Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7a67231-4ad5-32d1-aed9-194dd1ef0faa.roa
File:                     a7a67231-4ad5-32d1-aed9-194dd1ef0faa.roa (raw, json)
Hash identifier:          ghivTm+QvUBY4xHyjy/iI28AYG0uXtwV934kEA97O8g=
Subject key identifier:   06:93:47:07:CA:81:02:C7:B1:BC:2E:88:B8:E2:75:E3:1B:4E:88:88
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849B14A2B2CA0F591EE4F720D80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7a67231-4ad5-32d1-aed9-194dd1ef0faa.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     396552
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:2b:2c:a0:f5:91:ee:4f:72:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=55d4a957-f3be-463f-82f7-fc3ad737c510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c0:b6:91:24:ce:c3:d1:17:d7:95:25:38:2a:
                    ee:c4:9f:96:5f:2b:c7:46:e8:3d:f6:e9:44:54:cb:
                    db:07:7d:4b:1a:08:9f:e6:ed:83:5d:be:16:ec:da:
                    4c:59:ba:eb:96:8c:74:36:d5:0c:e6:0a:a6:9b:ae:
                    af:15:36:6f:9c:81:50:2e:ea:13:b5:c8:55:8d:76:
                    30:88:f1:53:99:28:51:31:f8:a9:99:65:55:e5:c4:
                    53:ba:95:52:eb:2c:3f:fa:03:24:32:58:bf:e9:af:
                    61:ea:62:16:fc:af:38:40:c2:07:05:ec:79:bd:86:
                    5a:f5:27:97:f1:b2:c6:a0:7a:d4:ef:31:83:9c:c6:
                    00:24:dc:81:c4:1e:a4:d5:c9:bd:3b:14:9f:71:2a:
                    f9:68:9e:2e:d8:ea:0d:87:fa:d8:77:f8:83:1d:da:
                    06:1d:6d:e9:6d:b1:9f:a8:6d:f7:0d:07:11:ca:54:
                    46:87:56:e5:5d:bc:0c:e9:76:5a:69:e4:f2:b3:21:
                    6d:3f:1f:18:e5:ad:4b:fe:86:29:a7:d4:ad:1e:55:
                    9b:7b:b4:55:64:6e:90:c8:40:e2:3f:e0:f5:59:ef:
                    c2:2b:da:c8:49:58:ee:83:6a:f7:32:64:00:ad:71:
                    30:2d:12:e2:43:88:29:31:0c:ae:b0:29:59:69:b9:
                    12:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:93:47:07:CA:81:02:C7:B1:BC:2E:88:B8:E2:75:E3:1B:4E:88:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7a67231-4ad5-32d1-aed9-194dd1ef0faa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:9a:78:96:8f:31:03:2d:ba:a6:66:bf:39:b6:ea:d7:75:96:
         70:42:f1:fc:9c:8e:77:10:ab:45:fc:7d:d2:71:08:c6:bb:c9:
         f3:09:df:44:b2:04:29:78:23:b6:db:26:e5:b2:f7:be:6b:a0:
         d5:3b:c1:00:ce:54:c4:30:e2:0f:ba:09:6c:70:4e:87:72:35:
         bb:1f:f3:18:13:6f:6d:d3:9c:d4:68:f9:60:97:ea:f8:3f:3a:
         dc:3a:16:9b:bd:0d:31:fb:8b:c6:49:35:4a:d4:38:29:5c:a9:
         70:2c:b0:64:7e:d6:ad:1d:ee:fd:9f:49:07:52:43:16:f8:35:
         37:3a:5e:05:c7:01:24:dd:0f:5f:c4:2f:43:c7:a6:10:7a:68:
         27:81:05:57:66:ae:a5:b1:44:f5:db:67:09:d1:ae:07:63:cb:
         e5:50:99:6c:98:5b:b2:11:2b:74:77:66:e9:e9:b8:87:a2:d2:
         d4:c0:4b:74:28:df:04:51:eb:34:7d:2d:af:d2:7f:a2:d1:fb:
         9a:d0:27:89:15:d1:7d:3d:33:a7:5b:75:39:91:52:36:17:8a:
         6e:cb:64:8b:8c:40:9c:73:b8:c5:4a:ab:d1:46:c8:58:89:bf:
         0f:54:d4:9f:e3:4f:ab:4b:46:91:1d:56:59:27:8a:82:11:73:
         ba:f5:6c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:45:17 2025 by rpki-client