Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc8e2196-6576-3640-a470-60d801270824.roa
File:                     fc8e2196-6576-3640-a470-60d801270824.roa (raw, json)
Hash identifier:          +tcJsdhvAlWFJVQwlGQz726PrEAhbKkB9oW8d7sHiCM=
Subject key identifier:   05:0F:F2:EB:73:EC:D9:A7:EC:97:ED:88:AE:4E:84:82:FF:20:E3:24
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B3556FB537FFBD08609AEBD40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc8e2196-6576-3640-a470-60d801270824.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     36632
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:56:fb:53:7f:fb:d0:86:09:ae:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=a93f0885-1c25-4a81-a059-4b3fcd2f1b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:37:e0:af:f4:80:29:19:23:f7:e3:b4:16:d7:
                    ce:f1:77:ef:f6:f8:7f:51:df:c9:71:de:17:03:59:
                    52:50:0e:f0:13:a4:3a:4c:d0:3c:ec:77:d8:86:e3:
                    4f:89:a0:82:c6:bb:d5:bf:89:ef:03:ec:bd:3c:ae:
                    85:75:c2:c8:9b:88:cb:c2:1e:8e:aa:08:b3:88:94:
                    ea:33:86:99:b0:e3:b8:26:a2:9b:f0:2c:7b:44:9d:
                    f2:c6:06:bf:7a:64:4b:3d:d7:8e:1e:ef:ad:f4:5f:
                    9e:f0:e3:3d:7e:a6:58:7b:cc:c7:e8:d8:a5:cc:55:
                    15:1b:e9:e4:ab:2a:dd:ea:9b:68:b7:60:80:99:19:
                    3c:27:27:b3:e3:e4:9f:46:33:30:f7:dc:be:08:67:
                    d7:f1:11:a7:0d:c9:ba:be:ff:e0:25:91:94:e0:d7:
                    28:d2:bb:bc:d3:18:5d:d1:2d:94:87:35:f6:76:3e:
                    bf:89:8e:ed:a2:2b:76:f5:31:c7:67:0f:f5:ee:35:
                    5a:8c:15:f7:7e:ae:71:62:81:9c:34:db:6d:da:bd:
                    e2:29:94:4a:6b:3c:7b:aa:0b:4e:70:2e:5d:c8:3d:
                    3c:7f:58:c0:6e:c1:50:e1:2b:42:af:11:f1:17:af:
                    a9:8b:54:c7:bb:90:1b:80:1a:72:32:5c:92:4c:0d:
                    78:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0F:F2:EB:73:EC:D9:A7:EC:97:ED:88:AE:4E:84:82:FF:20:E3:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc8e2196-6576-3640-a470-60d801270824.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:00:09:3f:8b:aa:cf:24:38:01:01:88:17:d1:03:3f:e3:1a:
         cb:c2:5e:da:60:51:d5:50:5a:52:73:66:3f:2c:9e:f9:1e:d4:
         2f:78:63:3c:c3:83:b7:76:31:1b:43:09:9a:f1:37:a3:94:67:
         e2:2a:b3:83:6d:bc:bd:0e:63:64:27:a4:20:55:e2:6c:ca:8a:
         a3:9e:f1:df:2e:ba:90:b0:46:9e:7d:7b:de:27:04:1f:0f:2d:
         98:77:40:43:a1:fa:59:f9:ae:fa:d1:97:44:4f:b5:02:ac:6b:
         3e:b1:ce:3c:04:7c:87:f5:0a:5e:b6:82:b2:76:98:54:7e:e1:
         af:d5:21:92:6d:11:df:43:40:a3:45:95:56:d5:9b:7a:ad:c9:
         ea:8c:b4:da:a7:63:49:a7:8e:fd:57:f0:7f:18:42:0c:73:99:
         67:ba:14:d4:91:49:94:28:30:31:90:ac:5f:77:e8:1e:25:f2:
         cb:d4:24:51:23:5a:74:94:4a:da:56:d6:3b:d3:3f:f9:66:9d:
         a0:41:03:94:ea:ee:03:da:59:d7:4d:77:74:25:ec:2e:66:74:
         a3:b2:54:3e:99:f4:b5:eb:aa:69:84:4f:48:ee:07:51:61:60:
         06:81:51:02:d4:a9:f7:59:52:92:a8:df:8f:2d:6b:84:b8:2d:
         61:df:c7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:44:51 2025 by rpki-client