Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1d184340-b9fa-369f-8c7b-7605004cd338.roa
File:                     1d184340-b9fa-369f-8c7b-7605004cd338.roa (raw, json)
Hash identifier:          4SO0/TrBTiBDiImyCl8HkRXp1DV8xMNoz6qV01xSeao=
Subject key identifier:   9C:CA:80:28:DE:16:D7:71:1F:8B:0D:AA:A8:B4:5C:83:F5:C7:D7:39
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EC7A1DF0B03C5ED4FE9600480
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1d184340-b9fa-369f-8c7b-7605004cd338.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     396561
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:df:0b:03:c5:ed:4f:e9:60:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=a9e19e5e-1312-4fc9-b8f4-ab7e7882b00d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fb:90:93:e1:1f:15:48:21:ae:04:bc:7e:5e:
                    0d:6d:02:be:83:00:ee:48:d7:da:3f:ec:06:b4:3c:
                    3d:0c:5e:3a:9d:d8:e2:3f:24:5d:30:c2:00:1b:f7:
                    22:76:4d:f0:ed:f5:3a:d4:d7:40:d2:5c:8f:c8:f2:
                    bd:a6:5f:ae:02:53:e8:ef:de:6e:cb:bf:55:2f:1f:
                    4c:57:28:e7:2d:69:4f:cd:ed:4d:f6:ce:48:a0:3e:
                    98:c5:24:08:03:7f:9f:a6:ce:68:4f:bb:e0:a2:ab:
                    44:64:52:c4:fc:a1:22:36:29:e7:33:79:bb:7a:27:
                    80:f6:7c:3b:f1:30:98:8c:49:eb:82:7d:58:ca:77:
                    61:98:a5:0e:ab:0b:73:7e:89:03:6f:f1:7a:23:9c:
                    8b:02:9f:f0:e5:85:0a:e5:0e:32:ad:9d:c8:3c:cc:
                    73:4d:03:cd:6d:d9:86:c8:f2:4a:99:cd:58:51:54:
                    8e:85:ba:7f:c0:7f:70:02:2c:74:83:d1:97:b1:eb:
                    85:0b:0c:f7:7b:81:56:f3:53:0e:04:db:92:99:b7:
                    fe:5a:29:12:71:06:ad:7d:04:46:f1:af:16:dd:c1:
                    5c:5e:6e:43:9c:5f:bb:98:02:78:1a:74:1b:89:c6:
                    42:32:d3:1e:47:62:8b:0e:cc:72:20:69:a7:a3:a6:
                    c7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CA:80:28:DE:16:D7:71:1F:8B:0D:AA:A8:B4:5C:83:F5:C7:D7:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1d184340-b9fa-369f-8c7b-7605004cd338.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:f9:5d:d6:e2:85:fe:2e:00:d9:92:0d:e1:94:50:94:e0:b4:
         9d:9a:52:c1:33:50:7b:cb:3b:fb:f9:23:dc:74:3f:ba:65:98:
         71:86:5e:80:04:c2:a5:e3:be:4e:c9:1d:b7:a2:b0:72:aa:4d:
         78:ea:4b:94:f7:07:b4:10:e4:ea:1a:88:2f:11:1e:a2:6c:1e:
         85:16:fe:2a:c4:fd:a8:02:1e:08:f4:9a:d4:5e:e9:cd:d8:9d:
         17:e9:bf:a8:51:1a:98:26:d2:cc:b6:26:4a:aa:c0:76:f5:f9:
         a1:af:d4:19:a6:51:be:cb:6f:3e:3f:97:e6:9d:ee:b4:e1:2c:
         2c:a5:b8:37:87:08:6a:6c:55:61:ad:b0:d0:9e:f8:48:d1:c9:
         c0:b8:6a:a9:b4:56:b1:3e:5a:3b:3c:95:80:17:54:1a:c3:61:
         dd:78:da:ef:bc:ca:56:dc:46:d4:ff:e9:c9:ed:28:74:1f:da:
         76:3d:cd:f4:37:db:63:aa:fc:b0:d2:bd:17:b2:ed:74:53:b9:
         dd:8a:3f:41:e7:a0:e2:e4:85:b8:6b:db:ad:04:a3:c5:1d:b6:
         8d:ad:99:4d:50:fd:34:65:83:41:7a:da:0a:2b:c4:3d:39:52:
         9f:b6:99:c4:bf:dc:26:ed:3d:33:82:84:47:48:5d:de:b6:e2:
         07:51:30:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:44:59 2026 by rpki-client