Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/44c64a82-3480-3ab7-a7e4-b2cb1002cf20.roa
File:                     44c64a82-3480-3ab7-a7e4-b2cb1002cf20.roa (raw, json)
Hash identifier:          YBwZDnczZj0O0HuT5Ny29v5m83sXLu5lugYZowe5PA8=
Subject key identifier:   47:C1:6D:82:C0:F0:F8:3E:BF:1B:EE:AA:69:FE:13:34:88:E4:1E:10
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EA79BBD9C480AE2DC4F068D40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/44c64a82-3480-3ab7-a7e4-b2cb1002cf20.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396592
IP address blocks:        2620:74:2b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:bd:9c:48:0a:e2:dc:4f:06:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d38e7292-f552-4e1a-8bf7-65065fdd75cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:93:1d:16:f7:9b:7a:5e:42:71:89:db:a7:db:
                    11:b2:86:b1:25:6c:2b:9b:76:93:00:c8:7a:28:d4:
                    b9:a0:c9:e9:cc:7a:48:35:91:2f:92:97:54:8a:52:
                    a0:47:8f:84:9e:97:50:85:eb:f6:d2:d7:50:ef:f5:
                    05:82:5d:11:a1:4d:02:8a:fc:2e:73:0f:bd:11:39:
                    c1:3c:9f:dd:42:df:b4:f6:5d:b4:a9:b7:8a:66:7d:
                    ad:2d:6e:f5:58:4c:ad:cf:5c:0b:35:16:cc:7b:35:
                    53:ef:2f:5e:94:48:0f:44:5d:a7:37:e1:c9:6c:68:
                    83:89:12:1e:d3:18:71:de:ac:94:83:59:98:c0:e3:
                    55:89:8f:17:2d:ce:be:c9:fc:b0:ac:64:04:96:f1:
                    f6:bc:56:26:fe:3c:20:b5:b2:4c:c6:60:f5:13:13:
                    5a:b6:45:98:9f:d8:b8:d6:b0:e5:13:29:db:e5:0b:
                    ae:93:fd:03:09:56:54:6f:17:b9:3b:59:82:bb:15:
                    6d:72:50:97:b9:6f:d2:8d:41:ed:b5:4b:e1:31:1f:
                    94:59:d6:7b:af:68:ea:1d:e7:0b:96:17:fe:23:84:
                    43:41:33:1a:e4:5b:ee:04:13:61:ca:14:6f:7a:c0:
                    a3:1e:fc:99:97:47:0c:0f:bc:a8:2d:54:d0:7b:c6:
                    46:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C1:6D:82:C0:F0:F8:3E:BF:1B:EE:AA:69:FE:13:34:88:E4:1E:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/44c64a82-3480-3ab7-a7e4-b2cb1002cf20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:09:16:52:b9:4c:07:0e:32:93:13:98:38:51:0a:d2:9c:b9:
         f3:b5:2a:fb:0c:08:90:aa:77:e3:c5:3f:8f:05:e8:2d:72:02:
         91:5a:9f:7f:42:2b:c0:46:aa:aa:c1:fe:24:04:65:90:cc:d9:
         4e:ea:fb:53:d9:5a:cf:ca:75:14:d3:fa:6c:95:6e:a0:d1:a2:
         3c:d4:f5:88:d7:65:54:19:ca:7b:de:fa:2a:2a:8d:9d:5a:75:
         b9:44:f5:a4:dd:5b:08:56:24:f0:96:de:6e:fd:9a:1a:89:44:
         de:95:fb:f8:b8:24:27:c8:0b:25:eb:9d:a3:f7:92:69:5d:0f:
         e7:12:fc:e1:c4:71:a0:1d:a1:33:9c:7c:17:0a:48:23:82:34:
         07:39:32:4d:d8:7b:2a:76:f3:46:b7:47:84:aa:9b:83:9e:27:
         05:ca:6d:21:1a:95:cf:f7:a2:eb:be:b5:82:75:a0:60:75:f9:
         5c:ee:a6:9c:fe:4a:7d:56:ea:0e:33:26:bb:16:a7:6a:63:54:
         e9:41:66:ca:09:5c:f0:1c:1c:c8:3d:61:29:10:5d:e1:7c:f3:
         f8:90:77:90:59:0d:6b:9a:99:a1:57:46:1d:47:41:74:f0:e4:
         1a:39:24:15:97:6e:4d:3f:0e:14:38:ab:a8:ff:c7:bc:5d:2a:
         ac:b0:3e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:54:19 2026 by rpki-client