Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7041fd51-8f7d-3bc6-94dd-c6718b6ccb1a.roa
File:                     7041fd51-8f7d-3bc6-94dd-c6718b6ccb1a.roa (raw, json)
Hash identifier:          7NVSKCL0sBv4EldGm2aJPZqH13qk00aNAvVgznnjECM=
Subject key identifier:   8E:92:8D:E4:BA:11:76:DD:D0:BA:B4:BA:05:70:77:4C:1A:55:44:51
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B35570273235E5D35E1283D80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7041fd51-8f7d-3bc6-94dd-c6718b6ccb1a.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     396541
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:57:02:73:23:5e:5d:35:e1:28:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=02ac9faa-0814-4620-a47a-bbd999fccbf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:be:7e:e5:a4:5e:a9:4c:fa:01:f2:51:b0:b0:
                    e2:08:30:1f:cf:34:0c:04:0e:2b:cf:b4:1a:cf:41:
                    06:77:16:83:62:8f:1e:62:34:73:89:1c:e4:81:5b:
                    eb:e4:31:90:40:34:2d:69:04:c5:6c:38:13:ac:b7:
                    b7:23:e6:0f:6a:37:36:39:28:33:77:83:a5:e2:f5:
                    76:2b:4b:f1:0f:91:14:55:2b:ca:a5:ae:61:77:65:
                    31:c8:6d:0c:2f:a6:8e:de:a8:82:a1:10:bd:f6:12:
                    3a:a0:90:5c:9b:c0:e3:ae:61:d9:c7:65:1f:e0:14:
                    9f:6d:d4:ab:5c:0a:09:70:2c:38:36:a0:20:ac:d5:
                    b7:53:4b:ac:b5:85:2e:c5:6e:2d:c4:fa:fe:89:3f:
                    90:68:e6:6b:61:d2:21:05:6c:ef:e9:fa:d2:9a:e2:
                    ab:94:e0:64:c6:af:c0:86:80:39:7b:1b:a6:7c:fd:
                    7a:10:c1:cf:26:09:72:d9:0c:a8:c3:4d:12:e9:49:
                    31:eb:29:e8:76:3a:8d:73:03:d7:94:90:30:7a:bc:
                    c5:a4:97:c4:fb:c2:79:fc:13:64:ec:e1:7f:78:8f:
                    0e:84:97:23:aa:6b:3d:67:de:ae:d1:66:92:0e:1f:
                    2b:68:70:48:43:a5:61:66:9f:b8:cc:6c:f0:74:4d:
                    81:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:92:8D:E4:BA:11:76:DD:D0:BA:B4:BA:05:70:77:4C:1A:55:44:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7041fd51-8f7d-3bc6-94dd-c6718b6ccb1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:c4:8a:f8:0d:b9:65:38:c9:33:d0:ad:99:99:14:77:a1:af:
         27:1d:d4:42:fe:98:01:43:12:c9:e3:89:9d:0b:77:cf:12:4d:
         59:4e:04:b9:34:52:00:92:20:81:a9:8f:69:4e:b5:58:81:65:
         9b:d6:18:dc:2b:55:13:54:f3:29:13:a4:16:e4:a6:4a:50:b3:
         96:40:80:82:2a:57:a6:32:96:b1:62:f0:b3:9d:5d:88:3d:49:
         6b:92:8e:0f:d6:e6:db:0d:5d:04:fb:16:f7:99:95:3d:e2:80:
         2d:1d:8c:c7:54:03:74:ba:15:97:3b:d9:39:a6:86:65:78:5d:
         f5:de:6f:c8:8f:95:e3:5d:42:cd:a6:fd:1c:e0:ef:28:e7:b4:
         e0:63:c9:f9:8b:ff:b5:75:d5:09:b3:9c:06:0c:1c:9e:f4:ba:
         dd:44:2c:57:64:12:7f:35:b6:78:38:62:1c:60:fc:fd:60:f1:
         12:58:b0:33:e3:c7:ea:e0:23:81:20:f6:b1:a0:cb:6c:02:92:
         24:43:e4:6d:e1:4a:8d:74:19:91:9c:73:c0:52:08:72:d3:25:
         d4:30:df:7a:4c:6e:9e:41:78:a2:af:47:fb:e5:26:9d:11:1f:
         d4:2e:81:fd:70:83:02:1d:d3:8c:fd:68:8f:9e:e8:eb:ab:11:
         51:e2:26:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:57:36 2025 by rpki-client