Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29eb6c09-6600-3649-b1e3-5f14c35f9df7.roa
File:                     29eb6c09-6600-3649-b1e3-5f14c35f9df7.roa (raw, json)
Hash identifier:          4YS7wmzrdSLv3UNs+/UOaTG8X3DCKMDP02SISxHRMLI=
Subject key identifier:   54:3F:F4:56:D2:FA:93:A4:A1:8F:5A:0E:74:5D:71:4B:52:93:CC:1F
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EB57C5E3E643E787852C3C280
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29eb6c09-6600-3649-b1e3-5f14c35f9df7.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     396602
IP address blocks:        2620:74:2a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:5e:3e:64:3e:78:78:52:c3:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=84408ca5-da60-4b70-84d1-f66fd0529516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bc:1b:01:78:0d:e5:ce:8b:d4:f8:4b:f6:7e:
                    7e:3a:78:fa:61:0e:71:e6:b2:c2:c9:d1:50:f8:f9:
                    e7:10:3a:6a:86:51:d8:93:a6:af:4f:07:c1:e7:5c:
                    4f:4a:ec:a5:e9:3d:4c:58:df:8f:89:ed:cd:05:cc:
                    46:15:75:2d:45:cb:34:03:d2:88:11:ac:76:90:65:
                    60:b4:fe:93:fa:df:66:53:75:d5:fe:7b:e4:54:f3:
                    25:43:c3:ad:0b:a4:25:47:1a:84:c0:be:fa:4d:14:
                    80:0f:3d:69:e3:ec:5a:f4:76:c2:c0:f6:6b:a5:f6:
                    22:f2:be:fc:da:c7:3e:9a:90:ee:ff:b4:52:d1:48:
                    c3:6b:48:72:ef:9c:f8:7e:68:97:ac:3b:ca:d3:fd:
                    f3:81:42:26:80:c3:b4:61:40:cf:21:c5:20:0f:18:
                    e7:b3:4a:9a:f9:68:24:75:cc:ec:ae:1e:72:fb:3f:
                    d3:09:fd:a1:06:1b:0b:70:1d:c0:e4:7e:74:2e:d5:
                    05:0a:50:e5:2a:da:5d:82:79:7f:c1:fe:67:f2:c0:
                    5e:e6:49:6c:5b:38:a4:de:b5:fe:11:76:30:b0:4f:
                    08:3b:23:36:41:b9:83:81:d7:04:07:84:c2:da:c3:
                    9c:31:60:7e:f0:fe:08:3e:3d:c5:17:f1:34:bd:5c:
                    db:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3F:F4:56:D2:FA:93:A4:A1:8F:5A:0E:74:5D:71:4B:52:93:CC:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29eb6c09-6600-3649-b1e3-5f14c35f9df7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:b2:0c:4e:8c:c8:59:b1:1f:fc:53:b9:37:e6:37:0b:b8:9f:
         68:db:ea:be:3d:22:14:da:a3:10:80:ae:df:ac:2a:e5:03:4a:
         eb:0f:3b:15:90:9b:5f:9f:54:10:d6:77:14:f7:db:05:42:06:
         3b:22:be:86:98:ad:bb:47:ec:54:97:00:72:ee:4f:a9:7a:97:
         c1:64:39:91:20:a6:62:09:d8:6e:fb:97:2e:00:a6:22:a4:49:
         b0:a0:71:85:98:ef:58:6a:a3:78:38:12:07:6c:fc:6b:dd:c1:
         35:e8:02:21:89:a3:bc:46:1f:94:84:e5:7a:50:1c:ef:c2:d5:
         c0:96:24:85:26:f4:a0:44:b4:bd:a1:ab:4d:8e:16:8d:95:bb:
         a3:b9:8a:0a:79:4a:59:cb:9a:28:68:c8:1f:c7:c6:6f:55:b9:
         41:d3:86:6f:24:42:3a:37:03:77:6b:80:be:7d:14:13:7b:b9:
         8f:f8:4e:67:49:74:d8:3d:6f:fb:e5:ae:60:4a:39:ac:bd:11:
         bc:bc:44:11:b6:5d:92:2f:89:b2:77:d0:f4:9b:49:72:e4:5f:
         df:b5:e3:a4:3c:c8:5a:eb:16:85:77:00:85:de:06:98:1c:9e:
         0b:67:8f:a6:0b:a5:7d:b2:ec:dd:2a:e3:12:94:3f:0d:5b:4d:
         3f:b0:30:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:56:49 2026 by rpki-client