Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e34448b6-729b-35b3-aaa8-dd92c624790e.roa
File:                     e34448b6-729b-35b3-aaa8-dd92c624790e.roa (raw, json)
Hash identifier:          ptz6J0BRudl5Smf4lhLk8RyAu3CTX7fZCwiWKwSF8zU=
Subject key identifier:   C6:C5:A3:F9:20:6F:DC:B8:E9:29:71:12:54:6A:B7:3A:40:81:C9:F3
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B84E78E63AEB770E96F955C80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e34448b6-729b-35b3-aaa8-dd92c624790e.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     396614
IP address blocks:        2620:74:2a::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:8e:63:ae:b7:70:e9:6f:95:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=f75d02d6-e07e-4257-8a08-040dbfc557f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:84:31:5c:56:91:93:07:4a:48:84:e1:b0:e2:
                    4e:0c:19:ca:cc:c0:c9:88:97:33:4c:97:d6:c5:d3:
                    71:89:c3:b2:93:25:0d:82:de:ec:d1:6f:e7:ba:a0:
                    b6:47:a5:b3:74:fa:b2:af:3d:58:05:b9:5a:db:21:
                    aa:3d:27:f0:82:11:29:d5:a5:f6:eb:ea:61:67:4d:
                    9e:83:95:5a:8d:74:bc:a5:02:8a:f8:b2:39:87:41:
                    86:65:75:46:f6:71:e8:7b:28:17:bd:ac:b0:65:4b:
                    b9:ee:1d:40:56:d3:fe:49:c7:dc:56:05:38:b8:fa:
                    cc:6a:c5:32:57:b4:e0:06:50:dd:28:58:63:1a:18:
                    fb:e3:66:16:9d:4e:8a:05:e8:80:ca:84:1b:91:5e:
                    90:2f:de:31:ff:ed:16:8d:68:0e:1a:50:e5:b4:a3:
                    45:73:67:03:db:d1:5c:bc:3d:40:5e:48:17:d6:2f:
                    f6:b8:95:94:57:54:9c:3c:82:a3:a7:8f:36:5d:b0:
                    d5:32:b3:d9:00:a3:fc:42:71:7b:3a:bd:e9:3e:1e:
                    5a:f3:e2:c7:ab:45:2a:b6:19:f0:df:cf:2e:09:9e:
                    46:61:cb:4c:7b:f8:4c:bc:35:c0:69:b8:cb:10:bb:
                    a6:01:00:45:1f:dc:01:0f:fd:fc:ef:3a:94:56:44:
                    f1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C5:A3:F9:20:6F:DC:B8:E9:29:71:12:54:6A:B7:3A:40:81:C9:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e34448b6-729b-35b3-aaa8-dd92c624790e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:72:e2:3f:ea:c8:2b:e9:bb:0d:19:47:d2:f7:5e:35:ee:54:
         60:b3:a9:27:3d:bc:f1:80:8d:db:bb:c5:79:7b:bc:0a:6c:b7:
         d0:df:52:7a:85:4f:98:6a:61:94:92:d7:d0:e6:d4:fd:2b:cc:
         26:e3:8d:39:df:e0:41:53:39:d6:02:e6:16:0a:aa:64:fe:af:
         8c:77:73:4c:3c:cb:d9:52:eb:69:2a:1f:2f:7f:62:ee:ec:e8:
         6b:29:d8:d0:9b:91:3e:6b:c6:48:68:df:bd:78:4c:44:81:6f:
         96:61:ac:c8:f5:da:5b:de:40:31:76:59:b3:bf:4b:35:35:a5:
         e3:a9:94:47:ee:f4:13:b0:9a:8b:69:5c:aa:46:67:34:ea:90:
         ab:8f:48:80:61:89:5c:2e:b3:bb:81:79:6c:87:f3:42:e9:5d:
         27:7e:7e:3a:8d:38:f3:d3:9e:2a:40:5e:60:dd:ff:e1:04:36:
         36:70:9f:f6:92:6d:0e:20:dc:49:f3:3f:82:72:e6:81:53:db:
         aa:cb:66:a8:c8:89:b9:cc:1e:1b:d9:53:26:26:77:de:ca:e9:
         a8:92:1f:ea:84:25:34:23:ef:c9:f5:d2:d9:37:d2:f0:7f:05:
         d4:fa:f7:72:80:1c:69:07:be:5d:d0:55:b1:28:7a:fd:6c:d2:
         6a:99:77:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:54:09 2025 by rpki-client