Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1149ad7e-9593-332d-a235-c8e1c09c51d6.roa
File:                     1149ad7e-9593-332d-a235-c8e1c09c51d6.roa (raw, json)
Hash identifier:          AQ6ChXbZq73KFnMitAUHnDratAm+QAN3emFFTDO/Bw8=
Subject key identifier:   04:B7:0B:B2:DA:15:D7:11:D0:FA:2F:C4:2F:F3:EA:84:D0:E3:5A:49
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849C4D4DB4DEA648C8FC9B9B180
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1149ad7e-9593-332d-a235-c8e1c09c51d6.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     397201
IP address blocks:        2620:74:2a::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:db:4d:ea:64:8c:8f:c9:b9:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=49c6a345-e7da-452a-aa07-de99cfa32656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e7:17:c0:30:16:2d:d2:8c:25:9a:41:d6:d1:
                    d1:a3:ba:4d:fb:7c:98:29:23:b5:88:2b:40:98:a4:
                    72:d2:d5:2c:6b:60:bd:7c:c4:5f:9c:ec:5e:7e:b8:
                    1d:5a:56:b2:be:9d:6b:11:0f:ee:ec:93:76:43:e9:
                    38:4a:cb:1a:2d:e9:53:80:5d:b3:55:c3:6a:46:fa:
                    86:72:73:f2:bf:e1:74:a7:7d:08:78:4e:69:a6:2f:
                    40:45:10:a3:5f:6e:04:ae:0c:e2:6b:32:77:62:72:
                    25:82:cd:32:28:7d:22:b8:b3:9a:6e:77:e2:fd:e4:
                    15:89:00:52:0f:43:df:00:42:51:bb:85:56:78:07:
                    52:9f:03:71:2c:55:8a:ee:b3:06:d8:57:a8:3b:1d:
                    c6:47:58:9b:82:60:3d:50:3a:57:14:be:16:b2:7e:
                    ba:e9:c7:24:5f:35:b9:61:a4:44:10:ee:f9:2f:c9:
                    95:4e:55:96:0d:58:8a:80:68:09:53:d8:fc:53:f6:
                    dd:38:15:95:6b:58:c9:6f:b2:38:58:54:5f:cd:ea:
                    46:88:7e:10:fa:60:72:86:30:10:0a:78:4c:e3:a9:
                    66:08:fa:8b:01:46:78:f8:4e:03:54:0f:ed:ef:34:
                    6a:74:b6:79:53:54:f0:0c:35:2e:ac:c2:ac:80:12:
                    0b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B7:0B:B2:DA:15:D7:11:D0:FA:2F:C4:2F:F3:EA:84:D0:E3:5A:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1149ad7e-9593-332d-a235-c8e1c09c51d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:00:ad:97:a3:51:eb:bc:49:64:88:70:b9:4b:cf:36:8b:86:
         28:b8:b4:71:eb:b3:3b:ee:6e:4a:d3:e7:81:dc:27:da:19:3c:
         c1:2b:9b:65:d3:3d:30:d6:3d:54:cd:3b:ec:18:80:5c:34:e5:
         cc:02:b1:72:0e:9a:0f:3b:ba:20:bf:0d:3e:a5:6d:20:03:a5:
         5b:2e:45:09:ea:77:8d:77:fc:3d:f7:dd:fd:b2:ad:c6:f8:e0:
         0b:73:ee:d5:8b:c5:8f:1e:67:20:9a:81:74:cc:6e:c9:d9:59:
         44:6c:24:12:79:e0:23:2e:63:6a:0c:3f:f1:6e:fb:1b:e6:be:
         9a:43:13:c2:3d:e0:e5:e3:b1:9d:6e:93:37:17:18:cf:f1:14:
         1d:ca:cd:00:24:e5:58:93:c6:4a:1a:00:13:ed:d4:76:8c:4a:
         3e:2f:ec:19:3a:9e:92:b9:08:e4:46:19:65:d8:6a:d1:0d:fc:
         5c:b4:0c:7a:7f:14:94:24:40:d3:73:ef:b2:3e:00:97:72:42:
         d5:f7:46:f7:f6:76:ba:83:d3:35:36:97:3e:fc:89:85:67:37:
         b1:ca:0a:f3:82:ae:af:68:f3:76:f0:8d:17:47:e0:73:c8:1e:
         7c:62:7b:35:b3:2b:a2:fa:6b:96:bf:fd:b8:60:f1:df:25:ae:
         71:37:8a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:15:22 2025 by rpki-client