Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/07574087-c603-3497-9653-f6fb4891da16.roa
File:                     07574087-c603-3497-9653-f6fb4891da16.roa (raw, json)
Hash identifier:          wGNWKYJT0hCi/v8SCaG5TJIgY323/EJ5VvPOJ4ydIWw=
Subject key identifier:   EA:3F:F4:A4:7B:BC:3D:47:69:E5:3B:BE:E1:81:BB:87:99:41:2F:CA
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B355700A7734B2B02F9B8E300
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/07574087-c603-3497-9653-f6fb4891da16.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     396555
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:57:00:a7:73:4b:2b:02:f9:b8:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=4c2a56f4-dbad-42ce-b1d7-9769452a22d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7c:58:fb:86:c2:55:ca:6f:75:31:fd:ce:25:
                    a4:e7:fb:6f:48:a0:f8:be:a2:1a:a8:19:f7:c2:8a:
                    0d:e3:83:c8:bf:7d:01:76:30:ec:58:e8:a2:23:e2:
                    f1:66:25:6b:5b:15:6c:23:44:75:66:e3:a5:9e:72:
                    28:2d:5e:98:9f:b9:a7:55:9c:4c:d1:a2:28:ea:67:
                    95:64:a1:df:6b:cb:e7:1a:35:18:1e:bb:9f:9f:df:
                    44:20:85:11:3b:5e:1a:c4:2d:81:a2:35:1f:64:c8:
                    c8:fa:87:1b:17:ce:c4:11:2f:00:32:3f:a0:19:20:
                    02:6e:82:42:18:a3:99:c3:93:5c:88:33:5a:d8:3a:
                    f2:e1:0b:9f:fd:b5:b0:ba:1c:70:72:e5:f1:77:0d:
                    5b:58:f6:8e:02:d0:71:b5:27:16:8f:02:06:9a:9e:
                    1d:fc:6a:c3:51:77:c3:16:0c:a7:19:73:60:32:99:
                    4f:17:3c:cf:11:8f:76:6f:ae:f1:ba:c2:9f:b9:22:
                    11:08:7e:72:75:45:9b:7a:fb:64:c0:ee:83:eb:4c:
                    8f:36:f7:0f:8e:15:c9:b2:a0:b3:e9:47:73:37:70:
                    fe:00:15:be:50:39:7d:8b:7e:c1:35:38:a5:f6:a2:
                    77:1c:ac:bc:19:f9:47:4b:21:a6:3a:b2:8e:6e:13:
                    af:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3F:F4:A4:7B:BC:3D:47:69:E5:3B:BE:E1:81:BB:87:99:41:2F:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/07574087-c603-3497-9653-f6fb4891da16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:3d:2a:b0:63:4f:e3:51:9a:bc:f4:8b:e3:4b:99:32:23:68:
         8d:ca:d4:ae:3f:5d:e1:3b:3c:bb:83:52:de:da:88:6f:38:c1:
         1c:42:69:02:41:97:6f:e7:96:4e:b8:77:0b:ca:84:f0:aa:5a:
         1c:6c:07:e0:b2:b0:e5:6f:2b:2e:2f:62:2f:3a:3c:bd:6a:04:
         d5:12:cd:b4:c3:d6:0c:23:1c:12:33:ff:8f:92:87:36:ac:e9:
         e4:11:7c:0d:5f:e5:47:3e:b6:80:ff:81:87:71:2f:09:da:80:
         e1:b8:50:cf:b4:0e:0a:fc:e1:8a:9f:86:bf:27:f5:06:dc:2e:
         ed:76:81:a2:f2:f9:a1:e2:80:22:a4:24:6e:bb:ca:7e:17:4e:
         a2:24:81:71:7d:ef:64:45:a6:23:38:2e:13:b2:e5:3d:62:68:
         60:57:09:24:d5:ff:6e:d3:82:75:92:f5:0a:10:64:b4:39:ab:
         59:d4:a0:ed:50:c9:f0:bf:1e:34:b1:dd:66:76:31:c5:14:28:
         22:1c:53:12:6f:f1:1d:33:5e:55:83:53:e4:2d:8b:38:e4:a9:
         ab:32:7b:68:bb:7f:6a:3e:d2:cd:39:40:4c:10:09:e8:d1:d6:
         6b:7a:6e:8a:ed:59:87:ed:af:88:96:89:4d:13:1d:4f:e8:80:
         bd:8a:5b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:31:23 2025 by rpki-client