Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/26469052-9fa5-3113-bdcb-b253f9676af2.roa
File:                     26469052-9fa5-3113-bdcb-b253f9676af2.roa (raw, json)
Hash identifier:          kAmh/bIHyNVahbh8ZPpwkDYR3i4Vv+EFyYWWfkxycIw=
Subject key identifier:   E1:09:0E:B5:3B:7C:2D:64:52:30:5E:BB:94:13:0E:DB:D7:91:E3:5F
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F698D910855E5B4EB59778200
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/26469052-9fa5-3113-bdcb-b253f9676af2.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     396564
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:91:08:55:e5:b4:eb:59:77:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=d9cfbba2-c838-48b6-8873-d8d1514efd1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:77:5d:62:e2:d6:ae:bf:ee:e5:35:11:69:9f:
                    7f:60:57:81:00:8b:d5:bd:81:9a:f0:7a:b8:d2:92:
                    f6:ba:88:71:7a:29:e0:0f:47:0f:2d:b9:f1:8e:2c:
                    ca:eb:e0:98:af:ec:80:e1:1c:be:21:f7:43:be:e5:
                    07:a4:5c:bd:92:61:07:ba:21:31:d4:7f:53:d1:b3:
                    ff:76:b2:2e:c6:bf:cc:7b:7e:e1:b8:07:e3:02:1f:
                    a9:c3:6e:a6:3f:1f:29:65:47:96:b7:64:fb:9d:d1:
                    53:80:96:cf:37:79:9a:d7:12:97:af:eb:b6:93:1f:
                    79:0f:f6:14:47:44:4d:2f:3a:cc:15:ec:35:73:c3:
                    a1:8e:95:dd:49:31:b0:23:30:a0:64:ea:b9:38:1e:
                    10:1e:b3:ed:c7:52:fb:87:a6:a0:29:fc:e1:6f:22:
                    e8:70:c6:29:82:10:07:31:f4:63:0a:0d:54:e0:38:
                    5d:4e:5b:7f:5a:f5:a2:d3:7e:27:24:6e:62:13:0a:
                    07:64:91:6b:8c:3d:90:09:28:32:a8:17:a7:27:fe:
                    0d:33:b9:d8:3d:df:40:59:7a:57:e6:b7:c5:64:40:
                    ee:d5:af:ad:15:4e:0f:c5:ce:7a:13:f6:c7:6c:04:
                    22:f4:59:56:72:98:30:e6:44:9b:21:07:15:71:11:
                    39:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:09:0E:B5:3B:7C:2D:64:52:30:5E:BB:94:13:0E:DB:D7:91:E3:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/26469052-9fa5-3113-bdcb-b253f9676af2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:b1:db:5f:fb:37:4d:5e:41:82:58:fa:6f:ed:71:56:98:fe:
         70:0d:c7:8f:11:3b:87:c6:17:b6:54:d7:80:45:23:66:d2:c8:
         f7:bf:54:99:8a:4e:bb:4f:a1:9a:c6:21:bd:13:0e:2a:53:cd:
         e7:ba:d9:9f:62:7c:28:1f:6d:1b:63:15:22:ee:d0:47:6c:8f:
         3c:cf:c0:0c:03:67:82:71:d6:38:c6:9f:e0:42:2b:dc:eb:44:
         99:55:74:8a:9a:c4:88:e4:23:02:1e:34:5b:e2:6c:9c:c3:a6:
         0e:1d:6c:e1:85:01:8c:0d:12:37:31:15:1b:fe:cc:1a:df:b3:
         d2:4f:12:be:58:cd:b1:91:18:b2:ec:d1:1e:a8:12:ba:af:17:
         af:b7:4f:1a:11:9a:b9:5e:a0:51:06:9c:e4:e2:48:21:9b:b5:
         90:8b:09:fe:1d:b9:22:90:45:8d:68:41:9f:51:c7:33:47:b6:
         e7:e0:48:e3:50:6c:43:b5:d9:68:f0:26:c9:91:bc:9d:a6:fa:
         11:8a:e6:3c:23:90:ed:57:c7:1e:01:3a:51:f0:06:58:13:39:
         bb:c0:9e:07:0f:df:a3:02:9b:e7:c9:ab:f7:d3:b2:43:7d:ba:
         bb:f5:00:06:d5:5f:ce:a5:cc:16:15:61:3d:e1:4a:a2:3d:13:
         29:6b:03:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:02:50 2026 by rpki-client