Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/843fbb5a-0106-3317-ac02-b8a6c9cd3037.roa
File:                     843fbb5a-0106-3317-ac02-b8a6c9cd3037.roa (raw, json)
Hash identifier:          0CYgTEiCyGn4zBAJwgrsM33taGY8ydxsGY0RvvBwm7o=
Subject key identifier:   2F:93:6D:C4:A6:67:C4:31:99:68:91:E0:4A:AF:4F:82:4A:75:05:77
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EA788558E911143447E8CD000
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/843fbb5a-0106-3317-ac02-b8a6c9cd3037.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20172
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:55:8e:91:11:43:44:7e:8c:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d0470116-0a2e-47d7-a737-2549a23407ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b5:69:4f:90:e5:00:28:83:80:ad:3b:9a:c3:
                    22:05:d1:36:1c:a9:4b:c1:d6:92:f1:29:56:e1:b1:
                    9c:fd:1b:60:83:90:60:fb:b5:9c:02:ba:e4:3b:40:
                    d3:cc:af:d7:18:45:fb:27:f1:ab:97:20:d3:13:05:
                    47:6a:8c:a8:99:97:5b:cb:e8:15:06:7d:c2:b9:c9:
                    66:f3:60:04:45:94:0b:c6:51:73:ba:91:36:94:c1:
                    1a:4c:a4:bc:f4:e8:53:b1:f2:f9:bb:f6:24:f0:74:
                    c4:58:5a:bb:41:e4:1e:3c:df:73:c2:47:95:e9:1e:
                    26:c4:4b:fa:eb:08:66:20:50:8e:63:63:90:e1:d0:
                    a2:02:94:ff:7a:66:b9:dc:16:e5:8e:14:0c:34:7b:
                    fd:02:0a:00:ad:43:7a:2b:f5:74:80:2c:06:05:2d:
                    de:da:86:d4:0c:60:48:30:fe:88:36:4e:c1:5a:2e:
                    10:6f:91:2e:4f:58:75:80:31:6f:27:d0:29:45:02:
                    56:3e:c8:16:13:63:6c:19:06:db:de:bd:ea:6b:68:
                    f3:24:4d:7d:91:5e:67:3a:45:32:5a:c9:41:23:01:
                    2b:61:4e:1d:9f:b6:d9:44:e1:34:e1:e9:79:a4:c4:
                    e6:a0:a2:db:29:62:81:5f:8b:91:67:36:a1:ad:cf:
                    9f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:93:6D:C4:A6:67:C4:31:99:68:91:E0:4A:AF:4F:82:4A:75:05:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/843fbb5a-0106-3317-ac02-b8a6c9cd3037.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:20:8f:1b:aa:fa:e4:2b:aa:22:5d:96:e8:b6:ee:0f:6b:cc:
         ba:cc:55:67:5a:d3:37:46:04:b7:d0:03:57:e6:e4:00:81:e0:
         ed:2a:c4:4f:ce:32:bd:9e:23:bc:bd:dc:96:b2:c6:03:3f:85:
         bd:3d:d9:e0:61:38:10:59:bc:87:86:b8:54:1c:f4:b1:93:53:
         a9:1e:f4:d4:4f:1d:78:d7:24:4b:2f:7c:f7:2e:c6:d9:d9:08:
         c4:b9:32:95:01:4a:5f:64:b4:8d:00:9f:5a:df:0d:58:f1:14:
         9d:30:23:b5:81:9a:f1:ec:ba:b1:3f:f9:6a:36:ec:f4:64:04:
         e0:f0:a2:f0:38:b8:12:ee:44:74:1c:43:71:5c:2c:85:f6:c9:
         3a:ad:2d:94:40:5f:24:f7:33:a2:9e:d8:93:10:7e:a4:35:45:
         61:87:c0:96:ba:a3:37:27:34:15:59:b1:01:36:d5:0b:63:59:
         3a:39:d9:bc:a0:aa:18:bd:36:cc:a1:12:7a:9e:10:50:4f:89:
         93:85:f3:00:17:f8:a1:10:54:1f:8c:4b:81:2c:b1:df:e9:5d:
         59:c9:f8:09:21:1f:53:21:59:7c:79:82:90:64:e1:f0:ad:62:
         d5:4e:82:93:84:2e:b3:d6:b9:1c:b2:db:af:37:d5:a3:85:a8:
         71:55:10:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:55:11 2026 by rpki-client