Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1f845c77-8f58-354f-a1ec-14e98f2a46e7.roa
File:                     1f845c77-8f58-354f-a1ec-14e98f2a46e7.roa (raw, json)
Hash identifier:          pRAKotI9x4+fi75gYIONP8H8OxxA3rwLagAtcW2oTi8=
Subject key identifier:   91:DA:AC:A9:A6:D3:6A:D1:11:CF:C8:E7:F6:27:9E:3D:37:BE:56:BB
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849C4D4D7F4D461181EB1987A40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1f845c77-8f58-354f-a1ec-14e98f2a46e7.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     36626
IP address blocks:        2620:74:2a::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:d7:f4:d4:61:18:1e:b1:98:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=46da866c-6b25-45bd-ae65-070802aa7367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c4:b6:56:48:66:2e:db:a3:89:f9:d3:94:8b:
                    ad:c8:e3:f9:90:46:2c:b1:ca:9d:b6:a9:5d:29:21:
                    22:69:55:f1:92:b4:5b:95:56:ae:1b:10:bd:d0:01:
                    fb:9d:6e:20:bd:06:1d:15:ec:ee:59:60:94:9a:83:
                    27:42:d5:24:d8:87:a3:3c:cf:8c:43:ed:10:33:9d:
                    c3:df:34:fc:a9:38:a8:f2:63:9e:a0:a0:60:cc:b0:
                    67:eb:98:3d:d1:6e:20:42:ef:c8:13:66:02:b4:4b:
                    77:e5:c1:ca:93:af:78:cd:cb:52:b2:e3:21:8a:62:
                    5f:b1:6d:f8:1e:f9:f8:e0:7a:18:c6:8c:98:aa:fc:
                    24:a3:b7:7d:8b:45:33:7c:c9:b6:ac:dc:55:a6:55:
                    30:42:6b:f6:62:9c:f1:89:59:8a:27:e7:54:af:4c:
                    61:6b:a4:d7:f8:fe:b6:a1:9d:70:70:58:1d:1f:de:
                    db:38:c9:25:f3:01:37:78:04:6f:7d:4d:75:77:ca:
                    04:7f:15:00:03:76:98:ba:32:f3:58:b4:2d:d1:f4:
                    fc:7a:a2:b2:55:f4:f3:a9:51:7d:59:66:84:62:66:
                    3d:2b:73:82:b9:ca:20:58:2f:50:ac:9b:16:0d:cf:
                    2a:08:13:06:82:d3:b2:73:4e:23:8d:32:82:db:da:
                    f5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DA:AC:A9:A6:D3:6A:D1:11:CF:C8:E7:F6:27:9E:3D:37:BE:56:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1f845c77-8f58-354f-a1ec-14e98f2a46e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:e2:cb:09:43:b0:07:4d:5a:48:00:29:a2:71:3f:5d:1f:9f:
         5b:71:d7:a5:d1:f5:2f:45:7c:fe:e6:4e:a5:53:56:77:a0:0c:
         c0:42:23:ed:32:4f:84:9a:e5:7e:d9:2c:fa:68:3a:29:23:27:
         52:94:76:ab:9d:4c:79:01:0f:33:c3:fd:c7:30:87:a3:23:da:
         fe:1c:03:7a:5e:b3:aa:94:66:01:ee:93:b8:c2:aa:05:6c:ad:
         a4:4c:f3:2b:78:a3:fc:ae:95:0d:a6:17:f0:a5:34:d3:4b:69:
         c2:b4:b3:da:7b:a9:fc:78:93:83:42:18:b0:e3:60:f5:03:98:
         c2:cb:35:06:57:ae:07:8e:cf:da:a8:0c:7c:71:9b:b5:d0:81:
         ef:91:69:3f:7b:96:70:c5:7f:f8:54:ed:53:2d:2b:ad:dd:ca:
         cb:6c:00:c6:53:d7:f9:43:8e:d4:e9:b3:0a:c4:bd:31:de:05:
         29:d1:11:9c:9a:73:34:50:3d:3a:23:ef:28:fb:86:cb:41:8a:
         4e:85:5a:8d:d3:06:9b:08:7a:ed:15:b1:45:88:f0:5f:cb:a3:
         12:dc:a5:c8:36:86:07:1e:2c:be:92:a1:82:ca:48:11:15:6d:
         63:24:e0:10:68:e1:34:1a:1d:b4:bf:01:5a:22:7e:dd:e7:66:
         ae:f1:8e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:16:59 2025 by rpki-client