Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51ae7f7d-8444-38cb-9003-b1e6c5d3e2ec.roa
File:                     51ae7f7d-8444-38cb-9003-b1e6c5d3e2ec.roa (raw, json)
Hash identifier:          p+BOi1XYUH2/7iQKNoReha/WONkx/PiIjTa3nZWbDlk=
Subject key identifier:   B9:5F:BF:F5:17:8C:13:25:76:F8:41:0D:94:47:90:6F:12:69:FD:DE
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584AF0F157C2D967459793748F00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51ae7f7d-8444-38cb-9003-b1e6c5d3e2ec.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     36618
IP address blocks:        2620:74:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:57:c2:d9:67:45:97:93:74:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=6c897f56-e417-4d7f-aa32-57f2e0048331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:11:dd:fd:41:15:24:cb:f3:d1:c0:a5:50:47:
                    91:90:1c:2a:00:9b:2f:00:6e:90:e6:6b:2c:b3:50:
                    fc:80:99:f1:b4:69:87:45:4b:99:8b:c9:d8:6f:77:
                    40:99:bb:43:cf:d9:c5:e3:0f:ad:c6:77:5c:43:3a:
                    03:6a:d4:c9:0c:75:96:64:87:73:54:a0:4b:d5:0d:
                    e8:9a:f2:b2:73:97:bc:09:4f:88:0c:94:df:28:12:
                    95:fa:d5:16:a4:1c:38:45:65:ce:2b:8d:44:09:bc:
                    c7:76:a8:21:37:33:80:fa:4d:a2:e0:07:85:af:6f:
                    72:9e:1d:9b:c0:e2:21:91:92:45:59:a0:d3:06:76:
                    c5:f1:9c:60:62:33:52:95:7d:37:cc:97:ce:02:f1:
                    68:da:0f:7d:ce:07:da:31:7d:b8:27:77:a3:c1:3d:
                    61:d4:56:da:ba:05:c5:ba:0b:ff:ec:88:8f:54:5e:
                    7d:1d:a7:ef:0d:56:f6:70:c6:0a:d6:56:48:7d:d1:
                    09:01:d2:d5:bd:e4:ca:7b:25:2d:fb:0a:10:e7:de:
                    9b:f8:97:cd:4d:53:3f:01:41:9a:c9:4a:3c:aa:47:
                    52:68:26:37:3c:58:9b:70:1f:a0:a8:be:c4:12:67:
                    c9:cd:07:e1:df:3d:58:c0:c4:c3:e9:76:4b:b5:fe:
                    92:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:5F:BF:F5:17:8C:13:25:76:F8:41:0D:94:47:90:6F:12:69:FD:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51ae7f7d-8444-38cb-9003-b1e6c5d3e2ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:74:97:36:d1:64:cb:a5:53:2e:ab:36:4c:e2:31:22:d3:b0:
         4c:00:10:7e:ad:f6:e0:44:ad:67:70:54:b8:03:5d:e6:38:7f:
         48:b0:13:da:21:c9:c2:cd:d3:ce:2b:12:25:f3:ce:1f:ef:b0:
         eb:b6:7a:32:30:46:88:f9:bf:bc:a4:ee:79:42:bd:cb:f0:32:
         d9:2e:18:fa:70:08:01:5f:fa:e7:4a:a0:11:28:50:e8:61:a0:
         6b:5a:4c:1b:f4:0b:27:f1:39:a1:33:04:d9:00:45:60:29:b3:
         80:87:35:61:2e:aa:01:c5:bc:98:40:db:6b:8d:95:94:2c:41:
         70:a2:14:fd:ec:e1:58:b1:ff:c2:97:ae:3c:ba:a4:b3:99:57:
         66:e1:06:18:be:24:1a:5f:43:2c:64:fc:5f:26:ab:f7:59:30:
         ca:db:44:90:1a:6f:8d:d2:11:f1:60:5f:e8:1e:18:8b:17:94:
         9a:73:d4:36:bf:77:de:ea:b2:e2:97:c7:7d:9f:66:ee:63:93:
         ad:5e:92:fc:06:3d:c4:e6:b2:ea:e4:f7:af:28:bc:5c:94:d6:
         71:a0:ac:09:fd:cc:c3:b9:9f:6a:fe:19:e2:6c:86:10:fc:c5:
         45:59:0e:d4:85:86:10:f5:a9:2b:a7:4f:a1:ac:9d:59:3b:12:
         e8:0e:a6:c0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VfC2WdFl5N0jwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk
NmM4OTdmNTYtZTQxNy00ZDdmLWFhMzItNTdmMmUwMDQ4MzMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBHd/UEVJMvz0cClUEeRkBwqAJsvAG6Q5mss
s1D8gJnxtGmHRUuZi8nYb3dAmbtDz9nF4w+txndcQzoDatTJDHWWZIdzVKBL1Q3o
mvKyc5e8CU+IDJTfKBKV+tUWpBw4RWXOK41ECbzHdqghNzOA+k2i4AeFr29ynh2b
wOIhkZJFWaDTBnbF8ZxgYjNSlX03zJfOAvFo2g99zgfaMX24J3ejwT1h1FbaugXF
ugv/7IiPVF59HafvDVb2cMYK1lZIfdEJAdLVveTKeyUt+woQ596b+JfNTVM/AUGa
yUo8qkdSaCY3PFibcB+gqL7EEmfJzQfh3z1YwMTD6XZLtf6SWwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLlfv/UXjBMldvhBDZRHkG8Saf3eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTFhZTdmN2QtODQ0NC0z
OGNiLTkwMDMtYjFlNmM1ZDNlMmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAR0lzbRZMulUy6rNkziMSLTsEwAEH6t9uBErWdwVLgDXeY4f0iw
E9ohycLN084rEiXzzh/vsOu2ejIwRoj5v7yk7nlCvcvwMtkuGPpwCAFf+udKoBEo
UOhhoGtaTBv0CyfxOaEzBNkARWAps4CHNWEuqgHFvJhA22uNlZQsQXCiFP3s4Vix
/8KXrjy6pLOZV2bhBhi+JBpfQyxk/F8mq/dZMMrbRJAab43SEfFgX+geGIsXlJpz
1Da/d97qsuKXx32fZu5jk61ekvwGPcTmsurk968ovFyU1nGgrAn9zMO5n2r+GeJs
hhD8xUVZDtSFhhD1qSunT6GsnVk7EugOpsA=
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:04:40 2025 by rpki-client