Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/814bd802-3f18-3aa8-9586-1e59fb89a268.roa
File:                     814bd802-3f18-3aa8-9586-1e59fb89a268.roa (raw, json)
Hash identifier:          dMInSr1W7LsxzPE8OkIMZGP3Nu9pOfRy0i+fROoZTJQ=
Subject key identifier:   DF:87:EB:D8:6F:BD:CD:F4:F8:1A:5F:96:51:00:57:27:85:65:DC:89
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584AF0F158A344727C72E95EAD00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/814bd802-3f18-3aa8-9586-1e59fb89a268.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     36620
IP address blocks:        2620:74:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:58:a3:44:72:7c:72:e9:5e:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=807047a2-a0f0-464c-a86c-023f15abb324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:90:9a:3e:d3:45:35:f7:3a:e5:4d:9a:e0:2a:
                    77:e7:2d:c5:92:76:16:1b:3d:5b:7a:e6:40:f1:f4:
                    ca:5b:19:97:98:70:d1:81:f3:dd:4d:fe:b3:ae:97:
                    b7:9a:e3:41:4d:57:91:0a:51:2e:83:fb:97:0b:e6:
                    5c:f3:90:6e:63:d3:07:3c:a5:a6:7b:76:cf:c8:0d:
                    79:95:97:ca:ef:4f:05:be:6a:3d:38:f8:b2:47:56:
                    68:f2:32:95:dd:74:74:1f:32:ae:2a:ee:ef:fa:c0:
                    03:e9:36:a0:d1:dc:d8:49:e3:ec:8a:59:45:11:e2:
                    61:ec:ca:92:50:77:9d:f5:e3:26:64:75:25:95:46:
                    27:8d:46:67:ad:13:ac:9e:0e:ee:49:8c:6f:a5:fc:
                    a5:87:b7:ec:b8:0a:29:17:3d:b0:29:42:a7:7d:08:
                    8c:2d:ae:e4:f2:0f:85:08:46:03:78:07:d8:bc:b4:
                    77:95:52:a8:b3:ec:44:5b:e0:7a:ea:48:76:d7:aa:
                    05:08:cc:f4:c6:a8:c8:24:aa:2e:f4:78:1b:ac:59:
                    da:28:97:0b:18:16:ba:17:47:8d:f3:6f:ef:cb:91:
                    f6:62:52:cf:f2:0e:7a:15:4b:7b:e7:e4:26:80:ba:
                    f4:d8:5a:87:65:cf:d6:f3:82:64:8d:5a:7f:ab:9d:
                    e2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:87:EB:D8:6F:BD:CD:F4:F8:1A:5F:96:51:00:57:27:85:65:DC:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/814bd802-3f18-3aa8-9586-1e59fb89a268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:c3:c4:09:0b:a4:d6:12:fc:d2:1f:0f:79:5a:a2:78:40:2c:
         64:75:08:b8:74:75:1c:72:2f:57:e5:a6:60:ce:6b:d7:f1:29:
         7d:92:53:78:a1:71:71:9a:ab:17:6c:6c:e3:7c:4c:6a:26:aa:
         35:5c:3e:27:14:ce:15:1e:e7:dc:cc:2e:21:ca:32:79:13:7a:
         7b:ef:ee:ab:d6:c8:37:54:f9:18:a6:2c:55:ee:d8:69:7c:66:
         05:dd:ed:8e:13:4c:7e:da:e4:89:e0:7c:04:b1:32:54:79:48:
         51:15:a1:3e:61:76:83:f5:fd:34:3d:70:fe:02:a5:0f:cd:d0:
         4b:0b:11:f6:4b:2b:3a:33:f4:a8:29:2a:3e:87:6f:49:c9:c8:
         28:d6:cb:d3:7c:d5:f2:48:2c:6d:d2:8d:04:4c:d6:f2:0d:17:
         ae:1e:bd:66:df:a6:39:ac:91:d5:ac:78:06:4b:52:67:cf:d2:
         f6:26:dd:e8:b7:f3:9b:6e:51:da:75:20:a8:e5:23:36:bc:79:
         bd:e9:c0:74:f3:08:98:fa:bc:0f:38:ba:f7:51:f3:ff:da:52:
         41:96:3d:f4:05:cd:d9:23:ef:d9:22:3f:96:e7:cb:d7:f9:a7:
         ec:0d:c5:8f:c2:b6:f9:99:f5:8d:f7:52:23:8c:0c:b7:6f:0f:
         ff:22:11:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:59:39 2025 by rpki-client