Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4047d85-600a-3289-80c6-1d4529037de0.roa
File:                     c4047d85-600a-3289-80c6-1d4529037de0.roa (raw, json)
Hash identifier:          Wr/BBXKCRoMWhIWUg/oqLE5malvjyVbUPkoluzZMG/o=
Subject key identifier:   C2:9A:02:15:A9:BD:54:A4:FA:12:74:4E:B2:1C:B5:8F:B7:28:42:7E
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B76F25F56E98D60CF87E06440
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4047d85-600a-3289-80c6-1d4529037de0.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     7342
IP address blocks:        2620:74:6c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:5f:56:e9:8d:60:cf:87:e0:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=48bcf9f5-ef97-41ec-9e19-7aff3025740f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:43:70:74:88:b4:29:07:82:cb:4b:83:be:3b:
                    70:78:9b:a3:08:79:37:de:37:7f:8f:cd:1a:60:04:
                    6c:73:00:f7:92:fe:10:45:30:0d:b5:9c:2d:ef:89:
                    8f:82:dd:5e:2b:2a:7c:78:58:ce:9c:2a:8b:82:fd:
                    83:ee:5e:18:d4:a9:e7:cc:af:3a:9e:19:59:f9:42:
                    9e:b5:a3:ef:f0:0f:0f:bb:8c:66:30:5b:f3:2a:51:
                    0f:a0:73:8a:da:c2:a8:55:b5:17:34:2f:87:e0:f8:
                    cc:29:92:3e:94:f4:09:b0:3b:45:aa:2f:58:01:64:
                    7b:c3:6c:9d:43:1a:7a:ed:b0:b2:ec:1e:93:62:e8:
                    95:39:42:a6:2f:f5:ae:bd:8b:70:fa:38:74:c9:2d:
                    ec:f7:42:11:bb:f5:7b:54:73:ec:7d:a7:ee:5a:eb:
                    19:5f:2d:d1:9f:b0:9d:61:6c:2e:dd:e8:a6:bc:ce:
                    41:7b:df:bd:99:7c:a7:df:ae:fa:69:58:48:d2:4c:
                    14:2e:04:f2:51:cb:03:b1:b9:31:5b:15:66:4e:ad:
                    40:a4:70:4a:fa:8f:8c:1c:69:10:19:e3:89:6f:3b:
                    29:81:ee:ef:59:5d:b1:eb:54:6e:09:11:84:dc:70:
                    6d:68:06:29:50:79:e1:96:71:f4:9b:6c:c5:bf:f9:
                    05:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9A:02:15:A9:BD:54:A4:FA:12:74:4E:B2:1C:B5:8F:B7:28:42:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4047d85-600a-3289-80c6-1d4529037de0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:6c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:a1:20:0f:90:05:bf:a3:ed:6d:dd:2e:2d:c8:e6:08:fc:f0:
         cd:d0:04:16:1e:01:e1:a7:84:11:fd:fd:57:8f:fe:b0:24:c9:
         07:28:f4:9f:17:1f:2e:57:30:cb:7f:17:b7:62:a7:43:db:48:
         eb:2d:0b:61:4f:e3:80:e5:a9:62:6e:73:75:42:dc:2f:b4:46:
         df:a0:15:0a:6a:90:41:6a:4c:d2:cf:9c:c5:a9:e6:33:b0:44:
         a5:5b:c1:fe:1d:f0:42:36:0d:ce:5e:4a:3f:01:05:19:cf:ab:
         54:3c:12:97:72:37:5a:5f:5b:d1:64:45:12:36:dd:85:26:fd:
         23:88:f4:bc:50:27:8d:50:22:4e:52:15:5e:de:0c:c2:55:4d:
         35:6c:10:d0:d0:26:7d:35:31:cb:80:4c:e7:1f:b5:11:cb:86:
         66:bb:7a:bc:fa:a5:c3:4b:92:c1:72:fb:d0:f7:47:19:48:80:
         70:05:28:0c:eb:c3:0d:99:fb:32:27:0e:1d:cd:e3:39:0b:ad:
         5a:fb:9b:cf:ca:59:bc:40:4d:17:21:bd:00:21:78:17:c0:80:
         d0:c9:fd:95:06:00:ea:c5:63:cc:e8:f8:a2:e4:a2:7a:40:04:
         2d:12:5e:fc:ec:5d:a5:a5:b8:a7:8f:68:84:97:e8:47:02:86:
         94:50:54:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:40:24 2025 by rpki-client