Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e2550f3e-9ad6-3503-bcd2-ad3bccb0dba5.roa
File:                     e2550f3e-9ad6-3503-bcd2-ad3bccb0dba5.roa (raw, json)
Hash identifier:          HXp/l6hWDomfStHIIKJWx0k2DfxRvCSE4aecX67auVs=
Subject key identifier:   C0:EE:F5:A6:1C:2C:EE:EE:F2:68:7F:4E:63:BF:02:39:29:8A:5E:26
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B84E78DCFA61BD2E08A5F5000
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e2550f3e-9ad6-3503-bcd2-ad3bccb0dba5.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     396576
IP address blocks:        2620:74:2a::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:8d:cf:a6:1b:d2:e0:8a:5f:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=089bca1e-23cc-467e-9575-97392526bee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d0:6d:be:7f:59:ef:20:e0:27:62:07:84:b0:
                    6d:56:ba:58:09:de:78:2a:b8:66:ea:e5:46:26:e8:
                    08:4d:31:81:d9:44:ca:20:c2:f5:85:aa:ab:75:e5:
                    85:e4:56:d5:ce:0c:94:15:d2:95:fd:7f:85:a1:92:
                    a0:7f:7d:5e:91:fe:82:6d:c2:76:ba:6a:13:8b:10:
                    59:6d:00:34:a8:b8:0e:fe:ad:c0:fd:7f:81:e7:c4:
                    f9:31:b0:35:78:a7:27:d1:55:93:ec:12:24:ab:13:
                    db:a4:d9:4b:5e:7c:b5:de:ae:29:0e:3b:db:90:55:
                    be:9b:32:3c:da:6d:8a:bd:e5:d1:2c:6f:7e:92:e0:
                    69:9e:66:62:f2:dc:5c:c3:b0:99:34:31:af:1a:82:
                    58:9e:ff:2f:f4:e2:de:ea:45:9f:1e:4d:03:40:97:
                    ad:ba:b9:6a:f5:e6:f1:18:28:50:d1:7b:27:46:6f:
                    eb:58:b1:d7:1d:d9:f8:97:a3:ec:cb:57:24:f4:51:
                    97:84:38:84:75:09:80:32:59:5e:15:c2:47:47:bc:
                    b3:b3:d4:e0:ca:24:ba:15:e1:82:7b:3b:be:05:75:
                    10:65:07:2e:23:92:dc:08:96:a3:b9:76:5d:20:df:
                    9a:a7:b2:29:04:36:46:56:7d:d7:1b:3f:91:82:29:
                    c6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:EE:F5:A6:1C:2C:EE:EE:F2:68:7F:4E:63:BF:02:39:29:8A:5E:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e2550f3e-9ad6-3503-bcd2-ad3bccb0dba5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:8b:55:ed:ee:b1:cf:6b:eb:96:58:a3:4b:3f:45:03:6b:35:
         b1:5e:01:67:8f:6e:d8:fb:db:b0:d1:26:9a:a3:1c:74:c6:12:
         71:89:e4:a8:e4:b5:54:43:cb:ad:ae:60:27:45:48:d6:16:39:
         1a:d8:45:cf:03:e2:08:99:f5:fe:27:2f:02:8d:0d:c0:47:40:
         14:e5:79:6d:00:92:2d:b5:9b:c1:7e:15:94:c1:30:c3:0c:5a:
         82:b0:62:be:53:e4:05:1a:4c:ab:94:40:3f:f0:60:36:32:87:
         93:78:66:71:b3:29:8f:1a:2f:82:5f:9b:f7:ec:ea:07:b5:5f:
         68:54:bf:3d:7d:a9:5c:03:bf:2f:80:82:cc:ea:05:c0:ee:63:
         9e:8f:a5:9b:30:6e:25:6d:25:ea:d9:98:b6:1d:e3:e2:fd:96:
         9b:5f:18:47:9a:87:77:d7:8a:b7:96:e9:f9:48:df:fd:50:08:
         be:7d:b9:e7:55:30:49:60:9e:14:7a:37:63:0b:4e:b0:65:f1:
         53:67:26:a9:12:85:3c:44:99:f9:45:7c:20:9a:dc:74:41:a4:
         02:ef:a6:f4:bf:af:86:28:28:07:ce:7c:a6:83:12:f2:c7:27:
         6b:09:55:d8:86:25:ba:50:17:1c:82:be:10:4a:bc:4d:47:27:
         ad:10:ea:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:17:46 2025 by rpki-client