Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7fb001db-bcac-310e-acff-8f16dfc19825.roa
File:                     7fb001db-bcac-310e-acff-8f16dfc19825.roa (raw, json)
Hash identifier:          h0vL2l5/2yLY52+LN7aYAI6xQlbIKnGXgICFLHprwN4=
Subject key identifier:   04:13:03:2F:DF:27:B5:C5:07:95:6D:A0:E3:96:F3:AB:CD:9D:06:20
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F4985847D79ED7B0049E951A0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7fb001db-bcac-310e-acff-8f16dfc19825.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396543
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:85:84:7d:79:ed:7b:00:49:e9:51:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ae0f620d-7f83-4567-a6ef-5dbe6ac9cfa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8e:b2:ca:c6:07:fe:60:a2:e1:02:d7:d0:d5:
                    db:0d:65:50:39:bd:82:01:57:a4:40:4f:36:4a:89:
                    d1:05:8d:e5:08:bd:80:02:08:55:20:f6:dd:ef:67:
                    84:78:b6:09:33:14:d2:73:b6:49:f3:c3:3d:b1:bd:
                    e0:19:eb:cc:40:ee:8a:42:bc:1c:07:5a:3c:7a:ac:
                    7a:5f:e9:7e:d7:45:e5:a5:fa:83:15:b9:d7:82:f3:
                    6f:d5:ce:75:cc:4b:7e:f3:91:c7:96:49:4c:5b:70:
                    92:d6:66:d6:84:c6:61:e7:5a:35:0c:b0:c4:1b:a1:
                    b2:07:2e:5e:a4:d2:52:de:1e:dd:22:28:f2:a0:8a:
                    0c:87:21:85:f0:51:19:05:9c:e5:c5:3f:63:8b:08:
                    b0:e9:16:06:c6:92:09:2d:28:b1:00:d1:69:2b:66:
                    78:9e:57:e9:1a:ff:b9:29:54:cb:b5:3c:f8:50:b9:
                    69:bd:ce:da:a2:fd:05:fa:4d:41:ba:24:2c:47:29:
                    d2:ad:e0:b8:c7:bd:4f:d9:78:2d:31:75:df:96:03:
                    57:05:6c:f3:a1:23:07:98:71:ef:06:45:ed:4a:83:
                    c5:c8:e9:b3:60:29:0f:85:41:4a:26:12:e7:83:77:
                    97:a4:79:7a:d0:fe:46:62:05:c5:77:b6:b7:79:f5:
                    6c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:13:03:2F:DF:27:B5:C5:07:95:6D:A0:E3:96:F3:AB:CD:9D:06:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7fb001db-bcac-310e-acff-8f16dfc19825.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:45:6f:48:80:98:00:86:e4:bb:95:e8:c8:37:35:d7:45:49:
         af:4e:67:5e:b9:ad:b4:8c:c4:a0:65:a2:e5:31:eb:16:fa:3c:
         1e:3e:bb:10:4a:a5:7e:34:2b:46:17:84:b4:b6:b7:01:e8:42:
         03:50:6d:7a:6a:c8:64:5b:34:3a:4e:27:e1:d5:0a:03:98:3f:
         b4:ce:e1:9c:b9:47:57:69:86:f1:b9:f6:31:a6:95:df:3d:ff:
         0e:f8:47:0c:62:6a:6c:1b:c8:42:8c:b5:b5:23:4b:c2:29:59:
         a0:be:5d:e1:70:d7:32:e5:1b:40:a6:dd:ae:1f:73:d3:d5:c8:
         2f:f9:6b:68:22:77:ff:c6:49:a0:3d:bc:bd:bb:a2:63:04:f2:
         63:34:bd:20:22:52:5d:c9:b2:55:2d:77:4e:a0:50:3a:bd:d0:
         50:e7:9f:62:76:1e:dc:a0:0a:24:06:d2:d7:62:e5:8e:2c:c5:
         63:38:9a:7a:9a:7b:c6:75:c6:d6:fd:f9:39:76:f8:7f:7d:82:
         e0:0f:8e:5d:bd:61:61:ee:3b:65:6e:6d:54:0f:a4:f0:a5:47:
         73:e0:78:4f:34:0f:be:45:f5:78:8a:f3:0f:05:3f:66:43:71:
         b1:89:19:f4:d9:92:57:27:3b:ff:8b:e1:a7:ff:1c:97:96:aa:
         2e:eb:c8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 10:26:15 2026 by rpki-client