Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24c9d165-210e-380f-a67a-4f9463283777.roa
File:                     24c9d165-210e-380f-a67a-4f9463283777.roa (raw, json)
Hash identifier:          3wpxF8r+zgTKpMFpeXLbhf2mWhIgVYfc++NjHUUhrFg=
Subject key identifier:   DD:C3:04:1C:DC:61:FE:3C:30:24:72:83:56:D7:D5:5D:27:C0:5B:64
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B715CD9B5F3D4054E82D4B080
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24c9d165-210e-380f-a67a-4f9463283777.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     396547
IP address blocks:        2620:74:2b::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:d9:b5:f3:d4:05:4e:82:d4:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=068fab2c-e6a0-4c98-8a5e-b9c766323642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d0:f6:d9:ca:1f:71:ac:b7:09:02:37:37:3f:
                    c8:5f:24:52:38:d6:09:ae:47:59:5c:82:d9:09:a7:
                    92:06:6e:4e:b7:17:b2:64:ec:1b:b4:22:c9:97:f9:
                    09:3d:5a:78:d1:1a:5b:a9:34:b0:21:52:03:99:ad:
                    17:c8:5f:71:5c:d6:75:7d:b8:36:72:b3:bb:ff:e8:
                    cc:bb:ba:6b:81:fd:b2:52:c7:22:ef:1c:71:ae:52:
                    b5:25:76:19:bc:e7:7b:33:01:32:c9:24:0d:64:1b:
                    a8:d1:8a:96:42:5b:ef:78:ea:02:7a:ef:f9:1b:b4:
                    61:74:ae:75:9c:56:c8:bf:a6:9f:2f:a5:4e:c5:0b:
                    e5:0e:44:50:d6:b9:d4:75:a3:dd:69:fe:bc:bd:da:
                    b7:45:5f:e3:f9:a0:f6:e4:22:1c:08:14:49:dc:c3:
                    ff:23:77:69:a5:c7:a9:25:4e:f1:53:df:4a:58:a9:
                    1d:dd:95:d4:26:ad:87:74:78:fc:68:6f:43:28:aa:
                    5c:57:e4:20:30:2c:c3:0a:f2:a7:38:fd:67:55:a4:
                    74:d1:12:ec:5e:72:f8:ca:44:86:8e:ad:63:65:62:
                    03:7a:58:ac:92:3c:b5:6b:81:a4:2d:70:a9:51:13:
                    0d:f4:f1:44:1a:ad:82:93:91:37:8e:c0:44:d6:25:
                    44:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C3:04:1C:DC:61:FE:3C:30:24:72:83:56:D7:D5:5D:27:C0:5B:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24c9d165-210e-380f-a67a-4f9463283777.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:0f:8c:15:bf:70:9c:f4:06:0c:5e:e1:04:dc:84:46:03:da:
         22:10:12:dc:6b:e0:75:4c:ff:f5:10:1a:b9:df:59:c9:5e:cd:
         db:3b:70:44:3f:48:9a:28:2e:50:18:d1:aa:06:a5:ca:c3:95:
         41:5d:8e:c3:08:57:2d:31:3f:98:9f:99:52:5e:14:c0:dc:9b:
         8e:43:17:96:e2:29:9d:55:9b:4c:0e:e6:cf:4f:64:eb:3f:2c:
         b9:5c:00:e1:14:1a:8d:80:2e:3e:6d:c0:59:8e:f6:51:af:fd:
         a5:3c:03:c5:30:5a:da:2a:8f:04:aa:6b:cb:89:ee:d9:98:04:
         93:2a:78:f8:ea:97:c4:d5:f4:d6:29:67:39:9b:01:8e:e1:8d:
         3c:04:93:23:0f:90:02:2e:71:5b:2b:82:75:00:32:6e:02:59:
         88:10:d4:ca:23:9a:74:ae:14:05:a8:8d:da:07:64:b6:f3:1f:
         24:32:0b:d3:3f:88:05:38:62:e4:97:9e:3e:0f:8f:ff:68:ef:
         7d:63:45:61:1b:25:49:a2:d7:d2:73:6e:4d:ea:5e:d7:4f:35:
         c8:8c:35:d4:c1:a2:c5:65:62:d7:21:d5:2e:64:6f:f4:2a:c5:
         ba:f3:5a:92:55:62:3d:cc:03:65:ec:50:f9:ec:6e:61:55:22:
         02:30:19:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:25:51 2025 by rpki-client