Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6ddff6ae-e580-3a31-9ac0-5a5b538daede.roa
File:                     6ddff6ae-e580-3a31-9ac0-5a5b538daede.roa (raw, json)
Hash identifier:          UakzcVWWYNenuUPOHQMzM8NzpRmaAyLbNpMfGElDtSI=
Subject key identifier:   77:94:63:47:41:32:AE:5D:29:7A:43:57:83:A9:EA:C1:8B:36:B4:A1
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E3A2F5ACE5C0E61180DC22580
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6ddff6ae-e580-3a31-9ac0-5a5b538daede.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     396562
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:5a:ce:5c:0e:61:18:0d:c2:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=767e334b-035c-43a0-a3ed-01293cb8a779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:65:c3:14:79:00:92:62:43:66:4d:b9:6f:42:
                    ee:41:7b:1b:e1:cb:78:11:98:89:ee:ad:fb:96:aa:
                    ec:69:7e:db:a6:2e:72:fb:83:ed:d7:9a:7e:f4:c9:
                    ef:d9:1b:4a:27:52:21:8b:3f:e4:33:8e:ad:6f:87:
                    20:3e:98:d0:d5:03:65:a9:ca:3e:b4:4c:4e:29:e5:
                    ad:4a:b7:c6:7b:c4:f6:89:4c:d3:72:4f:e2:df:94:
                    46:dc:46:e5:4a:34:82:e4:66:f1:24:d7:29:5a:87:
                    42:0a:05:d8:f0:89:4e:d2:72:e4:0b:8c:8b:95:79:
                    50:e5:08:14:83:76:01:97:09:58:6c:7f:a6:8e:98:
                    59:63:e0:9b:7b:9b:09:15:fb:42:38:70:d7:2c:db:
                    71:82:2b:8e:28:0c:e5:ae:1d:31:05:89:9e:ef:4c:
                    c0:23:64:43:e8:1b:fc:ee:ba:89:fa:fa:e0:66:7f:
                    3f:bc:45:e8:9e:11:40:a2:64:bd:d5:a2:45:f2:29:
                    d8:19:22:3d:51:fa:62:c1:80:f5:05:be:2e:e1:56:
                    b8:7a:bf:bc:84:2f:50:e9:dd:81:bd:f0:c3:3a:17:
                    dc:23:68:b0:a7:58:f9:12:b4:e6:0a:c6:37:85:be:
                    f1:82:8d:00:de:b6:2d:d6:c2:d5:eb:5b:b0:10:cf:
                    b1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:94:63:47:41:32:AE:5D:29:7A:43:57:83:A9:EA:C1:8B:36:B4:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6ddff6ae-e580-3a31-9ac0-5a5b538daede.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:d9:76:09:82:6b:f7:f1:81:3d:9f:08:6d:32:ea:21:41:9c:
         56:f6:ca:cb:f5:cd:23:80:12:dc:2b:ca:9a:6f:e9:f3:74:ba:
         ec:c6:d4:46:47:71:04:09:4a:33:13:f3:b6:37:52:bd:8c:82:
         41:7c:b7:bb:30:67:60:f0:dd:93:ed:58:52:f3:26:3a:95:90:
         21:89:61:76:08:89:d5:e7:a3:17:a6:ed:51:69:00:ee:70:b7:
         0b:c0:cc:99:d6:59:a8:b9:8d:d8:d6:fe:92:5d:4b:67:b1:30:
         02:6e:e8:bc:80:55:31:e4:e7:89:d4:50:d0:0c:d1:b1:58:d9:
         54:48:39:e1:53:a0:0e:34:a5:45:48:0b:d5:7b:46:57:fe:f1:
         f0:cf:cb:49:f1:6d:ce:1e:85:b2:e3:18:3a:41:25:05:13:d0:
         59:63:8c:5e:61:14:f6:87:09:38:7b:c4:1b:a0:b3:06:2c:6c:
         98:31:e2:4f:cb:76:25:5c:e8:8b:e9:3f:43:6d:45:6e:69:94:
         2d:51:b4:4c:18:70:de:e0:5a:9f:33:02:35:04:f7:51:d2:f3:
         97:c9:28:e8:87:01:59:1d:65:84:30:52:d5:cd:19:fe:83:e4:
         6d:85:29:94:27:eb:57:e1:ed:98:cc:9c:7a:f5:d8:ab:32:80:
         a5:46:c3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 17:17:32 2026 by rpki-client