Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/067a1732-d8a0-317f-b6a5-d117f0a964df.roa
File:                     067a1732-d8a0-317f-b6a5-d117f0a964df.roa (raw, json)
Hash identifier:          XBmZFVGbh9aXWQPTbdIjzZRFlTgfPWwHjzD2n/yInXI=
Subject key identifier:   59:B4:C0:3A:BF:EA:DE:57:96:FC:D3:DD:F4:29:D4:C2:60:99:9D:8A
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584AD9366EBD6A27FF3665BC0B00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/067a1732-d8a0-317f-b6a5-d117f0a964df.roa
Signing time:             Thu 14 Aug 2025 01:00:33 +0000
ROA not before:           Thu 14 Aug 2025 01:00:33 +0000
ROA not after:            Wed 12 Nov 2025 02:00:33 +0000
asID:                     396591
IP address blocks:        2620:74:20::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:36:6e:bd:6a:27:ff:36:65:bc:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug 14 01:00:33 2025 GMT
            Not After : Nov 12 02:00:33 2025 GMT
        Subject: CN=033dda45-88b1-49d3-9a82-6f9f4a44e593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:95:04:94:e0:41:d3:3a:6f:71:36:5d:45:67:
                    95:4a:68:ec:97:8c:d0:da:b5:16:f3:87:44:94:09:
                    db:b3:db:b9:c3:b0:a1:1f:9c:36:2a:7c:8d:3f:c7:
                    92:3b:57:c5:37:98:94:ae:74:3f:a7:5b:27:b6:46:
                    bf:eb:06:27:b2:0d:c9:54:e8:72:3a:0b:27:1d:9a:
                    5c:a2:72:a4:97:96:bf:13:ef:e9:d4:56:e5:67:1f:
                    d0:8b:cb:c0:35:81:34:8f:1e:fe:12:0d:70:6c:23:
                    0e:a9:8a:7a:34:33:05:db:70:a3:02:8d:18:10:21:
                    10:43:8f:a5:ce:be:4c:0a:05:d2:0a:57:2c:45:16:
                    4a:61:19:0c:94:fd:54:7c:9a:d8:16:50:16:82:19:
                    1a:48:6d:41:5b:50:97:d3:1d:a4:b0:83:9a:db:88:
                    d8:f5:8b:44:1e:5f:d3:08:ea:78:53:fa:7a:bc:23:
                    a8:3c:ef:43:69:a4:98:66:8e:50:45:49:3b:c7:32:
                    bc:05:83:43:49:44:d8:70:53:46:de:d8:92:a7:39:
                    88:4e:67:3e:39:2b:f8:bb:65:a2:59:1a:30:42:59:
                    34:45:bb:8b:23:30:95:fd:d7:02:1b:2b:6a:3c:1d:
                    1c:51:86:fe:e9:8f:5f:25:ee:99:bb:d3:90:80:3e:
                    5e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B4:C0:3A:BF:EA:DE:57:96:FC:D3:DD:F4:29:D4:C2:60:99:9D:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/067a1732-d8a0-317f-b6a5-d117f0a964df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:6d:2b:f7:62:98:8d:cf:07:8f:9c:73:2e:c3:32:84:f1:01:
         6a:51:4e:55:87:e9:fa:cc:b7:e9:c6:63:5e:e1:a7:1b:21:46:
         f3:ae:da:24:48:a2:49:b5:ec:74:dd:81:97:6a:f8:a4:9d:b4:
         ff:16:32:05:e9:47:08:5d:28:80:6f:3d:a7:f3:34:4a:5b:e0:
         d9:7a:ea:44:9f:fb:9a:5f:1c:14:18:6d:35:d5:93:ea:c5:68:
         b3:68:ab:b0:fa:e5:28:79:6d:eb:1c:6a:6e:20:26:a8:74:be:
         00:29:71:44:72:48:5b:5f:9e:04:f5:b3:05:18:e0:ed:7e:7a:
         b9:22:e9:41:9c:8f:9a:c4:8b:b8:80:27:1c:d8:47:bc:fd:b9:
         ba:2d:38:fe:72:96:d8:7b:d1:eb:42:08:e3:40:9d:09:a8:b2:
         91:30:b5:13:7d:97:42:e8:d2:81:c9:b7:1f:33:83:46:87:65:
         7a:3e:a6:81:8d:dd:61:8f:75:46:c6:30:ae:f4:0a:2f:0e:73:
         de:a2:18:85:71:8d:85:2b:2f:6f:b4:3a:2d:ac:ef:87:3f:24:
         33:d7:86:ee:d5:9a:8d:3a:ce:12:da:ab:eb:c7:f4:0d:b6:d3:
         32:14:41:81:af:d6:55:ac:a3:f4:7d:4e:2f:86:59:b1:2d:ef:
         d9:6e:e1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:06:30 2025 by rpki-client