Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7e2dd594-a608-33c1-909d-14e31d1f5bb9.roa
File:                     7e2dd594-a608-33c1-909d-14e31d1f5bb9.roa (raw, json)
Hash identifier:          xFcMsI8+UhEwMueFWtdj0UWuwPySOlGTsB6P503zYGE=
Subject key identifier:   26:72:A1:48:9A:32:EF:A2:0F:8C:7C:97:28:EC:85:30:CC:95:77:D5
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EA79C2CCE028E7A4ED65A9A80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7e2dd594-a608-33c1-909d-14e31d1f5bb9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396595
IP address blocks:        2620:74:2b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:2c:ce:02:8e:7a:4e:d6:5a:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=dcd70e73-4bd3-47ed-a46e-7f8bc7f4d034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b6:7d:78:6e:ab:18:b6:f0:a2:04:c7:9c:f7:
                    4d:be:7e:60:46:49:4c:9c:87:34:a5:69:d3:ef:86:
                    8b:a3:f8:8d:40:84:78:53:e5:13:03:7a:60:e7:a0:
                    67:5a:0a:d3:d1:1c:c7:ec:8c:a2:ea:70:76:e6:3c:
                    52:fc:13:8f:10:0a:27:2d:de:02:63:35:9a:c7:8d:
                    e9:98:b3:0b:0a:85:7f:3a:4d:cc:38:6b:15:87:59:
                    36:19:6e:17:71:53:90:34:6b:8e:a2:cf:c4:81:16:
                    a6:88:3e:73:81:98:9a:a4:c2:f0:53:86:29:1e:80:
                    f2:57:d4:e2:45:df:99:a6:79:7c:10:6c:98:6c:6d:
                    55:1b:55:cb:9d:92:69:14:ca:1a:ab:c9:86:b0:e4:
                    b4:37:05:29:5e:44:8d:17:47:9c:23:8a:63:41:d2:
                    a2:5b:bd:cc:60:e6:e6:f4:17:4e:22:1c:7c:30:fc:
                    9c:89:c7:b5:17:d4:fd:53:ee:72:14:28:4b:b7:5f:
                    c2:b8:3f:fa:e1:b2:68:c7:71:7a:92:59:69:0d:e8:
                    0c:08:e2:8d:dc:ce:45:16:82:f2:66:9f:d7:f8:e9:
                    8b:15:04:cd:a5:3c:41:5a:66:05:48:ed:ee:8b:37:
                    3a:8c:5f:04:67:3f:97:fe:d5:29:9b:45:8f:05:46:
                    b2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:72:A1:48:9A:32:EF:A2:0F:8C:7C:97:28:EC:85:30:CC:95:77:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7e2dd594-a608-33c1-909d-14e31d1f5bb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:6b:ea:c7:99:63:2f:91:71:c4:44:d6:09:44:44:29:cb:49:
         6d:79:23:6d:25:4d:a3:8d:a7:68:19:20:6e:85:41:be:e0:a4:
         82:f8:40:74:c9:33:0b:11:3d:f8:af:25:79:e2:db:b1:ea:57:
         16:15:81:a7:79:9c:ad:86:eb:c6:d8:81:0e:45:06:7a:83:cb:
         fc:6b:67:8a:1f:29:8e:93:8e:96:9c:5f:8a:ca:dc:00:3b:11:
         02:19:59:ef:a0:00:3a:52:02:e1:84:7b:d4:91:87:dd:bc:80:
         bd:07:d9:f7:01:1a:b8:a9:46:6c:b1:fd:62:08:bc:29:c2:e8:
         9a:f4:cf:cd:ba:55:a3:a3:4d:ea:bf:2a:dd:84:33:4d:fd:19:
         38:f2:95:e3:c1:59:d5:61:20:3e:b3:92:f0:3c:44:ea:fe:c9:
         0e:b1:6e:7d:e2:80:a2:84:d2:e3:a5:d4:fc:40:d5:24:44:f9:
         d6:dc:9c:9c:58:34:1d:7b:92:44:e7:4a:b7:c6:b4:39:bc:38:
         35:09:a9:74:98:ee:45:6d:2b:d3:67:50:33:f5:65:08:80:ad:
         c6:d3:ee:0c:2f:f6:06:3f:ae:4b:aa:b4:b1:6b:24:0d:db:df:
         54:fb:79:42:2b:9a:12:5b:ab:54:1d:bd:05:c0:61:ff:bf:e5:
         be:55:8a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:56:34 2026 by rpki-client