Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9fcd2454-9f76-3156-bfea-bbb222159bea.roa
File:                     9fcd2454-9f76-3156-bfea-bbb222159bea.roa (raw, json)
Hash identifier:          otu004FkQW31QX23AAsisfysfyzcDEoRgaBmo0dN284=
Subject key identifier:   25:0D:C2:B4:01:39:A4:19:21:8C:2E:F6:B6:F4:83:B5:0C:1A:AA:06
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B715CDB893FCFF7CCCF8D4D40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9fcd2454-9f76-3156-bfea-bbb222159bea.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     396571
IP address blocks:        2620:74:2b::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:db:89:3f:cf:f7:cc:cf:8d:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=7de78f8d-165f-44cb-b147-a7c2ef94ad25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f1:e2:87:ec:40:ee:1d:d4:49:2c:78:fc:b3:
                    ae:d2:4c:4f:b3:cd:88:a7:c3:31:fe:12:df:5c:a4:
                    4a:fd:08:45:fd:8f:32:9c:f2:4d:2d:35:4c:96:e4:
                    99:f6:38:29:9c:e3:7a:82:dc:b6:3e:ee:95:6a:d2:
                    2a:2f:66:33:05:a2:d5:b1:53:8d:ca:6b:4c:cb:33:
                    15:e2:9e:65:43:fa:e5:c1:00:1d:da:3d:05:91:4c:
                    36:44:c8:5f:b1:61:b0:17:a7:60:eb:44:60:37:c7:
                    a7:07:ba:89:7c:b9:17:60:a6:eb:a4:50:aa:45:42:
                    35:c4:f6:8a:7c:db:af:7e:70:54:60:4d:f1:29:f0:
                    3d:c5:6e:8c:e0:d4:ae:08:a1:da:3e:a7:b0:42:33:
                    e8:cd:0e:34:76:ec:51:ec:ba:af:d3:44:7b:55:17:
                    e1:e6:73:74:30:07:e9:9c:a1:b4:5a:be:8a:3c:19:
                    cc:c7:0b:b6:02:03:de:de:64:6b:2e:86:d0:e0:1e:
                    e7:10:87:23:3c:f7:18:8d:31:de:66:d3:74:c3:b3:
                    3b:c6:ea:de:cd:32:f9:0e:d1:13:60:1c:63:ea:13:
                    2a:5c:e5:d9:b9:c0:f0:62:30:55:87:88:41:e0:32:
                    c8:c7:03:d2:98:64:60:d1:49:d5:a5:e5:63:6f:7b:
                    7e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0D:C2:B4:01:39:A4:19:21:8C:2E:F6:B6:F4:83:B5:0C:1A:AA:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9fcd2454-9f76-3156-bfea-bbb222159bea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:74:21:be:1d:0b:d7:b0:85:0a:90:3f:63:88:5c:b3:1e:ec:
         a4:53:7a:25:64:8c:e0:38:d6:e1:fa:04:b9:7f:f7:42:fd:a3:
         b0:46:85:8d:0f:a7:31:0b:a5:06:69:59:9e:4c:72:ce:86:21:
         7e:2b:90:7f:19:f5:5a:29:5d:a8:a8:aa:f7:4f:04:95:fc:eb:
         d4:6e:0b:d1:a0:6a:f3:39:5c:3e:ec:9a:2a:b4:1f:9d:b9:b0:
         0c:a8:70:48:ca:9d:9f:83:1e:be:64:cb:ce:89:22:d4:26:aa:
         81:d8:46:f7:2d:9e:01:69:34:15:9b:42:ee:ac:fa:20:11:51:
         5f:6b:05:17:eb:02:5b:8f:55:44:f9:75:f7:74:c3:e0:72:58:
         4f:98:16:de:fb:20:65:14:f1:e2:70:34:65:d0:3e:f8:8a:07:
         64:a7:91:1d:5a:a4:40:8b:e2:97:62:b4:4d:07:41:00:e6:f9:
         01:e6:0c:54:a6:3b:a7:0b:0f:b8:9d:ef:52:81:ba:23:78:f1:
         db:01:95:cd:49:f8:04:e6:17:14:c9:f0:c5:36:62:47:cc:e2:
         3f:4b:16:ab:d0:57:6a:c8:83:75:73:33:fc:58:bd:95:7c:e3:
         eb:4d:93:37:80:b3:54:7d:02:67:57:a3:43:8d:b1:de:88:fd:
         4b:10:86:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:38:38 2025 by rpki-client