Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b9f693c7-6405-3ae6-967b-0a21712926ba.roa
File:                     b9f693c7-6405-3ae6-967b-0a21712926ba.roa (raw, json)
Hash identifier:          erWjxTAiYwZaBp4tWwH5NOdPkSXDMc4FpS9CLA5EpEw=
Subject key identifier:   2D:29:D7:0D:FE:46:99:1E:8D:6B:07:98:54:40:02:71:23:B7:C8:DF
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849B14A2FB5CBE5F635A2CE8700
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b9f693c7-6405-3ae6-967b-0a21712926ba.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     396827
IP address blocks:        2620:74:2b::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:2f:b5:cb:e5:f6:35:a2:ce:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=95552b5e-cfd6-465c-9bd5-a437455bc953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a1:ba:d0:3c:66:f9:16:80:88:10:29:ce:1d:
                    ea:5d:db:f0:da:67:23:15:9a:1d:70:8e:dd:1d:9b:
                    1f:d8:05:92:d5:62:a1:14:a2:0a:77:1b:1b:42:8a:
                    d2:73:b1:d6:3f:c9:01:36:92:a5:1c:3b:56:bd:13:
                    00:d2:7d:36:e0:7b:03:7f:d1:2b:a9:f2:07:11:b7:
                    9a:bf:49:e4:cb:64:59:23:c6:e4:c4:df:b1:99:ab:
                    b8:37:41:98:37:4a:ff:6a:ae:ea:55:5f:48:ba:16:
                    73:91:f2:0e:2d:d9:da:c4:17:e0:dc:25:7e:85:a3:
                    aa:c1:77:24:be:d8:55:0b:0d:53:bc:ca:59:c2:65:
                    4c:da:8a:16:8d:43:14:48:ee:90:63:4f:f8:7b:eb:
                    c9:31:a7:e1:06:7e:78:3d:ac:59:6d:86:6c:44:e0:
                    3c:5d:6e:14:42:84:11:a5:42:50:11:4d:ac:b1:eb:
                    5b:a7:16:30:bb:10:a4:71:67:86:d3:e4:21:d8:2a:
                    5a:53:ee:67:8b:e0:42:33:87:89:b8:30:f2:3e:cc:
                    44:45:97:eb:74:b7:fe:70:3b:2d:f0:1e:91:1a:d8:
                    92:48:7f:dc:de:4a:a3:81:0b:a3:83:d6:4b:05:56:
                    95:85:3d:d5:70:7e:35:0b:df:f0:80:18:45:63:96:
                    06:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:29:D7:0D:FE:46:99:1E:8D:6B:07:98:54:40:02:71:23:B7:C8:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b9f693c7-6405-3ae6-967b-0a21712926ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:ff:fd:86:75:a5:35:52:b5:81:73:ba:96:41:32:dc:ed:b3:
         2f:43:d2:70:db:37:4c:b5:18:34:f2:2b:d7:80:ca:b8:10:de:
         55:1b:39:93:3d:35:5c:dd:48:3a:c1:96:8a:08:8a:65:f4:3f:
         04:cf:0f:d6:8c:75:ec:04:63:65:b6:1e:dd:17:87:1f:da:81:
         e7:24:6e:61:cb:3e:fd:75:83:5b:6f:71:5d:74:82:b7:bf:a5:
         a0:87:fd:08:56:6b:c1:20:0b:e2:13:2b:ef:b8:c9:43:5a:5d:
         b9:84:1f:82:bd:95:6b:ea:23:0d:90:cd:7f:d6:e4:77:14:29:
         27:b6:09:c8:02:7c:a7:cf:21:11:9e:d1:6a:52:9e:15:9b:22:
         b6:e4:de:ca:74:cf:30:60:9f:c2:8f:a0:0d:27:9c:58:a3:e8:
         2e:f6:14:12:f6:57:44:51:93:a6:b6:21:e7:d4:6e:80:ea:52:
         ec:d2:b3:ba:30:d2:e4:89:0c:e5:ab:0d:a3:28:3b:0b:51:58:
         fd:f1:26:74:a1:00:fc:b0:4c:a2:18:88:56:e3:73:46:e9:ec:
         40:54:30:95:9b:6b:e2:31:3c:26:6a:23:fe:dd:aa:e1:51:5c:
         5b:b6:4d:51:f2:ff:7c:c1:e9:4b:f4:4a:45:da:23:3a:69:6f:
         f7:b1:83:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:37:32 2025 by rpki-client