Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/544ffe41-db17-3076-acc5-02766f91448c.roa
File:                     544ffe41-db17-3076-acc5-02766f91448c.roa (raw, json)
Hash identifier:          dkAH09nMhV2H7le7uceGw3z2L9XT2XSQ6v94+qjqm2Q=
Subject key identifier:   AB:3E:81:4D:99:F4:25:E1:30:B0:08:BC:5B:AB:29:8E:DF:16:3B:21
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EA78856B941A5B35E5920B400
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/544ffe41-db17-3076-acc5-02766f91448c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396591
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:56:b9:41:a5:b3:5e:59:20:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=dced732b-dfc4-4791-8d22-caad1921953a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e4:47:66:df:7d:38:12:53:9d:d0:e5:79:01:
                    75:69:24:b1:ef:bf:28:99:7b:81:82:33:a4:40:78:
                    69:9f:0c:a0:87:54:c2:bd:3e:2d:0b:19:f8:a5:8a:
                    ad:20:9e:91:d5:63:33:5f:83:c4:45:f6:47:49:49:
                    b0:d3:ae:df:5c:a0:07:7a:24:de:a3:97:1f:46:09:
                    4c:4c:46:9b:5c:87:40:9a:e9:cc:9e:55:c0:1b:26:
                    8b:68:e9:c5:15:54:f8:f4:74:24:22:ff:cd:f1:b6:
                    22:ff:1a:e8:4a:f0:78:0c:fa:55:bf:da:a7:9e:f9:
                    d6:8e:fa:59:ac:27:16:00:c3:f3:60:82:5b:93:0f:
                    da:5b:62:e7:91:c6:a6:25:ea:63:06:8d:4e:57:8b:
                    07:6e:5c:b8:bd:7f:e8:88:3a:72:ee:e7:65:1d:3e:
                    9b:17:aa:9e:f6:b2:a0:22:68:7f:20:b1:84:2a:e9:
                    1e:a7:7c:69:b5:b9:80:c8:05:95:dd:38:ca:d7:76:
                    3b:f0:73:9a:d5:1e:0c:e5:56:6d:dc:21:39:db:d1:
                    3e:3a:c3:a0:62:ce:c7:38:7d:4f:f6:ca:0e:ad:e1:
                    3c:24:59:64:b3:a0:a5:43:90:1b:a5:23:de:d0:82:
                    8c:c1:31:83:28:fa:67:1f:2e:da:2a:d7:c5:ea:28:
                    b5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3E:81:4D:99:F4:25:E1:30:B0:08:BC:5B:AB:29:8E:DF:16:3B:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/544ffe41-db17-3076-acc5-02766f91448c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:2f:a0:a1:e6:b4:6f:81:3b:1c:9e:6f:b6:d0:f7:5c:2f:db:
         4a:a7:c1:94:85:4a:e1:8f:6a:35:7d:84:a0:c0:70:23:11:9a:
         cc:1c:a7:62:9d:80:14:37:5e:ed:34:dd:b2:83:fc:12:ce:51:
         6a:73:31:3d:c7:72:dd:62:25:68:00:4b:70:ce:1b:12:a7:b9:
         f0:bf:d5:79:72:10:bb:9e:c0:cb:c8:2d:5c:4f:28:9c:4c:94:
         76:50:73:c1:ef:a2:ab:c9:04:22:df:95:56:c6:76:e9:51:ab:
         a4:71:37:62:d1:43:39:8d:3f:14:0a:af:b4:87:c0:0c:9e:ec:
         5f:5c:ae:09:b1:d4:b7:4f:b1:9e:40:07:70:31:41:f2:66:d9:
         b6:ce:d4:a2:05:7e:3c:96:d1:66:50:27:4d:79:e2:de:08:a4:
         44:b3:5e:3e:1e:71:05:c7:84:c1:45:e7:38:f9:20:e5:35:63:
         77:d9:68:a6:92:2d:60:e2:9d:95:20:f6:9b:5c:7c:58:df:43:
         c4:de:34:e1:b8:12:dd:ed:c8:cf:2a:47:d0:d1:f8:9c:e8:f4:
         44:68:82:fc:d5:ca:a5:e4:62:5b:53:53:55:56:60:08:56:90:
         01:b8:34:5b:19:a1:1c:46:11:ab:5f:a7:03:19:c9:48:61:5d:
         72:a5:97:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:56:59 2026 by rpki-client