Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/72762dea-d783-383b-aff2-3c1c534522c6.roa
File:                     72762dea-d783-383b-aff2-3c1c534522c6.roa (raw, json)
Hash identifier:          psRykV/fc06ePRzxV1mk4f4xad0iGhdFUHdNzp+rsDA=
Subject key identifier:   EA:C8:19:F5:4A:7C:85:F6:F8:EA:C0:12:94:05:23:73:78:83:EC:C6
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B84E791EE0C9B93E0950C13C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/72762dea-d783-383b-aff2-3c1c534522c6.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     396574
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:91:ee:0c:9b:93:e0:95:0c:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=08b2592c-358b-4b00-83b8-8496a9d71829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b2:4c:bd:a4:76:7e:bf:7a:47:9b:ac:17:27:
                    42:c5:c7:79:dd:b4:68:87:b5:50:a7:33:a4:21:cf:
                    98:82:4a:74:86:4c:d0:47:41:2b:f9:15:55:d2:7f:
                    ec:9c:cf:4c:21:7e:6c:ac:72:dc:e9:0f:1d:69:78:
                    95:ec:ae:bf:fd:32:58:c0:e9:a1:a5:a0:2d:f5:9b:
                    8c:b7:2c:ae:0f:f9:3e:3c:99:7c:10:88:b0:46:67:
                    c5:ce:67:82:a1:61:4a:2d:08:13:a3:40:2c:c1:49:
                    72:2a:5e:73:eb:1d:aa:3c:a7:2f:79:f7:aa:17:86:
                    04:38:b3:2e:11:7f:1f:b0:fc:dc:00:24:f3:46:3c:
                    ca:02:c1:a9:e4:44:07:32:fe:7f:85:fd:41:4f:e4:
                    12:7e:78:cf:25:f1:2d:3a:5d:e8:ad:a9:db:48:36:
                    99:0d:20:22:56:e5:da:9d:e4:12:68:32:f5:ac:6e:
                    f0:09:f3:f2:3c:a1:4b:53:84:a6:a0:3f:27:29:6e:
                    44:80:26:e4:8c:21:c1:93:66:5d:73:6e:8a:e4:59:
                    2e:f0:dc:e9:8b:03:94:30:6b:f7:33:6e:b7:94:74:
                    57:a4:4a:64:ae:91:fc:e9:ee:bd:7b:f3:74:8c:b3:
                    a2:6e:82:3d:00:ef:4a:e5:e8:9d:fe:01:11:eb:5a:
                    0e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C8:19:F5:4A:7C:85:F6:F8:EA:C0:12:94:05:23:73:78:83:EC:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/72762dea-d783-383b-aff2-3c1c534522c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:5c:23:a6:ec:18:99:51:c1:e9:b2:fa:20:9b:ba:21:e7:5e:
         e1:1b:9d:94:b5:db:ac:dc:39:cd:a9:48:93:75:30:3b:78:19:
         ee:44:35:f2:33:b3:9d:db:9c:88:4e:05:2f:05:d3:01:c8:ae:
         d0:53:2a:bb:55:95:cc:a8:57:53:51:76:22:bd:fe:41:05:a6:
         2a:76:a1:a7:d4:47:b2:de:8a:42:b8:9a:28:05:a3:b4:91:dd:
         3f:6f:82:30:b2:c0:20:23:ea:40:5a:68:4a:83:c5:aa:89:8a:
         6d:38:ae:c6:13:59:8c:4b:4f:0c:f5:d6:e5:e8:45:7e:de:92:
         4a:10:5e:98:9e:1c:d3:4e:8d:4b:0d:d0:01:7e:22:2d:5f:59:
         8f:27:88:b1:47:96:67:98:04:5e:a7:7d:c4:33:dc:05:7d:90:
         8a:2e:cf:60:19:c6:59:80:e0:30:03:b9:86:02:8d:80:d0:63:
         aa:14:4d:09:71:30:1b:a2:7c:7b:8c:e3:17:b9:2b:2c:e2:b1:
         f2:17:63:43:48:1c:87:1d:35:20:36:e5:91:ef:3f:97:d7:ab:
         99:14:d4:40:84:97:03:14:3c:89:2f:eb:1e:e6:a8:09:39:0c:
         0e:eb:cc:3c:1a:6c:ae:0e:c0:dd:0b:f7:33:c9:28:05:8a:41:
         1f:c8:6a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:31:24 2025 by rpki-client