Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66689687-7dbc-3ec9-a9b8-72c40899935a.roa
File:                     66689687-7dbc-3ec9-a9b8-72c40899935a.roa (raw, json)
Hash identifier:          s9fnqaKV3xXjztQqC+zHxtBR7mDrk2SbNB1r/xMwkSQ=
Subject key identifier:   76:4F:AB:80:CE:CC:B9:AF:EB:62:51:9F:DB:FC:52:3E:5B:1E:44:81
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E3A2F5D42159F796BA4AA6040
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66689687-7dbc-3ec9-a9b8-72c40899935a.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     36628
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:5d:42:15:9f:79:6b:a4:aa:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=8c10f829-d3c7-43df-a9af-0f268ff6dd37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:27:0d:03:98:7a:72:8b:5f:c7:15:90:f3:85:
                    69:7e:14:ec:1b:b7:e2:59:c1:22:36:f0:f5:6f:b9:
                    be:d4:b2:67:33:ca:15:9a:8a:00:ab:12:7b:e9:b1:
                    73:0b:0b:5c:c3:13:9d:56:55:01:a2:a2:98:db:20:
                    9c:8c:8a:99:0b:02:6a:b4:ff:18:a8:2e:ff:12:19:
                    bc:d5:5e:97:4c:14:a2:d9:dd:87:8c:8b:8a:75:04:
                    88:a2:07:7f:81:87:d6:6c:bd:ad:b2:55:39:d7:10:
                    44:4f:09:d0:25:f7:b1:3b:43:e9:c9:27:b8:53:2d:
                    85:61:cc:28:f7:7e:d3:e3:b8:e3:14:81:70:03:c7:
                    d9:61:8a:6b:83:3f:d7:29:28:1c:a1:44:e0:9d:c6:
                    b4:1e:77:6d:fc:8c:6b:a1:c9:c6:cb:80:4c:fb:58:
                    a3:26:fa:bb:05:39:77:5a:bd:d1:e0:94:0f:7f:bc:
                    3f:6d:e0:6b:18:e3:90:98:ef:27:30:82:3b:07:f1:
                    95:f6:e8:32:71:c7:5d:e8:67:9a:04:ee:91:44:34:
                    2e:a7:91:fb:64:b0:7d:10:6b:89:93:21:8b:0d:f3:
                    99:2c:d7:f8:23:3c:68:44:39:d2:af:c5:43:76:90:
                    29:ab:27:7e:34:d8:14:ef:a3:ae:1f:81:93:15:d9:
                    9e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4F:AB:80:CE:CC:B9:AF:EB:62:51:9F:DB:FC:52:3E:5B:1E:44:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66689687-7dbc-3ec9-a9b8-72c40899935a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:bf:fc:e0:ce:a5:e6:2a:2e:11:7e:a6:54:4b:6e:f4:4f:b7:
         32:63:d6:b0:d2:0d:2b:b8:8c:c8:68:65:01:6e:84:9c:61:1f:
         af:5d:6c:54:30:08:33:7f:90:28:59:6b:d1:1e:ed:be:1b:5e:
         7e:f0:27:82:ff:2c:bc:e3:a3:d9:6f:b0:9d:d5:7c:76:15:f3:
         bf:1e:29:30:8a:41:bd:f1:d7:2a:d4:bc:28:fe:3d:54:1b:65:
         bc:a8:91:72:75:8f:28:45:8d:a8:5a:8c:24:1f:0a:51:82:7e:
         7f:61:55:1e:dc:56:8c:ea:47:6e:86:04:fa:6d:b5:71:02:b5:
         a8:e8:75:f9:21:9f:6b:db:32:43:d8:83:c6:8a:0c:bd:a1:65:
         be:cc:05:cd:14:3f:43:85:9a:eb:8e:dd:2e:be:d8:1f:1c:d6:
         a7:f9:8b:a7:2b:8f:3b:1a:43:a2:d1:dc:9e:b6:16:a8:77:c5:
         fe:81:13:ef:ed:70:f2:db:d7:0d:5d:aa:b3:f8:8b:2d:b7:1f:
         4d:d6:a5:8b:8b:f4:43:a3:f3:b1:45:bf:0e:9e:ed:84:ec:a7:
         67:53:a0:a3:f0:02:c0:c9:89:da:16:26:30:f0:66:ef:77:b1:
         e8:0c:61:de:4a:b8:96:94:a2:f5:11:51:4d:92:ac:be:d4:65:
         9c:6c:f2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 17:22:07 2026 by rpki-client