Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fffe64cd-8bd0-3bee-8d1a-a408a66c2895.roa
File:                     fffe64cd-8bd0-3bee-8d1a-a408a66c2895.roa (raw, json)
Hash identifier:          CE6gz+EaNfnKxgxU41aWEyAi4Cu9eITQ2FveHwINCWU=
Subject key identifier:   7B:C0:78:11:8B:57:40:2F:57:21:A6:07:F0:57:F5:FD:58:6D:60:2C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B620229E58EEE5F373EDE2D00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fffe64cd-8bd0-3bee-8d1a-a408a66c2895.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     36623
IP address blocks:        2620:74:2b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:29:e5:8e:ee:5f:37:3e:de:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=68a40cc9-777a-4a16-b5a5-1c8669ab8e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a4:ec:58:d0:b2:3e:d8:4f:b4:13:bc:dc:fe:
                    d1:3c:3e:42:c0:7a:47:92:f4:d0:2c:62:56:9d:bc:
                    72:72:a4:8b:a5:77:16:83:48:ce:ca:66:5b:58:28:
                    7e:76:79:ef:ca:e2:77:d6:fa:df:49:85:a9:57:ca:
                    4c:c2:25:6a:3b:ef:04:2b:9c:07:67:27:af:2f:df:
                    d6:71:2a:47:82:93:29:db:1c:97:3c:a2:dd:02:91:
                    1b:ea:60:a0:de:8f:c5:d8:bd:61:a6:7d:80:de:cf:
                    72:11:25:4e:ec:54:08:b2:66:8d:8d:ba:50:35:34:
                    64:e3:12:06:2e:15:cc:37:3c:f5:bd:c6:28:c5:2c:
                    3e:7d:0a:bf:0d:8c:fd:df:f1:35:39:37:dc:5b:1b:
                    f0:f0:07:89:4c:da:4f:d1:27:b1:be:93:46:b0:fa:
                    e3:f0:32:18:30:1e:4c:ab:0e:29:ea:16:57:6a:5e:
                    60:74:54:bd:e9:10:96:9c:23:5e:78:73:7b:27:57:
                    cb:36:2d:01:96:fe:d6:eb:42:f7:5e:f8:6d:7b:35:
                    bf:02:74:dd:6b:b4:02:d4:59:cc:ae:b0:bf:11:6a:
                    6e:09:f6:94:ff:34:3a:d9:7c:27:3c:fc:85:8f:99:
                    d9:36:f0:3e:15:38:ec:9d:f9:41:e2:a5:8f:d1:18:
                    99:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C0:78:11:8B:57:40:2F:57:21:A6:07:F0:57:F5:FD:58:6D:60:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fffe64cd-8bd0-3bee-8d1a-a408a66c2895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:b1:4d:76:cd:63:ff:65:8f:26:44:2b:53:1d:5a:e6:8e:8d:
         cc:f5:33:cb:ce:f8:3b:3a:4d:76:e3:56:d7:cc:47:05:e8:62:
         d8:91:0b:73:88:9d:0a:bb:54:37:58:3d:6d:aa:1f:7f:ab:16:
         ac:cb:e7:cc:97:c0:d5:18:33:74:a8:a8:51:54:1a:1d:1e:9a:
         33:ad:d3:96:e9:b0:62:c1:06:f6:e8:f2:91:3a:23:8b:49:fc:
         41:83:73:10:41:db:4b:89:5a:6e:00:5e:c1:d9:42:51:cc:bf:
         d4:22:08:ee:85:42:d5:86:f2:cc:e2:f1:cc:51:66:ac:d0:81:
         02:10:5c:96:5f:f8:f2:3a:a2:3c:ca:28:e5:f8:74:f8:34:15:
         ac:e5:b1:37:46:34:82:b0:e7:b2:01:c2:6d:3f:ab:13:34:6c:
         a5:9f:4f:94:42:3b:08:64:d1:6b:e6:29:f5:9c:3e:9f:0b:07:
         3a:bf:47:11:f1:03:fc:60:e1:fa:6c:00:48:c1:4b:15:2d:0b:
         ad:2d:b2:09:9e:58:69:f5:cb:d2:ba:41:a5:ff:3c:7a:da:c9:
         da:43:79:f8:11:a3:2b:74:80:cc:6d:49:e0:03:5b:9c:b6:c6:
         40:83:cf:2c:47:46:dc:ed:0a:45:ac:af:dd:8b:ee:f9:ad:88:
         1d:86:e0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:30:26 2025 by rpki-client