Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1574411d-e55a-3934-b497-be0cc23427c9.roa
File:                     1574411d-e55a-3934-b497-be0cc23427c9.roa (raw, json)
Hash identifier:          f1nMkCHPZl5Se+w8p5mhIr/RmT7mDqCm3Wnn1KAH0Es=
Subject key identifier:   BC:A9:BD:A1:EA:EA:B7:A8:B3:01:58:0A:62:E5:C5:49:83:BA:42:82
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B6201D6681B8FD1EC8D099540
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1574411d-e55a-3934-b497-be0cc23427c9.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     396596
IP address blocks:        2620:74:2b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:d6:68:1b:8f:d1:ec:8d:09:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=1e1d6908-d8d9-498a-83cf-bd7000093021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a7:f0:18:6c:0e:4e:db:47:bf:f5:10:87:71:
                    d9:ae:11:bf:16:25:63:0e:8f:9b:a3:c6:83:f6:90:
                    50:96:d2:50:d2:81:6d:60:45:e5:c5:98:25:a2:11:
                    49:09:21:fa:e3:9e:64:09:65:68:f4:ab:5a:b3:2a:
                    6a:6c:1c:fe:28:11:41:e7:4f:41:ce:08:41:de:f8:
                    26:6c:83:83:f8:23:b5:d8:82:73:e2:f1:99:b1:12:
                    62:42:35:9b:70:ae:b2:61:d9:93:82:aa:3e:c4:5f:
                    52:bc:af:68:74:e3:ab:4b:27:8c:61:49:a6:dc:86:
                    77:bd:b6:47:5d:05:82:13:a2:30:af:65:10:79:85:
                    75:a8:97:4b:7a:e3:1f:cb:b0:9f:7e:c9:22:a6:bb:
                    02:50:6d:90:e6:15:69:db:34:e7:3b:f7:89:5e:88:
                    d3:04:bc:3c:5e:40:c0:a6:7a:25:06:71:b4:51:11:
                    6f:e0:ff:0b:c3:be:fc:76:df:18:46:a9:da:34:1f:
                    03:49:3f:38:d5:b4:c3:a7:b7:83:8e:53:31:71:72:
                    3e:91:d9:94:25:a9:bc:f4:f4:ef:6b:d3:7f:65:11:
                    2e:59:d0:62:ed:bb:91:b6:35:91:7c:69:a8:65:1d:
                    a6:3a:ae:48:a7:e6:92:1e:fe:8f:33:0c:e6:07:f8:
                    fa:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A9:BD:A1:EA:EA:B7:A8:B3:01:58:0A:62:E5:C5:49:83:BA:42:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1574411d-e55a-3934-b497-be0cc23427c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:7c:15:35:ff:b6:37:38:78:d1:aa:e8:51:6b:63:20:79:fe:
         8a:6a:f1:c6:65:8d:d1:2a:a9:73:f5:0d:f4:66:87:0f:e8:9d:
         fa:52:6a:06:c8:3e:8e:22:18:be:24:a1:90:dd:8d:92:4f:8a:
         78:35:8c:81:bd:e0:41:a1:64:f1:84:e1:9f:49:31:0f:95:5c:
         7a:fd:06:78:37:80:da:7a:50:79:09:ba:1a:14:ef:2b:91:95:
         3b:17:3c:72:e0:58:8c:59:a7:5d:ac:20:1e:ae:01:66:35:b9:
         cb:db:96:4b:09:52:a6:53:b6:81:61:9e:6c:30:3e:8f:6f:73:
         4e:7c:5b:48:86:5b:00:43:38:af:3e:19:9e:cd:76:b1:1a:43:
         c4:16:ee:df:93:2c:19:d8:c6:ce:f9:70:a4:fe:ac:ea:e0:53:
         1c:63:fd:de:48:12:79:fa:dc:e9:17:c0:9f:3d:00:fc:40:8b:
         84:84:03:1a:6f:0c:df:7e:87:2c:28:21:55:b3:2c:a1:59:46:
         13:c4:e8:f0:b9:02:17:79:a8:6b:a0:11:1c:3b:a2:b2:5c:1e:
         2b:99:9a:72:9f:16:8e:d4:ae:48:7b:b2:de:ff:4c:63:4d:d9:
         b8:b4:01:77:42:35:98:8c:20:33:10:6a:01:42:20:d7:f5:ef:
         32:f6:d8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:31:59 2025 by rpki-client