Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66984088-82d6-3511-8914-203b79e30de8.roa
File:                     66984088-82d6-3511-8914-203b79e30de8.roa (raw, json)
Hash identifier:          BZ0A7mW4UCoXrfQaomkpDW2PR0vosxWjzGmoOvb+e10=
Subject key identifier:   35:B2:03:21:4B:E8:D4:92:92:37:9E:EB:87:4D:45:C2:B6:F2:0D:5A
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F698D951D7954D46471D5E000
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66984088-82d6-3511-8914-203b79e30de8.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     396540
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:95:1d:79:54:d4:64:71:d5:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=28c0479e-c668-473d-a5da-dcdadd19a2c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7b:1f:30:1c:2a:68:3b:2e:97:5b:70:dd:ff:
                    36:13:67:bd:ef:ce:3f:58:80:50:bb:b6:51:a3:92:
                    c2:8d:27:64:03:7a:fc:b4:2a:8a:3d:2b:01:0f:d7:
                    42:39:92:96:ff:f8:69:60:73:68:ea:01:0b:8d:6d:
                    91:40:b7:80:21:d5:fb:e2:3e:27:8c:1c:3a:47:13:
                    75:52:67:11:50:e5:b3:51:8e:2e:ac:8c:1a:53:bd:
                    80:94:94:ad:28:84:05:97:24:42:c9:e0:29:e9:62:
                    c0:01:ab:53:b0:a7:c2:1d:6c:ab:64:12:03:5e:f2:
                    ee:73:79:a6:14:33:79:77:7c:cc:53:22:b9:40:d3:
                    65:9b:73:bd:ad:99:49:3c:80:1a:ba:82:b9:59:0a:
                    88:f2:3d:29:d6:15:9b:d5:74:2a:c0:71:4f:7d:17:
                    88:b7:6e:3c:56:e3:0e:6a:c1:20:28:68:eb:01:08:
                    c1:df:5e:04:48:06:fe:0f:5d:82:e2:19:1e:7b:ab:
                    09:d4:71:a1:c0:b8:4c:5d:58:29:d8:69:3b:7b:75:
                    a6:71:80:d2:c5:81:77:56:01:93:ae:ae:e7:70:2e:
                    9c:e9:9c:3b:43:4b:64:67:2e:c2:8f:b8:8b:d1:67:
                    fe:52:35:b5:d2:cc:a8:c6:4c:36:eb:6b:df:29:91:
                    69:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B2:03:21:4B:E8:D4:92:92:37:9E:EB:87:4D:45:C2:B6:F2:0D:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66984088-82d6-3511-8914-203b79e30de8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:86:11:26:70:db:50:9b:04:bd:c8:57:3b:96:6f:cc:60:ba:
         b2:01:d8:bb:5d:f4:56:15:79:2b:2c:c9:35:95:54:4d:12:c8:
         94:0e:69:4e:ee:f3:b2:dc:09:a0:20:3b:b7:44:be:16:27:94:
         3e:59:17:b6:e3:9e:78:89:49:9f:e4:33:5d:23:0a:85:6f:fc:
         f4:92:2d:5f:76:e2:d6:b6:c5:68:af:0f:ad:8b:2f:1c:23:ba:
         aa:e3:af:36:a3:db:64:94:44:07:9b:c7:5b:01:df:c9:11:b4:
         f4:36:e5:cf:7b:96:71:2e:0d:65:a9:65:f8:ff:98:06:ec:78:
         eb:21:42:5d:88:81:84:48:77:12:5e:7e:6d:80:e3:c2:48:00:
         40:85:cf:85:9e:a0:3a:d0:a7:43:e7:6c:1f:1d:46:11:71:90:
         ff:de:0f:3b:9a:37:3e:d9:37:3e:57:d3:dd:92:cf:b8:78:90:
         72:55:84:9a:f2:9f:ba:bf:aa:11:6f:6f:b8:fd:8e:55:66:e9:
         c7:37:41:ac:70:9e:6d:88:8e:e6:6a:2a:d7:56:0e:9e:04:01:
         42:d5:09:6d:b3:59:95:08:7a:07:a8:04:f5:a2:c2:2b:22:79:
         b8:86:6e:70:01:47:37:56:dd:7c:fe:aa:cd:cf:6a:86:2c:2b:
         e2:db:40:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:20:00 2026 by rpki-client