Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2995bfba-a4b2-3a5f-8242-f2dd3d80dd3a.roa
File:                     2995bfba-a4b2-3a5f-8242-f2dd3d80dd3a.roa (raw, json)
Hash identifier:          9QI32WtgtmZ/gzYJ8qHR1+1WzChWOV512LFNzs1DOAs=
Subject key identifier:   58:F0:91:59:F1:C2:8E:60:B4:17:34:E8:66:D2:99:DD:84:BF:7C:90
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B3556FD0A0D48562376B96700
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2995bfba-a4b2-3a5f-8242-f2dd3d80dd3a.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     396594
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:56:fd:0a:0d:48:56:23:76:b9:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=08ba026f-242b-49c0-8373-a2f522ce679f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0c:01:5c:0e:1e:8b:c2:f2:1e:5b:b7:af:9f:
                    e3:fc:5a:54:a6:fc:61:af:41:36:41:51:7e:4a:aa:
                    74:9b:60:7f:60:a4:23:86:5c:0a:a9:51:95:19:6e:
                    68:dd:45:37:a9:79:05:54:c3:cc:86:43:b3:da:d8:
                    1a:9f:40:36:61:be:bd:17:8c:39:ba:eb:90:06:81:
                    36:6a:0a:af:cc:ea:9c:1b:d8:0c:4f:65:a1:50:18:
                    c3:7a:eb:0c:20:89:38:ff:e1:f8:5b:ac:ed:60:a7:
                    39:12:c9:cb:22:ae:82:45:d2:46:3b:e7:67:35:15:
                    8c:3b:c0:6e:b7:3d:e6:15:9c:97:d4:c1:7e:e7:a8:
                    03:b5:4f:c8:9a:da:e1:9c:c1:01:d5:15:3e:16:d6:
                    2b:22:6e:2c:45:5b:4b:8f:ba:2d:8a:ce:05:d4:c7:
                    25:1d:65:62:92:43:c0:d6:af:a8:ea:f8:cc:8d:92:
                    c4:a8:99:a3:fa:ce:c5:86:36:d9:13:61:ba:15:5e:
                    4b:7b:df:67:d3:54:25:61:15:38:dd:94:c6:47:d4:
                    79:97:a7:fc:57:d5:8a:01:50:04:49:82:ef:47:74:
                    56:15:7b:37:90:e3:bf:cd:be:98:3b:4f:5e:d2:3e:
                    84:c5:87:06:3e:2c:70:82:60:ab:15:4e:cb:dd:46:
                    14:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F0:91:59:F1:C2:8E:60:B4:17:34:E8:66:D2:99:DD:84:BF:7C:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2995bfba-a4b2-3a5f-8242-f2dd3d80dd3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:94:31:33:1f:e1:78:ff:18:15:ce:a0:78:79:b6:cf:05:ad:
         1c:ab:c9:e8:c4:fc:ce:b9:85:57:99:f0:d8:3a:fa:35:de:1a:
         e0:82:3b:26:06:1a:07:7d:c2:10:56:c4:c1:d0:47:a5:98:fb:
         68:cd:98:cb:a6:c8:ed:03:31:a8:b2:ba:9c:c3:b3:61:6f:2e:
         1b:87:48:3b:4b:ee:fd:a7:62:2f:ca:4e:8a:cd:42:1b:08:78:
         b9:9f:ee:20:93:0e:63:33:17:7c:e5:46:34:0c:45:f7:48:ad:
         6e:c7:6e:fb:5d:d0:7d:79:f7:93:41:6f:1b:9e:60:63:49:79:
         66:3a:ad:28:b6:c8:d3:78:8e:92:cd:c4:89:83:6a:59:10:c2:
         28:dd:ca:e9:c2:07:09:13:e8:f5:e1:35:de:31:d8:0f:3f:92:
         ba:ae:3c:2b:18:e5:06:8b:b3:ff:99:01:86:bd:99:b0:f4:4f:
         d7:a5:0a:b8:cb:1d:1d:6d:c5:40:6e:53:3a:e6:31:6a:f2:e0:
         b4:27:93:c1:2b:f6:39:54:0c:28:1b:18:71:78:ec:a3:88:a1:
         ae:66:96:37:e8:7c:2f:7f:e5:cd:6b:a1:63:ac:9a:e9:26:55:
         fc:63:77:4a:8e:95:6e:8f:01:66:95:45:c1:15:ec:9b:3b:37:
         ee:10:be:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:43:49 2025 by rpki-client