Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b3a3349-9b1d-38dd-a919-b62a162d2fcd.roa
File:                     5b3a3349-9b1d-38dd-a919-b62a162d2fcd.roa (raw, json)
Hash identifier:          /LXEINuRqZefgNoJFMoKxm4EVAHJJt5dXc+OVl3syhY=
Subject key identifier:   88:1F:6B:3B:DB:4F:08:F2:97:BC:0C:EC:DC:8F:FC:79:9B:D9:1A:C9
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EA7932090472F49874AEF2900
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b3a3349-9b1d-38dd-a919-b62a162d2fcd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396603
IP address blocks:        2620:74:2c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:20:90:47:2f:49:87:4a:ef:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=947008bf-34d2-4ded-bea5-3153e3daf167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e4:88:32:2b:ae:01:73:3c:75:87:92:b2:f3:
                    68:1e:fa:a0:1a:ac:a0:bd:79:45:da:a9:ce:21:c5:
                    07:11:36:f3:68:55:df:46:2f:06:6d:ca:1b:fd:61:
                    06:bb:d5:27:0d:80:a5:e6:b8:82:1f:4f:bd:b4:bd:
                    ff:94:6a:28:8c:67:f7:a3:67:9d:09:83:ce:9f:20:
                    20:0a:9f:9d:7c:4a:08:d8:c5:90:89:e2:3f:d9:73:
                    de:fb:de:0e:6a:82:7e:94:f0:19:6e:54:66:64:50:
                    0f:64:a5:20:e9:27:f5:45:2f:30:ce:14:78:5c:57:
                    ef:0a:05:d0:18:b4:49:9d:b7:63:39:7d:30:1f:01:
                    e3:a5:fa:dc:79:d6:6b:34:ff:fa:81:53:e9:d4:cb:
                    c7:09:d5:eb:9c:d2:30:19:9f:a2:91:93:76:2c:c9:
                    9b:10:3d:3e:4b:d6:80:e7:09:7d:b6:89:38:64:67:
                    8d:10:cb:2b:a6:d6:6c:43:c6:a2:e3:3c:d8:1d:f6:
                    b1:47:51:a3:77:9e:02:24:4b:01:9b:98:31:fe:92:
                    1f:5b:97:a0:9e:c4:bc:3f:37:f2:24:6e:5e:4c:87:
                    ca:6c:2b:35:c3:ed:52:76:ab:f1:dd:71:df:11:a7:
                    99:0c:a4:95:f7:5c:3a:5a:2c:1b:d2:d1:97:d3:2a:
                    91:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1F:6B:3B:DB:4F:08:F2:97:BC:0C:EC:DC:8F:FC:79:9B:D9:1A:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b3a3349-9b1d-38dd-a919-b62a162d2fcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:32:65:42:14:39:38:d3:70:88:b9:46:d3:8b:28:8a:91:d3:
         1b:d6:b4:19:b1:99:62:de:8c:ca:c0:37:fc:c4:98:62:57:d1:
         9c:6d:46:98:53:d7:06:1b:f3:3d:d9:91:61:0f:85:38:d0:10:
         31:b5:ad:05:68:72:f2:80:e8:f5:96:90:a0:58:55:ef:9d:b4:
         00:68:8e:1f:0c:0f:ee:5b:01:bc:d8:e0:af:76:42:dc:3d:aa:
         7d:1f:98:35:44:b6:6b:1a:fd:8a:be:54:7d:d9:e2:39:91:26:
         e3:6c:f5:08:ce:21:02:0d:54:04:3a:0f:ed:d5:c1:b8:df:1c:
         28:2d:45:d7:a3:ed:39:e9:ef:09:5f:c1:ad:98:9b:6a:b8:38:
         97:62:33:6e:96:12:92:6b:92:f2:bc:cc:23:76:dc:3a:8a:1a:
         39:c3:7d:d0:aa:c2:8e:0a:5d:4d:19:d4:f0:a3:fe:60:23:e8:
         01:94:5f:15:b9:e0:77:a9:80:a6:66:3b:b5:93:e0:83:67:cd:
         24:22:dc:92:bf:bb:0f:b0:e3:1a:a2:de:9f:c9:ef:11:d6:f3:
         f5:64:32:c4:30:27:03:1a:be:b7:b9:6c:9f:ad:dd:80:3e:0c:
         a8:27:82:04:b1:50:7d:f0:04:19:9c:77:32:31:9e:26:f1:4b:
         fc:45:89:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:53:53 2026 by rpki-client