Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b788f28-19e4-32c4-a293-8ce6047a481e.roa
File:                     2b788f28-19e4-32c4-a293-8ce6047a481e.roa (raw, json)
Hash identifier:          EUZb31o7yEfrDMSFEQg0m+6IpwQanHIatuUCUrP6Rhg=
Subject key identifier:   AA:CF:97:15:26:98:BD:0F:B6:57:EF:80:C9:AC:82:E2:E6:EF:7D:7C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F4985859054335F811D7A7FC0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b788f28-19e4-32c4-a293-8ce6047a481e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396590
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:85:85:90:54:33:5f:81:1d:7a:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f6c36d42-d9fd-4980-9f56-304d00237205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:58:9e:47:f9:39:c0:b3:bf:5f:0a:8f:95:e0:
                    af:61:d4:9b:68:17:54:e1:eb:6a:35:ec:6e:7d:50:
                    8e:7d:aa:60:90:f4:dc:64:7c:4c:bd:e6:ce:56:27:
                    c7:a5:5a:c9:f1:b6:ac:ca:31:dc:ed:6c:0e:77:13:
                    dd:bc:ee:1d:03:4d:15:d7:3a:ff:b2:cf:a1:91:b3:
                    02:5a:12:53:1b:4f:33:58:9b:48:df:13:c0:fd:f1:
                    83:01:6b:e8:4f:04:51:b8:0a:11:a4:52:e2:df:2f:
                    4d:10:30:fe:a3:b4:6a:0a:3f:af:7e:8f:ea:67:b7:
                    7b:ef:db:f9:ca:64:19:34:83:f2:a8:9d:cd:42:28:
                    b3:53:d4:ec:45:ce:f8:b8:d1:35:73:13:3f:04:09:
                    65:22:78:56:43:f3:00:9a:28:a0:88:ff:79:0c:aa:
                    ce:62:ef:dc:96:ce:41:ab:b5:7e:aa:4e:a2:52:eb:
                    8d:0e:2c:3b:bc:cf:eb:e5:b7:e2:3c:e6:b8:40:c5:
                    3f:f1:93:5c:ec:34:47:3e:d9:b5:75:c0:84:8c:0b:
                    c8:f8:04:6b:eb:e2:41:ab:f6:32:15:13:e0:cc:9f:
                    6c:9a:be:bb:63:9e:95:b6:a4:33:bf:10:00:73:12:
                    85:23:3e:3e:2f:a5:44:81:5a:55:ce:89:d6:ce:00:
                    9a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CF:97:15:26:98:BD:0F:B6:57:EF:80:C9:AC:82:E2:E6:EF:7D:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b788f28-19e4-32c4-a293-8ce6047a481e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:42:4a:10:42:6a:82:53:d6:18:bb:3b:3c:68:43:f2:68:4a:
         4f:89:90:17:05:02:8f:29:39:9b:ae:33:3e:18:5f:1e:94:6b:
         98:b8:7d:4f:24:4f:d1:00:a3:13:16:ca:43:3e:67:9b:33:34:
         9a:70:e7:d1:05:12:d6:60:20:f8:77:b9:34:d4:0c:ad:93:e8:
         81:ac:22:49:db:3e:41:8f:fd:c9:20:66:0a:68:b0:fb:63:7f:
         f1:29:62:52:2a:59:f7:f3:53:d3:ea:93:5d:9b:e3:d2:e1:7d:
         24:98:7c:70:fd:7e:8f:a0:f1:fc:ca:25:9c:77:6d:49:df:4b:
         be:a6:8a:72:c1:98:4c:e8:71:26:36:2f:00:82:ac:d2:d3:51:
         02:0a:6c:4b:63:ac:b2:34:b7:99:03:1f:60:ca:9b:8e:3b:e6:
         29:e7:56:42:82:a5:11:49:ba:58:20:63:1b:04:ba:7e:f3:2b:
         23:d4:f4:50:74:87:13:6b:79:40:44:4b:74:78:03:ee:83:08:
         7c:7d:77:3b:c2:49:15:67:f7:a5:93:79:7c:8d:b2:20:33:d4:
         01:57:24:ac:62:d3:b6:14:fd:36:45:0b:d0:9f:a5:bc:ae:69:
         4e:bd:cf:d5:92:60:2c:c7:8e:2e:69:67:d7:b3:fc:c9:8a:21:
         3e:26:ac:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:36:47 2026 by rpki-client