Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc175305-bc1d-38b1-94a0-b06f6f4becb9.roa
File:                     cc175305-bc1d-38b1-94a0-b06f6f4becb9.roa (raw, json)
Hash identifier:          uFhguESieLzUY/JixRmbYoorFrXjI/ITB1DT1zrqK9s=
Subject key identifier:   20:0A:80:C4:67:4A:4C:C3:7C:8F:D1:CA:1C:EC:AB:DF:AB:01:E7:67
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849D164FE21853E38CB871C6F80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc175305-bc1d-38b1-94a0-b06f6f4becb9.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     0
IP address blocks:        2620:74:22::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:64:fe:21:85:3e:38:cb:87:1c:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=a005a77b-4483-4db9-85b8-6cc9d2825b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0b:c2:7e:3c:12:06:49:fd:96:52:61:1d:50:
                    36:bb:11:f3:80:36:76:29:a2:b2:de:7e:0f:d9:26:
                    74:7c:38:b6:88:11:89:e0:ce:59:39:58:8a:64:86:
                    e2:c6:93:de:95:62:69:4c:8e:38:78:5a:be:04:8e:
                    a2:2e:56:fd:e6:8f:be:8a:23:b6:eb:b0:16:76:27:
                    57:77:3a:72:84:b3:3c:4a:06:23:cc:19:cc:37:d2:
                    25:b5:85:13:7e:db:ee:11:c4:04:ba:57:bb:a2:5f:
                    f2:f8:1f:59:a3:b7:85:b8:44:f2:07:bb:81:84:11:
                    5f:59:37:c7:f4:6e:b8:01:d3:dc:40:cb:68:3b:d2:
                    77:3e:10:bf:9e:cf:f8:7a:26:6e:ca:d0:8f:74:fe:
                    14:ff:47:3e:e6:f0:96:65:34:96:7a:f3:63:ce:cd:
                    c7:d9:d8:85:fe:38:28:2d:a4:2c:c1:9d:69:95:25:
                    1c:93:37:a3:b0:ce:ff:b7:3b:97:9e:99:d5:b6:18:
                    59:c7:9b:0b:d4:b7:56:40:84:71:89:b4:e7:51:8b:
                    49:32:99:f7:3b:57:70:89:92:2d:64:7d:4e:2f:79:
                    d7:75:39:6e:23:2f:05:27:e3:7a:2c:9b:55:16:07:
                    0e:9d:46:7e:e4:de:31:e4:0b:79:59:42:85:94:f5:
                    1c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0A:80:C4:67:4A:4C:C3:7C:8F:D1:CA:1C:EC:AB:DF:AB:01:E7:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc175305-bc1d-38b1-94a0-b06f6f4becb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:22::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:ec:19:7a:c4:50:68:9a:04:47:6d:39:87:7c:9b:ec:27:fe:
         98:82:1b:37:20:bf:05:37:ef:c2:87:bf:ae:6a:4f:b0:b5:9b:
         3c:4f:0f:2a:57:ec:b3:92:0f:70:41:77:84:7a:48:4a:b9:2e:
         a5:a0:45:c7:5b:3a:bc:97:a2:03:e5:bb:b3:c2:35:bf:d0:6a:
         dc:6b:4e:b2:6c:ca:e4:e6:2b:bb:df:73:21:40:fc:73:a1:5e:
         7a:5f:c2:39:6a:e8:3a:40:90:d3:d2:de:11:1d:33:b9:d3:41:
         d6:23:5d:35:34:d5:e5:08:97:d7:6c:1b:6c:2a:7a:ec:3e:a5:
         74:b5:5b:74:dc:b5:2f:bc:9d:0c:76:44:2a:c6:c5:34:3c:4a:
         4b:fa:84:46:41:f7:6c:30:24:c9:da:fa:e5:86:a8:31:90:7d:
         77:8c:88:2a:be:74:40:57:14:e6:bd:49:fe:18:7f:7a:81:36:
         aa:22:bf:6b:4e:50:2a:ed:45:f1:0e:8c:96:73:a9:15:99:5b:
         af:c7:52:bc:d0:da:e7:b1:bf:85:17:45:d9:0b:98:04:f6:d8:
         a8:84:f7:92:77:da:b8:67:e4:fa:dc:8c:ee:4f:62:b2:82:8b:
         0f:2c:b1:f9:a0:10:c7:59:11:85:2e:78:7d:fb:1b:04:e6:3d:
         8b:bb:9d:30
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnRZP4hhT44y4ccb4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk
YTAwNWE3N2ItNDQ4My00ZGI5LTg1YjgtNmNjOWQyODI1YjQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgvCfjwSBkn9llJhHVA2uxHzgDZ2KaKy3n4P
2SZ0fDi2iBGJ4M5ZOViKZIbixpPelWJpTI44eFq+BI6iLlb95o++iiO267AWdidX
dzpyhLM8SgYjzBnMN9IltYUTftvuEcQEule7ol/y+B9Zo7eFuETyB7uBhBFfWTfH
9G64AdPcQMtoO9J3PhC/ns/4eiZuytCPdP4U/0c+5vCWZTSWevNjzs3H2diF/jgo
LaQswZ1plSUckzejsM7/tzuXnpnVthhZx5sL1LdWQIRxibTnUYtJMpn3O1dwiZIt
ZH1OL3nXdTluIy8FJ+N6LJtVFgcOnUZ+5N4x5At5WUKFlPUchwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCAKgMRnSkzDfI/Ryhzsq9+rAednMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2MxNzUzMDUtYmMxZC0z
OGIxLTk0YTAtYjA2ZjZmNGJlY2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAdAAi
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAXsGXrEUGiaBEdtOYd8m+wn/piCGzcgvwU378KHv65qT7C1mzxP
DypX7LOSD3BBd4R6SEq5LqWgRcdbOryXogPlu7PCNb/QatxrTrJsyuTmK7vfcyFA
/HOhXnpfwjlq6DpAkNPS3hEdM7nTQdYjXTU01eUIl9dsG2wqeuw+pXS1W3TctS+8
nQx2RCrGxTQ8Skv6hEZB92wwJMna+uWGqDGQfXeMiCq+dEBXFOa9Sf4Yf3qBNqoi
v2tOUCrtRfEOjJZzqRWZW6/HUrzQ2uexv4UXRdkLmAT22KiE95J32rhn5PrcjO5P
YrKCiw8ssfmgEMdZEYUueH37GwTmPYu7nTA=
-----END CERTIFICATE-----
Generated at Mon May 12 05:16:03 2025 by rpki-client