Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e15c81d5-6407-3b60-8100-0495755e46ec.roa
File:                     e15c81d5-6407-3b60-8100-0495755e46ec.roa (raw, json)
Hash identifier:          UDzjnhzWXaC42R0D49mP1vqyZX1S11vVbQKuB/GfAO0=
Subject key identifier:   D8:AD:47:58:BD:9F:D5:76:FD:7D:7C:2B:2C:53:D6:06:E0:30:9D:04
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B84E78E98CD4F07CD19B10F00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e15c81d5-6407-3b60-8100-0495755e46ec.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     396541
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:8e:98:cd:4f:07:cd:19:b1:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=65f0ed4c-c415-4175-b961-e9388ca68bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c8:f5:86:a9:f1:35:29:e1:ed:a5:5c:81:e3:
                    ed:3a:7b:46:28:f0:90:61:34:c5:5a:db:9d:fe:58:
                    f0:d0:9f:a5:ea:31:2e:1d:5a:1e:21:b4:f1:59:40:
                    d0:fd:27:90:0f:44:0e:08:39:37:7f:a9:83:b8:02:
                    f8:09:74:de:df:0d:06:fe:5a:53:31:1f:cf:a9:24:
                    5b:cb:10:83:21:7e:02:4b:7f:b2:ef:cb:7c:d7:2f:
                    e6:ac:3b:c9:b6:2b:d2:57:22:c0:32:3b:dd:6f:0c:
                    96:e7:91:d7:a9:7f:6b:5b:ce:3a:69:9b:c4:e8:66:
                    ae:96:34:17:8b:85:34:a1:89:1f:1c:e6:c2:18:89:
                    ef:89:c8:87:36:65:66:0f:77:de:5f:c5:71:d0:68:
                    a7:33:7d:c8:df:bd:0e:30:d9:f2:ae:2b:81:f2:a0:
                    c0:86:32:43:09:ad:3a:b1:c7:80:6e:b9:af:30:fe:
                    22:e7:e4:92:da:3a:31:f4:ca:1e:9d:5d:a0:fb:7a:
                    01:2b:cd:b1:1c:c4:06:fe:78:7d:b4:2e:98:8b:0c:
                    72:4e:26:01:2e:ab:3a:ba:f6:40:1b:6c:d4:41:51:
                    92:91:cc:ae:8e:ae:7e:11:35:7f:2b:18:73:eb:71:
                    91:6e:ff:cf:bb:52:8b:42:16:d6:46:2a:e6:f2:b8:
                    88:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AD:47:58:BD:9F:D5:76:FD:7D:7C:2B:2C:53:D6:06:E0:30:9D:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e15c81d5-6407-3b60-8100-0495755e46ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:e9:b5:42:a8:86:b1:28:f3:97:cd:cd:77:c3:f6:ec:10:02:
         00:d2:b8:8e:c8:b8:e7:31:06:a0:b7:02:a2:4d:b1:45:e7:09:
         d7:1b:24:5f:08:34:d6:04:db:8a:50:b7:0f:d7:96:0e:d1:a0:
         5b:28:0f:03:73:65:73:35:ae:87:94:20:30:9f:5f:cb:64:9f:
         4e:2e:96:ad:41:e7:5c:bb:7d:a2:90:71:98:83:2a:19:5e:f0:
         4f:65:ca:85:82:ea:1c:b3:d7:f7:f7:24:2c:e5:b2:b7:87:be:
         b3:c3:75:77:56:2a:4d:c4:fa:28:60:ca:74:40:e1:a4:b5:e6:
         50:4e:c6:41:b2:69:20:d4:20:1c:4a:40:04:cb:b8:9e:d6:d4:
         6c:43:08:3d:75:71:3e:69:db:5a:50:4c:fd:0e:59:09:13:0f:
         45:5c:7b:fa:3f:62:e1:c6:5a:6a:aa:79:e9:71:e7:f8:4a:ba:
         f7:82:5f:b2:4d:f9:6f:5e:48:8c:46:23:ce:12:d4:4f:25:57:
         84:6c:1a:8f:cd:49:96:f5:57:d9:93:4b:ec:db:aa:61:81:9c:
         d9:5a:30:a8:c7:94:45:55:7c:09:ad:43:45:6f:3a:53:58:98:
         44:5d:30:bb:6a:83:69:78:5b:d6:bf:3f:ce:b4:1b:b4:b3:a4:
         23:1c:ed:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:58:24 2025 by rpki-client