Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90bfe5eb-cef6-37df-b74b-c4e38a4fb904.roa
File:                     90bfe5eb-cef6-37df-b74b-c4e38a4fb904.roa (raw, json)
Hash identifier:          CT8YOzZ6TMkFvGpJkjT82OoSeXB6mK2ZiGQXT5KT8W8=
Subject key identifier:   34:3B:4B:1E:4B:EA:1D:6F:E8:8E:78:E9:95:0F:2C:3F:18:A9:BF:93
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584975446C76E4EBE935C4E40FC0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90bfe5eb-cef6-37df-b74b-c4e38a4fb904.roa
Signing time:             Tue 08 Apr 2025 13:00:59 +0000
ROA not before:           Tue 08 Apr 2025 13:00:59 +0000
ROA not after:            Mon 07 Jul 2025 13:00:59 +0000
asID:                     19836
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:44:6c:76:e4:eb:e9:35:c4:e4:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr  8 13:00:59 2025 GMT
            Not After : Jul  7 13:00:59 2025 GMT
        Subject: CN=b0542581-6587-4e7b-90c1-81679cc7513a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f0:29:0c:6a:a9:ae:ee:42:42:ad:aa:8f:ca:
                    8f:d3:15:a2:39:da:21:37:24:fa:60:6f:bb:aa:e9:
                    9f:52:40:44:41:0d:32:a9:1a:c3:83:d8:f1:6c:6c:
                    fb:d5:66:23:49:e7:5f:59:6d:8f:0d:0c:0e:4b:ea:
                    84:c4:d5:7d:e0:9a:85:69:9a:d8:41:8c:e5:4b:ba:
                    40:f0:e5:6f:82:55:4e:d5:d4:9d:d0:dc:d6:6f:6a:
                    81:9c:d1:73:6b:e9:7b:08:cd:04:6f:0d:27:4e:49:
                    ba:30:b1:6f:cb:6c:29:db:35:89:72:de:2b:69:2f:
                    8a:cd:0a:7c:4a:36:cb:ea:b7:59:db:c3:08:33:69:
                    ef:cb:a6:b2:61:ec:8a:f7:56:6c:13:a8:9e:af:17:
                    a4:df:3a:e2:f2:34:59:60:f5:87:76:08:65:02:cb:
                    d9:68:da:a2:e7:e7:e1:97:25:98:ad:33:a5:f3:99:
                    4a:02:88:04:4b:2a:3f:44:55:69:55:3f:7c:b4:a9:
                    ac:5f:da:1f:da:32:45:64:71:3b:f7:41:04:be:d1:
                    36:a0:40:d3:c5:15:a9:0e:6f:39:8d:db:e5:32:04:
                    58:ce:59:33:35:e2:7d:00:ce:65:b8:5d:25:cf:a7:
                    55:08:d5:da:56:e4:f2:80:0a:fb:d1:00:74:7c:2e:
                    08:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3B:4B:1E:4B:EA:1D:6F:E8:8E:78:E9:95:0F:2C:3F:18:A9:BF:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90bfe5eb-cef6-37df-b74b-c4e38a4fb904.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a5:4c:01:9c:e0:2b:6a:47:57:b1:3f:ea:bd:2a:97:26:74:
         56:66:2d:e1:4d:0c:38:08:4c:b5:3d:bb:1a:76:71:ec:78:6c:
         3d:95:f6:5e:5d:06:67:61:b8:07:80:f1:67:9e:f5:c6:ee:8b:
         5d:db:3c:26:3e:43:af:17:5d:3e:1f:40:d6:51:5b:27:b8:83:
         bc:1a:20:f8:9f:04:de:b1:08:79:8c:7e:8c:fa:c8:1e:bb:56:
         d5:6c:c8:d2:4f:d8:17:6c:f9:c7:ab:b1:8c:93:d0:34:aa:b6:
         95:88:a5:5a:f8:e3:e1:3b:f4:a8:1a:9f:bd:a7:a5:63:bf:88:
         3e:06:04:db:5b:f4:c1:6a:4d:a8:18:c1:38:59:1d:8e:04:60:
         14:d7:08:1e:8f:f3:1a:35:dd:6d:27:f2:d9:95:c6:04:1b:73:
         eb:a5:26:09:80:d6:b7:c8:57:66:9c:89:49:7b:72:82:9a:a6:
         2c:51:11:f3:c6:2d:f7:b8:f4:96:76:9f:8a:3f:03:98:16:ad:
         f8:5b:ec:a2:91:f7:12:5c:ac:f2:e6:02:f0:1b:74:c2:3f:bd:
         ee:b4:43:3c:3e:4b:14:1c:d8:21:bd:49:9d:76:eb:8c:07:a0:
         20:bb:cf:26:00:c3:a9:b1:f6:2a:c6:32:06:a5:aa:6e:fc:d3:
         c6:28:11:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:30:38 2025 by rpki-client