Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/17465ba2-db91-322f-8644-c90555cba165.roa
File:                     17465ba2-db91-322f-8644-c90555cba165.roa (raw, json)
Hash identifier:          NiDmwB5JLf0HP8KK6DUGBaDOv8rqoTbkqzVBGW9o8nQ=
Subject key identifier:   A2:13:19:2B:67:8E:3B:28:95:8C:1E:AC:BE:A1:04:56:75:C2:F9:54
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EA79272635EA5CFBC853E2800
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/17465ba2-db91-322f-8644-c90555cba165.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396541
IP address blocks:        2620:74:2c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:72:63:5e:a5:cf:bc:85:3e:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6fab4e99-dbd6-448a-baa0-32b2227e50a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:10:d5:3c:d1:9c:f8:6f:e7:cf:e0:2e:0a:47:
                    01:26:03:90:3a:29:0a:39:70:04:f6:32:d7:f0:91:
                    32:d9:77:a2:ba:40:a1:e8:59:82:a9:61:5d:fa:7e:
                    b7:db:58:84:b7:2a:55:e7:fe:6e:78:f7:e8:01:68:
                    0c:64:b5:06:7b:82:aa:12:0f:bb:ac:d7:22:5d:57:
                    94:2e:aa:79:98:bf:7d:d8:27:f5:29:fc:8b:d6:bf:
                    00:d8:37:39:6b:5d:ec:13:f1:72:92:86:b7:19:58:
                    2c:d9:69:ad:0b:c5:c7:dd:03:4a:93:ee:31:4b:95:
                    88:20:ac:5b:26:f1:c8:53:bb:67:2d:a0:3a:ad:ec:
                    8b:6c:21:94:47:79:59:57:6b:28:01:8e:3d:bf:27:
                    dc:12:58:26:39:f7:56:37:d5:3a:ff:3a:01:17:33:
                    fe:81:71:85:ee:b4:27:93:d5:6a:2b:3b:6f:2b:f6:
                    97:c1:e9:a3:49:bd:06:7e:63:5f:e8:61:e6:3c:5b:
                    d5:d1:a4:6a:ca:30:dc:aa:6f:44:c6:eb:fd:c3:a8:
                    b9:80:65:29:bc:99:ac:04:16:7b:cb:46:31:bb:2f:
                    fe:15:ef:74:99:cd:bb:b7:26:3c:b2:91:67:61:f5:
                    fb:f4:e4:57:b6:43:3b:1d:d9:a2:7e:62:c8:b0:68:
                    64:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:13:19:2B:67:8E:3B:28:95:8C:1E:AC:BE:A1:04:56:75:C2:F9:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/17465ba2-db91-322f-8644-c90555cba165.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:2e:7e:87:74:50:60:8d:e5:a0:51:8e:ca:ac:57:f9:f9:19:
         3a:e0:18:3f:c1:1a:75:4c:34:9e:29:54:0a:62:3e:af:ed:16:
         91:00:f5:c1:1a:51:ab:33:c5:d1:f7:36:43:81:14:e8:b3:53:
         fb:82:1d:57:fc:ce:08:fe:70:c1:e0:07:52:ab:dd:78:bc:c6:
         47:30:fd:36:9b:51:52:f7:bb:32:31:82:10:43:d2:91:f3:62:
         0c:af:5b:17:8d:d1:11:e4:aa:ef:2b:85:bb:55:89:1d:9a:c1:
         62:ed:ce:14:a6:47:d0:80:c4:fe:80:46:22:77:29:e7:c7:ff:
         00:b5:6f:82:35:b0:6c:91:1b:19:95:09:d1:9a:37:ca:52:d3:
         7a:96:a2:82:2e:26:86:3e:49:3d:bf:f8:d3:02:d5:ed:5e:c8:
         7c:58:1f:44:ec:e7:3b:9b:36:63:5d:0b:97:70:2a:4d:48:1f:
         67:43:58:cc:7a:61:03:e1:9b:d7:f5:8c:68:5a:2f:6b:7e:40:
         e4:41:69:ba:39:c2:04:09:38:ef:68:2b:0f:89:43:63:a5:b8:
         b0:86:8f:18:06:99:29:f2:50:99:76:bf:d4:02:37:e4:7f:e8:
         de:6a:e1:87:e8:7b:81:33:60:80:10:ca:f6:d0:ef:0a:5b:e9:
         18:f9:c9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:56:43 2026 by rpki-client