Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3201db48-0245-36e5-820c-66b08716dfdf.roa
File:                     3201db48-0245-36e5-820c-66b08716dfdf.roa (raw, json)
Hash identifier:          0+1dUkMY3xnXwAWcPJ6E3SkOlmor5eabJBuJ4k8mc0Y=
Subject key identifier:   DF:86:34:C8:16:FB:87:B8:2C:F6:E4:9C:72:42:C8:C3:67:8E:6D:8E
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B84E793A8F82EA0AFE9B1C600
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3201db48-0245-36e5-820c-66b08716dfdf.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     36617
IP address blocks:        2620:74:2a::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:93:a8:f8:2e:a0:af:e9:b1:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=e10194ae-ccd1-4bbd-b03d-0c31dda4a88c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:39:b6:c1:0b:92:57:e7:34:e6:27:9c:45:5b:
                    7b:81:d7:7e:e3:22:ca:97:fc:0e:c0:97:6d:ed:34:
                    a5:04:a3:bc:87:76:8d:d4:7b:68:a4:46:4e:b9:9f:
                    50:8d:68:5d:09:23:4e:50:60:ff:9a:55:70:11:98:
                    97:4e:65:4e:c3:ef:6d:2d:40:7f:1a:aa:d4:2a:37:
                    6a:4c:0e:f4:09:a5:e8:2a:c6:0c:12:a2:9e:87:89:
                    28:40:e5:c6:5b:9b:fc:37:fd:70:44:45:99:33:fe:
                    08:69:2b:42:06:85:f6:0b:a6:5f:2b:f6:13:39:26:
                    d7:e3:5f:f6:cc:d3:e5:65:34:74:8d:50:a2:dd:fc:
                    9a:6a:97:21:23:14:1e:78:8b:b1:4b:59:b7:f1:cb:
                    c5:a4:9e:28:3d:66:27:f3:52:79:81:1f:59:e5:23:
                    d1:74:1a:50:31:2b:e2:67:76:26:37:19:4f:6c:f5:
                    97:78:7f:ac:2d:d1:a0:ce:e4:6b:96:e4:73:54:16:
                    69:86:ff:a3:38:0a:69:10:75:d2:5c:12:d7:d3:35:
                    35:2a:91:26:06:69:9c:c4:b0:1c:e6:6d:f1:99:ee:
                    7c:ab:c7:42:de:03:45:b8:77:20:6b:4e:13:b3:fe:
                    5c:3e:47:c2:9a:b8:fb:28:a2:c4:19:f3:60:0c:b8:
                    3b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:86:34:C8:16:FB:87:B8:2C:F6:E4:9C:72:42:C8:C3:67:8E:6D:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3201db48-0245-36e5-820c-66b08716dfdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:b3:76:71:34:4b:85:33:c2:96:87:10:40:8d:41:eb:12:4b:
         11:c3:de:b9:03:46:e3:01:b7:7a:58:ce:02:fe:1b:64:47:be:
         c0:39:52:78:60:18:18:3c:f0:71:39:b3:32:8b:3c:5d:37:1e:
         4d:f2:22:c1:16:22:c1:6d:cf:d5:c3:f0:e4:db:a3:6a:60:86:
         00:d4:86:53:4f:60:01:c3:46:f5:17:4f:8b:28:37:f7:f1:3a:
         eb:b6:44:fc:fc:28:03:d7:9e:37:2d:0c:2d:6e:a9:05:3d:49:
         61:33:3e:bb:6e:d1:1f:05:17:c3:e2:d9:cd:e8:d1:e5:23:13:
         0d:10:ed:33:b9:ca:49:9b:71:f9:7e:2f:43:9d:46:7b:dd:7e:
         69:5f:90:75:8c:3d:d1:9a:64:35:93:d0:c8:55:64:57:f3:09:
         49:2a:65:9d:46:a4:3a:0e:aa:2d:d1:5d:0e:9f:15:d0:cf:34:
         ae:76:17:41:c2:a8:cb:f5:3a:4c:9b:6a:79:c7:19:11:51:2d:
         c7:30:78:e2:28:e3:9a:f4:a9:d5:a1:f2:78:9e:42:5d:18:55:
         0a:e3:5d:e3:e1:41:cb:93:e8:d8:d7:40:8c:a7:43:15:ab:47:
         44:77:08:25:b2:09:b6:e4:e5:7b:67:cb:36:cb:26:af:a5:5a:
         16:b1:47:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:12:16 2025 by rpki-client