Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d261f34-293e-3f41-a767-d6925c2719c5.roa
File:                     5d261f34-293e-3f41-a767-d6925c2719c5.roa (raw, json)
Hash identifier:          byvMjJWsayLZn3Sv3dovkEwOn2hWURKYytPqOwbUpRw=
Subject key identifier:   CB:A3:8B:E1:C9:1D:E6:95:BE:48:29:5D:5A:05:14:1E:66:52:F1:B1
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B4E77247BA8E00671D4652840
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d261f34-293e-3f41-a767-d6925c2719c5.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     7342
IP address blocks:        2620:74:32::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:24:7b:a8:e0:06:71:d4:65:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=eed88302-f2a2-4fc1-87a6-3f3a6e1562af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:03:78:1d:60:3e:17:b4:5a:e0:97:90:0d:7d:
                    34:d0:07:ba:4d:59:9c:00:62:bc:4d:44:82:3c:57:
                    32:18:77:1d:c7:10:38:bd:12:80:61:d2:03:75:4a:
                    c4:00:c5:d4:ee:08:1d:36:cc:ba:57:b9:2e:80:df:
                    ba:47:76:3e:7a:e5:92:7e:40:27:5a:7a:d3:6d:9a:
                    95:9a:d7:76:e8:d1:eb:fe:59:11:ad:59:42:87:91:
                    c5:42:c5:8a:fb:cb:c0:9a:c8:9e:27:c0:ba:55:d1:
                    4e:d4:fd:44:5e:31:0a:3f:45:f8:95:21:0e:bc:aa:
                    78:c0:4d:45:ca:68:b3:14:db:51:6c:b7:d1:d4:a9:
                    65:0c:06:f7:56:aa:6c:6a:7c:1a:63:2e:0b:22:1b:
                    7b:22:f7:44:98:63:3b:72:83:11:72:a0:b5:6f:03:
                    81:b7:55:6a:8f:db:36:b8:64:9e:58:75:46:1a:6b:
                    db:2d:12:34:10:4c:44:f0:40:ad:9f:98:54:c3:55:
                    21:c7:b2:b9:47:78:36:4f:4d:96:30:ba:79:78:98:
                    1a:58:bd:3b:41:83:f7:9d:57:15:66:bb:b9:d3:75:
                    57:de:4d:df:ae:09:44:00:a1:dc:96:2d:b8:1b:9b:
                    ea:30:3e:a2:8d:12:2b:12:07:70:df:8b:22:04:4e:
                    78:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A3:8B:E1:C9:1D:E6:95:BE:48:29:5D:5A:05:14:1E:66:52:F1:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d261f34-293e-3f41-a767-d6925c2719c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:32::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:94:09:a1:c4:33:a6:c5:32:24:55:3c:ab:8f:13:15:dd:aa:
         f5:cb:9a:43:8f:81:ae:13:d6:e5:0c:d7:9b:fc:10:c5:a6:31:
         16:fb:0d:5c:36:0e:15:10:cc:ca:e9:48:1c:73:f2:da:14:3a:
         d6:b0:29:9c:20:ad:81:eb:8a:fc:c5:90:ec:75:ef:71:f6:5c:
         ee:93:4c:52:ff:4f:d9:65:24:8c:09:0c:dc:44:f8:25:a7:49:
         8a:59:ff:9b:10:c7:14:6a:c9:4b:1c:15:38:0c:68:f2:96:01:
         24:9e:ec:cf:98:90:3d:e3:e0:bf:21:61:d5:8d:c1:e1:bd:b4:
         9f:b7:65:04:e3:c5:a4:bf:74:ae:ee:bb:b9:25:76:68:51:56:
         8f:75:2b:14:b4:8c:20:e0:f6:df:19:06:17:cf:b2:73:66:1c:
         20:a8:b8:fb:2f:ad:a3:b0:7a:bd:21:f8:98:12:58:84:c6:7e:
         aa:09:6b:aa:94:7f:23:0a:64:99:08:ac:ab:85:61:35:e9:34:
         bf:64:ce:b7:a4:b5:5a:55:2a:3e:0d:66:4b:86:c2:8d:f5:54:
         cb:d3:11:4c:87:a4:e9:92:a1:f2:93:c1:ca:5e:cb:06:3a:d4:
         34:43:59:dd:20:a4:a9:bb:5e:69:0c:05:89:a6:5a:98:3d:e8:
         16:8a:02:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:40:08 2025 by rpki-client