Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ee173f5e-e560-3dd5-b017-7e54e27ba63a.roa
File:                     ee173f5e-e560-3dd5-b017-7e54e27ba63a.roa (raw, json)
Hash identifier:          O4s2JDBcPC0mr39VEzm2ocv4Y6wEppNSWguM2NUozIU=
Subject key identifier:   89:BB:1D:45:00:5D:09:3F:1D:7A:56:AE:8D:22:96:CA:3B:90:F4:3F
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B715CE4338784AD4E599FF600
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ee173f5e-e560-3dd5-b017-7e54e27ba63a.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     396586
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:e4:33:87:84:ad:4e:59:9f:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=807cb1ce-cfcb-4c29-941e-8ae1acdc987f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:db:93:b4:d3:66:74:df:00:a9:27:02:d0:c7:
                    8f:b2:bd:8d:94:c3:2d:9c:93:b9:1b:6f:8d:4c:10:
                    01:47:dd:5b:75:3a:6f:c1:aa:5c:03:83:d2:21:39:
                    32:2c:be:3c:90:e3:21:e5:b4:46:42:93:ab:74:02:
                    71:09:d3:1b:04:43:a4:36:f1:ee:c2:32:d7:45:c3:
                    3d:47:bc:b0:93:f9:93:5a:94:c4:5f:27:e1:59:7a:
                    8c:76:73:4f:1a:f8:30:e8:ec:52:56:7d:22:ff:4e:
                    47:13:20:d2:83:a9:9f:17:8f:59:cc:34:54:a9:95:
                    d3:37:15:e7:7d:a5:5b:18:4b:3d:0d:59:cd:df:5f:
                    9c:08:57:4e:5a:4b:df:11:ba:72:b1:77:c8:51:bf:
                    8b:1b:6d:0a:96:d0:37:d8:98:35:00:f8:15:64:d2:
                    91:15:0f:92:0d:93:8f:30:ce:ab:5e:0b:24:2a:92:
                    83:17:79:68:aa:8b:cc:41:96:33:3a:4f:b3:2b:61:
                    c4:9a:0e:26:ef:04:fe:b6:f1:9a:c7:75:1f:8b:c1:
                    fc:32:5a:d7:8e:56:a6:58:a2:45:eb:87:ae:6e:ae:
                    4d:e5:e7:28:10:8c:e3:57:ca:fa:9b:82:08:b4:cd:
                    02:76:50:b5:e1:5c:fd:fd:9e:0e:da:b5:6a:8b:71:
                    18:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BB:1D:45:00:5D:09:3F:1D:7A:56:AE:8D:22:96:CA:3B:90:F4:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ee173f5e-e560-3dd5-b017-7e54e27ba63a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:0c:e9:f6:a8:df:27:9a:7c:ad:a1:3e:e2:15:71:00:a7:9c:
         15:9c:78:4f:dc:f6:13:bf:cd:25:fe:19:d5:0a:c0:09:e0:9c:
         0b:39:b0:9c:5f:8a:ec:92:03:8c:ba:46:04:43:e0:15:c3:8e:
         a8:b4:b9:c7:6c:ce:6c:11:46:be:e8:d6:fe:9d:38:f4:66:61:
         4d:d4:b2:04:63:ed:c6:b6:e4:c9:4d:de:14:da:36:86:76:e6:
         62:43:7d:48:a3:e5:9c:e2:41:ad:45:1f:4e:df:0d:8a:a5:36:
         de:f3:67:8d:ce:33:e5:ec:e4:cf:61:80:07:96:0d:1f:3c:cc:
         a7:e2:56:11:76:8f:78:90:e6:bc:f3:b6:f0:1c:52:3a:4f:24:
         29:c3:0c:eb:87:24:7f:92:a6:5e:00:bb:18:b5:54:1c:aa:3f:
         b8:2a:e6:2c:fc:04:e5:a4:45:22:e8:64:2f:57:a5:ea:64:1a:
         24:e8:7f:92:ba:d0:74:a8:1a:a3:e3:54:c0:26:c0:fa:03:d1:
         5a:7b:45:18:12:bf:f6:74:20:f9:c1:16:c8:b0:6f:63:f6:94:
         14:0d:6f:2b:bd:ef:51:4e:0b:1a:48:b5:cc:6e:8e:4b:c0:2c:
         99:e3:24:0e:04:6e:55:6e:fb:6b:f7:fd:14:ce:60:6c:cc:62:
         59:d4:57:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:17:58 2025 by rpki-client