Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e3d177f-5a3c-3e24-8d49-655e82be96a0.roa
File:                     3e3d177f-5a3c-3e24-8d49-655e82be96a0.roa (raw, json)
Hash identifier:          4knz1C8naILjmSOUaK/UJjnKu2uLxVwrCtOayFbwHyc=
Subject key identifier:   D9:25:53:86:60:DF:0E:A9:6B:14:6B:8D:A2:6A:62:1F:F4:0B:A2:2F
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849C4D4D60F19ECA3C0D44E8800
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e3d177f-5a3c-3e24-8d49-655e82be96a0.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     396615
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:d6:0f:19:ec:a3:c0:d4:4e:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=6d84f83d-e0b4-4f48-be3b-b8500fd91feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:de:61:f5:19:46:1f:e7:2e:9d:89:4f:05:17:
                    b2:18:19:e6:15:07:3a:90:fa:df:bd:b4:90:12:c1:
                    cc:95:ed:72:b8:c2:e2:af:74:74:9b:e8:d8:b3:df:
                    44:28:c4:5a:6e:04:84:6d:c7:6d:7a:b3:f2:83:66:
                    b6:f7:3c:a7:c5:9d:4b:81:8e:94:80:78:88:78:d4:
                    10:6e:98:f4:33:65:5a:d6:4b:ba:89:e2:fb:e4:4d:
                    86:cf:f5:08:46:ca:44:93:55:50:5c:46:4d:b5:77:
                    cb:84:80:5e:11:9e:ce:a5:5e:ee:ba:44:ff:69:a0:
                    04:36:a3:3b:0e:c6:a6:b5:6e:04:3e:6a:29:18:95:
                    22:32:b4:f2:03:16:02:31:c4:84:8a:09:70:94:22:
                    84:5f:45:fd:31:41:04:3b:1e:f4:8d:58:f9:66:05:
                    76:c8:10:cd:0d:d2:b2:e6:55:f0:19:70:50:0f:0d:
                    75:d4:1e:b4:77:bd:3c:7d:e4:a4:d2:33:a8:2a:28:
                    6c:e9:97:3c:80:23:ad:47:bd:f1:8a:4c:5b:ed:64:
                    d1:9f:38:b3:14:d1:c4:91:93:75:68:d4:40:ff:67:
                    e6:0d:fc:2b:ed:f1:eb:bc:9f:f8:a2:4c:2f:4b:ae:
                    bd:3d:96:10:8d:4e:9b:3e:de:cf:29:5e:9d:f4:c8:
                    79:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:25:53:86:60:DF:0E:A9:6B:14:6B:8D:A2:6A:62:1F:F4:0B:A2:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e3d177f-5a3c-3e24-8d49-655e82be96a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:a3:2b:1a:59:d8:b0:57:22:1b:6f:a9:cf:6a:4b:e5:d5:2f:
         f3:21:a0:07:f5:50:c4:bc:00:d5:5a:54:a4:e9:3c:83:6f:d4:
         b2:c5:c3:8d:e4:48:87:a8:a7:19:b0:bc:77:f6:45:10:fd:af:
         81:46:7d:b9:dd:51:cb:b6:3b:bf:5a:fc:23:99:79:4f:05:27:
         70:46:86:0b:c0:6e:8a:5b:1f:ac:ed:8c:c0:84:7c:a9:da:6f:
         52:98:d6:55:63:15:c2:2f:2a:79:9e:02:3e:29:bb:21:37:89:
         9e:54:00:ee:4a:c5:ad:f6:9a:16:1c:f5:97:28:3d:7e:a3:8d:
         d2:1b:9f:9f:d9:55:b7:ca:de:a4:a8:12:4d:21:07:92:d8:3b:
         60:94:b0:b5:de:b6:61:53:7d:b6:a3:74:72:29:f0:03:30:ef:
         8b:f3:8d:59:e0:f8:b4:58:fe:00:73:5b:35:2f:30:2a:7a:a8:
         29:33:49:00:db:80:24:a4:b0:90:fa:5c:29:98:77:65:78:c4:
         26:0a:84:d0:7d:db:dd:24:4e:8d:77:f5:b1:67:bc:7a:1f:3e:
         f3:d7:1c:76:db:df:4c:e8:4b:eb:63:d7:62:cc:27:72:fb:bf:
         a5:48:a0:5d:de:fb:0e:74:17:a7:f8:93:bc:0f:1d:b4:af:39:
         80:34:9d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:25:59 2025 by rpki-client