Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e6b5198b-8456-38f9-87a5-44f2d7a06b48.roa
File:                     e6b5198b-8456-38f9-87a5-44f2d7a06b48.roa (raw, json)
Hash identifier:          K5i+RJgr+DMfd+/8EZIx3yMCSg+rbq4dIgk0k9GsTXo=
Subject key identifier:   F9:AC:E9:E2:63:02:8B:E2:62:80:10:40:45:9E:19:49:3C:86:AB:5E
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A41106AE7536AC348F90C33C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e6b5198b-8456-38f9-87a5-44f2d7a06b48.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     396616
IP address blocks:        2620:74:2c::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:6a:e7:53:6a:c3:48:f9:0c:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=90c9c5a3-b1b6-4a7c-99f5-9398d56a4f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d2:8e:95:8a:a6:a0:8b:d0:47:5d:08:75:3d:
                    80:dd:bc:c5:27:84:a0:3d:95:aa:a9:f2:4f:5a:fd:
                    5f:b3:38:da:b7:4c:69:39:62:e7:14:cb:88:44:70:
                    11:72:a7:86:e2:64:a5:b4:e6:96:de:48:83:52:39:
                    70:02:89:4e:73:85:48:7e:3f:22:4c:f5:91:67:e3:
                    3e:8e:03:37:55:be:dc:28:b4:aa:8f:6b:b4:27:76:
                    42:43:4b:79:36:f3:3c:62:4d:d4:2c:82:eb:31:37:
                    a9:4b:e5:0c:37:84:9b:37:95:9c:ca:3e:73:b7:28:
                    4c:fd:4a:a6:79:c9:d8:42:6b:2c:8d:2f:08:7f:f8:
                    a6:63:59:96:54:83:23:b8:f4:62:89:c9:b2:eb:ce:
                    75:7f:b5:dc:4b:03:9a:4e:b6:f6:88:35:8d:db:b2:
                    64:97:3c:e0:eb:a8:b6:d2:f6:cf:54:4c:05:e3:f7:
                    1b:9a:0e:25:f8:91:dd:aa:a0:47:9b:2d:45:0f:43:
                    2e:f9:e2:2d:07:9b:20:2c:18:8a:b7:2d:27:da:38:
                    01:2d:14:bf:7e:5b:81:43:3b:d5:bd:e6:6c:13:fe:
                    51:1c:27:7f:bb:dd:bd:c0:55:cc:64:5d:35:ee:4c:
                    f0:6c:a8:1a:cc:de:4e:4e:2a:ad:63:eb:7b:32:ff:
                    c2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AC:E9:E2:63:02:8B:E2:62:80:10:40:45:9E:19:49:3C:86:AB:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e6b5198b-8456-38f9-87a5-44f2d7a06b48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:3e:58:20:ee:ee:c9:13:b0:94:bd:d1:20:38:2a:da:4a:3c:
         f3:f4:1c:ef:13:7f:56:d4:c8:21:cd:77:d9:67:f8:c3:89:86:
         94:2c:80:4a:94:c8:a5:d4:25:5b:78:f2:67:11:a6:39:f3:fd:
         42:e8:1e:ed:2f:ae:ef:16:4f:63:4b:e6:b9:39:86:85:7b:06:
         0e:c0:88:4a:36:66:ec:81:74:5b:88:ae:cd:05:68:75:fe:b7:
         70:a6:79:6a:f2:b9:13:51:5b:47:b9:f5:15:23:f6:c8:77:df:
         90:0c:80:2a:9a:25:83:f2:10:57:de:b0:56:42:fb:24:f0:a3:
         e3:a6:29:ab:02:e4:5b:ce:b9:e6:fe:22:27:34:81:81:88:0d:
         b5:b4:cb:72:79:2a:2c:b6:1d:c6:d1:d2:88:e4:4c:c4:64:8c:
         fa:29:71:59:f1:a0:1b:7d:a3:26:7d:71:ff:50:94:81:ff:a2:
         a4:77:0e:f9:d1:fa:68:00:ed:db:b5:88:2c:4d:47:2c:a0:73:
         c9:a7:bf:e5:72:15:5f:1f:44:44:73:9d:4b:71:91:b0:d5:ee:
         25:4a:44:e8:f1:16:c6:41:67:02:d3:fe:6c:1a:01:31:4f:7c:
         5c:9f:fa:4f:58:03:57:b0:ef:9c:8c:38:ec:46:df:8b:78:56:
         c8:9f:c2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 23:42:33 2025 by rpki-client