57:e7:66:06:80:91:3c:24:3a:
                    2d:35:ba:0d:06:46:dd:eb:14:6e:22:23:29:eb:2a:
                    df:fd:5d:59:b1:98:8f:77:86:7b:3a:67:4b:fc:53:
                    3e:63:71:2b:3c:dd:47:66:b6:9e:7e:dc:3d:01:a1:
                    0b:68:e7:0f:81:fd:da:92:c1:44:bd:a6:7c:3b:b9:
                    fc:8b:39:80:e9:a7:a5:63:8d:f9:27:17:bb:62:52:
                    0b:5e:7c:dd:bb:4a:72:59:b2:c8:9a:7d:82:10:66:
                    32:c4:fe:38:e4:9d:66:b3:77:00:c7:8a:b3:b3:39:
                    b2:4f:fb:37:8c:45:a0:6e:32:a2:f2:74:b0:9a:bd:
                    58:55:15:3f:bb:ab:60:e2:3d:04:3e:03:e7:47:d6:
                    9a:48:3d:c6:fb:d8:60:c8:24:97:be:e3:95:66:b9:
                    09:ea:3a:b0:15:1d:a2:86:ca:c1:ab:65:2a:e5:84:
                    ad:e1:90:f4:29:12:6b:1c:56:b4:58:4b:02:1d:f1:
                    b3:6e:d4:fc:23:d6:fd:33:09:95:cd:5c:ce:50:77:
                    b1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B6:78:E6:2C:58:5C:D4:BA:00:7A:16:C5:31:1C:8F:52:5A:8C:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5e9a054f-b46e-35fd-9c90-ffd4222fc700.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:171::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:5b:6d:d8:27:a8:ac:6e:e8:10:43:2e:67:41:58:c5:7f:ab:
         7a:03:a3:da:20:82:a3:88:01:77:d8:2c:34:49:ad:5d:ed:03:
         c8:43:fc:9d:cd:0e:8a:e0:f2:36:00:71:48:b1:3e:69:50:5a:
         47:19:87:6b:fe:1a:55:70:17:a2:00:e6:e5:28:23:75:45:2c:
         f3:2f:94:55:c5:3d:bb:86:53:7f:32:4e:6f:3f:f2:f8:a5:41:
         04:99:c6:a4:70:e4:7f:84:09:0c:a2:aa:e0:04:76:17:6f:95:
         b1:54:14:85:7e:d5:d8:80:a3:2e:b5:db:d1:88:b9:32:33:4e:
         a6:11:41:5b:27:52:2e:33:cb:dd:16:f0:04:fc:33:f5:44:fa:
         22:f6:9a:b3:7c:5b:da:b8:2a:db:17:9c:d6:32:43:ab:6a:e1:
         56:30:2a:e2:76:78:47:c3:f5:31:b9:41:d8:33:52:d3:ad:12:
         f0:c1:53:3f:3b:bc:d4:2d:ad:22:97:a0:71:75:c4:81:27:24:
         e6:0c:ab:1b:77:17:ce:c1:59:aa:f5:77:66:b7:4c:29:f0:86:
         5f:9e:c6:a4:5f:7c:e7:d7:7f:d9:f8:41:27:26:f7:d7:0d:2a:
         8b:14:69:3e:70:21:76:ef:64:72:2a:d8:c5:b5:59:c1:74:80:
         60:50:32:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:05:59 2025 by rpki-client