Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5473407f-1560-3248-a859-84614f8959ff.roa
File:                     5473407f-1560-3248-a859-84614f8959ff.roa (raw, json)
Hash identifier:          grukngCglqZ1i1F7Ah0xAjmRXqFXYGAtzjh9GWIF+PQ=
Subject key identifier:   6B:A3:E7:AB:4C:E4:4B:D2:7D:29:F6:FD:06:07:C9:B4:02:87:B2:52
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B715CE08AC6DDD81DD8ACDA40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5473407f-1560-3248-a859-84614f8959ff.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     396612
IP address blocks:        2620:74:2b::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:e0:8a:c6:dd:d8:1d:d8:ac:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=1cf9c319-22a3-4453-97be-0ac51748a3d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7c:ba:6b:72:b1:08:81:bd:5d:28:7e:99:66:
                    bf:ed:2b:87:37:3c:c5:96:dc:95:c4:08:dd:ee:38:
                    c9:70:d9:e6:d4:be:d9:36:9a:8f:59:f7:c6:a3:e4:
                    4d:90:a8:a0:cd:7a:db:11:73:9d:f8:0b:b4:83:30:
                    d9:2a:55:43:17:6b:f2:e6:00:e4:66:5b:46:ef:d0:
                    a3:ad:41:36:d9:fc:90:b6:e8:a6:15:75:6b:f5:eb:
                    ea:17:08:99:1a:48:2a:a1:17:ca:1b:55:c4:01:03:
                    db:2f:ca:e4:5c:01:aa:cf:5a:62:7b:d8:b6:3e:69:
                    f5:a4:61:ec:fb:4a:0f:40:1d:2a:6f:e6:fc:13:55:
                    d9:fb:97:bd:9b:70:c1:f2:ea:84:39:53:74:f6:d4:
                    0a:7e:3d:e6:c4:d3:76:cc:db:15:d0:17:ed:30:0d:
                    24:af:65:66:c1:20:31:df:da:87:07:52:34:87:41:
                    49:9c:b1:49:6b:3e:0b:55:18:4b:cb:ea:95:36:89:
                    b8:94:37:df:c3:5b:38:25:fa:f0:ba:bd:6c:bc:c2:
                    af:be:88:1b:3f:f0:ab:3f:11:5c:66:67:1f:3e:dd:
                    99:1e:56:28:77:86:95:96:70:db:8f:82:dd:0d:62:
                    a9:14:45:db:d1:ac:ab:d4:d7:ca:c6:53:90:85:e2:
                    aa:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A3:E7:AB:4C:E4:4B:D2:7D:29:F6:FD:06:07:C9:B4:02:87:B2:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5473407f-1560-3248-a859-84614f8959ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:a9:a2:60:9e:44:c0:78:45:57:2f:87:1f:e2:b9:ea:1d:f4:
         10:29:60:0e:3e:ba:87:6d:ab:33:da:cb:e4:c6:d6:e2:7a:4d:
         29:58:4a:da:59:20:19:48:21:f6:3c:dc:d8:2b:2f:20:71:af:
         82:3e:03:62:3f:99:50:f2:17:6d:bd:c9:57:67:66:60:26:f1:
         21:93:32:4a:62:ef:35:77:06:82:d8:68:59:c6:3f:f4:db:c8:
         4f:f8:db:c8:76:c4:5e:0f:1c:1d:b8:a0:05:21:82:02:b5:6e:
         08:ac:03:d9:e7:fe:df:fd:f5:82:a8:a7:47:7a:87:16:35:f7:
         0f:01:04:e8:db:8f:b6:f4:57:46:3b:35:bb:5a:d9:61:80:4c:
         11:08:8a:50:68:9b:72:5f:29:89:f5:56:d4:4b:ad:fc:e5:9b:
         f9:38:b7:b9:a2:b8:76:96:c5:2e:f0:7f:8f:28:95:c3:ab:ac:
         43:08:20:45:69:4f:b5:4e:24:96:f3:72:1e:83:3d:63:f3:10:
         2e:71:82:2e:1e:93:25:02:f0:19:1a:19:77:11:c2:1a:7a:83:
         9d:3f:bb:00:52:90:e0:7d:62:8a:35:3e:b7:42:ee:78:aa:db:
         ce:f5:f6:17:db:d8:75:46:bb:0c:ad:ff:db:9f:f0:1b:d4:7c:
         df:eb:23:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:31:14 2025 by rpki-client