Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70ed49c8-8a01-36c7-865c-4a415f74f74d.roa
File:                     70ed49c8-8a01-36c7-865c-4a415f74f74d.roa (raw, json)
Hash identifier:          bNcdrZInqLm2/N9oqgxw+CDEw9jKvoe92Mfn5xCR0NY=
Subject key identifier:   67:5C:1B:F5:84:DE:01:52:80:49:DE:03:82:FE:8B:86:1C:16:5A:C8
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849C4D4DAA6F02CBDE586341D00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70ed49c8-8a01-36c7-865c-4a415f74f74d.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     396541
IP address blocks:        2620:74:2a::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:da:a6:f0:2c:bd:e5:86:34:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=7e110d66-d5c4-47ca-9159-2d5064e7a84d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:69:bd:b4:f1:6a:17:17:3f:32:13:99:11:2c:
                    11:a3:5b:9d:2f:66:d8:a0:1b:f3:8e:08:59:16:78:
                    60:4c:23:4d:71:13:5e:a1:1c:8f:0b:39:06:d0:2f:
                    30:ee:57:de:70:76:84:f8:55:8c:db:b5:3e:68:00:
                    a2:1f:76:4e:6a:26:a2:a8:8d:64:17:18:00:97:33:
                    34:85:cb:8c:45:56:f7:ca:e4:f4:e3:65:c8:29:03:
                    49:d2:1e:08:85:d1:49:7a:95:1f:3e:b1:3b:a0:f5:
                    55:d1:32:00:08:3e:1c:d2:77:32:fb:b5:db:47:45:
                    a1:e9:97:60:61:82:ec:d4:3e:fa:2f:15:1a:78:7e:
                    7f:76:ac:ff:27:8c:27:a3:c2:77:c0:07:11:f6:01:
                    fd:0f:f0:15:5c:00:54:b0:bf:13:b2:b6:67:5a:78:
                    eb:81:71:a8:8c:29:ba:83:6e:7e:34:02:2f:43:52:
                    77:22:0e:b4:34:19:26:26:a6:cc:66:2e:9d:ba:42:
                    c9:05:64:f9:11:2e:3f:39:3b:da:f4:f3:46:e4:ac:
                    b5:65:a9:b2:8c:e1:f4:5e:f6:75:4c:4b:6f:98:8d:
                    36:fc:2a:85:66:b6:69:8a:0d:24:a4:36:b2:d3:a7:
                    90:67:6d:c1:d7:98:3e:85:3b:64:59:60:cb:eb:a1:
                    3f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5C:1B:F5:84:DE:01:52:80:49:DE:03:82:FE:8B:86:1C:16:5A:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70ed49c8-8a01-36c7-865c-4a415f74f74d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:2b:e5:b7:5b:30:40:08:51:65:ff:fd:e0:7f:e8:27:20:67:
         ab:27:76:1a:1c:17:56:7b:7c:8f:1a:c4:f8:fc:28:d1:96:97:
         cd:8e:57:fb:46:b3:a1:9f:5f:db:9f:7e:fc:91:db:fe:ae:7d:
         1d:28:94:4f:87:c8:ff:13:b9:4e:e8:24:48:d5:1a:f0:c6:d2:
         a4:8e:97:b1:6d:f2:f1:f9:8c:c7:d1:98:94:d3:e8:99:0d:04:
         7d:d5:6c:68:c4:6b:66:d9:c8:be:67:eb:18:9f:5e:e8:ba:86:
         c1:20:af:1a:3c:bc:1e:5d:64:cd:b7:80:cb:54:74:dd:3b:99:
         bf:81:2c:6e:68:6c:e6:f5:e5:cd:b7:e6:79:47:e7:d0:0a:0a:
         24:1d:64:04:f8:2a:45:a7:ea:cd:8c:ca:b1:16:74:44:58:11:
         02:56:a9:8c:54:be:31:9f:af:e5:a6:e7:91:bc:3b:7c:8e:fa:
         13:49:5c:75:b5:9f:14:9b:45:4e:e2:d8:30:07:3f:32:d9:dd:
         37:6c:e5:b7:e6:af:12:b7:15:8e:22:c9:c8:47:c8:7b:62:b5:
         9e:b1:9c:b8:52:af:08:6a:8f:6c:bb:03:47:7a:9e:cb:74:12:
         8a:8a:6b:64:7d:99:48:74:49:38:12:40:de:4e:32:53:c0:90:
         07:9d:45:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:28:07 2025 by rpki-client