Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e31ec23-a710-3224-8cde-ff28da3fd155.roa
File:                     8e31ec23-a710-3224-8cde-ff28da3fd155.roa (raw, json)
Hash identifier:          3zdGrQl6XmIbWcZ23gJhTb2ePP7f+jYNuuO6xPEQ0no=
Subject key identifier:   31:32:89:76:60:9A:52:EF:C8:65:7C:E1:F9:36:AE:BC:E9:D7:9E:3E
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849B14A3051EEB294252E0C1800
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e31ec23-a710-3224-8cde-ff28da3fd155.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     396543
IP address blocks:        2620:74:2b::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:30:51:ee:b2:94:25:2e:0c:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=2875f89e-0ade-48ed-a152-95e873cb16b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:96:96:47:5d:66:42:89:37:c1:c7:09:7a:41:
                    40:75:47:39:5d:1c:6b:89:25:28:ff:62:55:9c:08:
                    22:29:58:8d:42:51:66:34:95:7c:65:5a:58:f8:d3:
                    6c:0d:7c:58:16:e8:03:53:68:86:d2:93:a8:ea:3d:
                    f9:ae:9b:64:cd:f5:36:42:4d:ad:e8:ee:5f:87:9f:
                    75:99:04:96:c8:a0:73:98:f7:23:8a:cb:5c:58:f9:
                    82:89:a1:a0:8b:84:e5:d7:7c:7b:58:3f:9c:ea:05:
                    89:02:3d:37:b6:0d:df:c3:8a:fa:ab:61:7c:8e:4a:
                    73:76:6f:6e:02:4a:c2:12:fa:05:30:73:35:ea:de:
                    83:49:09:d3:43:eb:0d:fc:87:a8:95:fe:02:a2:b2:
                    27:a2:1f:48:1d:f8:af:bb:36:63:b1:c0:06:9d:3d:
                    76:6e:66:05:0d:d2:35:4e:79:dc:0b:cd:5c:95:94:
                    e0:7b:f4:11:46:cd:b5:17:a8:70:14:c0:52:42:24:
                    49:e1:f0:62:06:cc:af:14:4e:4e:cf:d7:12:4a:87:
                    71:92:7a:42:2d:85:61:09:bd:27:bf:c5:aa:db:3c:
                    83:1d:c0:b1:8f:b6:ce:fa:80:4f:61:01:b6:73:2e:
                    18:27:78:c3:76:ac:0a:3a:1e:a1:ab:de:6e:c2:16:
                    12:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:32:89:76:60:9A:52:EF:C8:65:7C:E1:F9:36:AE:BC:E9:D7:9E:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e31ec23-a710-3224-8cde-ff28da3fd155.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:88:ac:4d:ba:7a:3d:dc:26:c8:05:a2:49:5c:48:4d:a7:72:
         05:ff:60:f5:cd:c5:56:f7:aa:d1:3a:22:06:51:e7:a1:74:61:
         c5:28:1c:1c:24:3a:b1:15:18:60:11:7d:1f:35:a8:c4:f3:91:
         87:43:6c:e1:a8:ef:9f:b4:06:64:41:e5:cd:ef:ba:eb:dc:38:
         58:6f:38:06:ad:2f:4e:b7:55:94:3c:f6:2d:61:e8:99:ee:54:
         3e:6e:5a:6a:35:9a:56:33:2e:56:75:1e:39:4f:5c:bc:c2:f0:
         28:06:e6:63:91:af:3f:f1:ca:3c:fd:e2:e8:4b:24:f2:c3:83:
         8d:b0:f5:0f:8c:43:a9:d9:fd:46:b0:9d:56:31:c5:3b:a3:20:
         10:a6:ce:c9:cd:90:c2:24:ec:32:a9:c6:01:c1:f4:de:c7:ad:
         c2:ce:64:fc:40:c7:d8:ab:cb:9f:ad:2b:43:e2:03:32:31:d7:
         ab:26:48:68:33:b5:e9:8d:3d:4c:ea:39:77:09:a6:fd:4e:5f:
         d4:3d:d1:65:f2:a4:ec:98:0a:22:16:55:f7:39:53:96:ec:3a:
         f5:87:86:d4:bd:42:ee:b9:80:c0:8e:c4:36:5b:35:a6:9c:eb:
         77:f3:af:ec:3f:82:2e:eb:a0:e8:c3:3d:95:0b:fe:ab:09:64:
         c3:99:ad:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:38:40 2025 by rpki-client