Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/180fb14a-7f05-31e9-99bb-13a4086b648b.roa
File:                     180fb14a-7f05-31e9-99bb-13a4086b648b.roa (raw, json)
Hash identifier:          CTzzQpbyEPwfb+7uIY/cbYGuks0IzSz34nUx93RZDAo=
Subject key identifier:   41:81:3D:45:90:9F:F8:F1:D2:92:F1:BC:97:E5:AA:88:8C:4A:B9:BA
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EB2B1D4E8B4D6B346E113AF80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/180fb14a-7f05-31e9-99bb-13a4086b648b.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     397208
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:d4:e8:b4:d6:b3:46:e1:13:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=88e1370a-8243-4a7c-97c9-abfed45db568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e1:6a:bd:9a:b6:01:88:6a:0e:6f:76:72:34:
                    8c:7d:03:6e:0a:cb:ca:dc:d6:f0:58:7a:36:51:4d:
                    0a:77:67:67:07:fa:91:0d:85:02:fb:cf:55:63:19:
                    be:aa:35:38:a1:ea:ae:9b:58:b3:9d:52:38:b5:d8:
                    d4:c7:70:41:54:ac:7e:f3:f5:28:3f:63:b9:24:05:
                    ea:7e:76:a7:2d:aa:a1:f4:35:b5:b3:6b:78:a8:08:
                    f3:59:d5:d7:b5:80:85:96:96:17:f5:bf:71:70:82:
                    3e:ff:c2:f1:90:85:22:21:3b:48:1f:d2:50:b7:cf:
                    5b:4b:b1:9d:8d:e1:7f:c5:69:b6:ca:a7:32:70:4a:
                    c9:cf:0b:b9:9e:9a:51:79:34:56:e2:77:86:f3:aa:
                    7d:22:7d:a0:cc:3d:13:98:93:4e:bc:ad:ad:31:d2:
                    2e:b5:10:12:0c:a3:f8:3a:1f:3c:43:54:50:9f:da:
                    4b:d6:1a:4d:0b:33:d1:4f:62:50:19:31:01:13:ae:
                    43:29:b5:76:a5:f7:5b:ab:91:83:e7:17:02:a4:d1:
                    59:88:bc:45:24:49:19:2c:f7:86:51:f4:a2:32:71:
                    66:d8:65:74:86:0d:aa:a9:af:b5:82:2a:7c:77:a4:
                    95:b4:db:b7:61:61:0b:ae:50:36:28:e6:10:42:ac:
                    21:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:81:3D:45:90:9F:F8:F1:D2:92:F1:BC:97:E5:AA:88:8C:4A:B9:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/180fb14a-7f05-31e9-99bb-13a4086b648b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:a0:f7:42:85:98:03:ef:e6:66:76:31:5e:e5:de:6e:db:20:
         d2:d0:48:fc:98:06:eb:f5:ba:90:d6:e9:0c:7d:38:c3:21:2e:
         3a:9d:f3:49:d0:5c:b1:cf:27:47:bd:b1:98:6a:7e:52:e1:33:
         85:c9:14:ba:72:e9:e2:f1:ef:3a:9b:0b:cc:31:04:f3:5e:3d:
         30:86:5e:22:b7:e5:ca:f7:89:0a:cc:e5:5c:ac:1f:9f:4d:0c:
         0d:20:ca:19:ba:d7:97:a0:06:43:a9:dc:7c:a0:d9:0e:f7:e4:
         5a:0d:33:23:54:9a:67:af:b3:7c:cb:43:67:00:24:56:63:6d:
         1c:5e:18:9f:fe:4a:b4:f6:11:74:95:0f:a1:6e:da:25:bc:b0:
         44:55:b8:84:b1:9f:7e:95:6c:09:b9:ce:56:08:d7:0f:32:d8:
         e0:e6:c9:39:26:2b:04:72:d6:a2:7b:cd:91:28:b4:c0:32:67:
         7d:2b:cc:50:19:c8:70:b0:ff:ea:71:4e:ae:4f:8c:5e:ae:26:
         ff:43:f1:7a:78:7e:ea:d6:26:c5:89:c3:ac:94:e1:04:c3:5d:
         75:4f:39:9d:e5:f1:6b:60:34:ad:fc:80:d3:fc:74:35:d8:d1:
         e3:56:c0:37:14:e4:62:d3:f5:00:99:57:32:db:1a:66:37:2c:
         93:6d:26:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:56:33 2026 by rpki-client