Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a087d679-2ecd-31cc-aed8-368c700128a7.roa
File:                     a087d679-2ecd-31cc-aed8-368c700128a7.roa (raw, json)
Hash identifier:          jdFQpsB75NNyxaFRAl2vUhHglIuIF1Wc3aundrMnu7U=
Subject key identifier:   D3:A9:89:54:F3:FC:7D:06:06:00:6C:C9:C3:BF:72:F5:C7:6A:F8:39
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F549D8AA4F2CB3509B0DC15E0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a087d679-2ecd-31cc-aed8-368c700128a7.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     396542
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:8a:a4:f2:cb:35:09:b0:dc:15:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=e8a53f1a-ac82-49fc-9b33-7adaa8c54594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:28:d5:a0:60:a8:89:ab:eb:16:d6:0d:29:25:
                    d5:7a:b6:28:d4:d1:fa:af:69:2d:2e:ff:a4:44:83:
                    a2:48:a6:91:43:fb:79:f4:08:5f:2c:bd:d9:a2:12:
                    82:82:83:0d:02:6e:fd:ab:9c:bc:a9:6e:fe:f5:80:
                    d2:54:77:74:e3:64:ef:54:7c:f4:d8:8a:6d:6d:40:
                    7e:29:08:97:20:16:bb:ef:2f:e5:d8:21:20:86:ed:
                    d0:d3:c9:8b:c5:c7:f7:83:6e:6c:5d:31:3c:f2:96:
                    df:f6:e2:d0:6d:b2:55:97:d8:aa:13:72:36:81:8d:
                    46:ee:2b:2a:14:f1:b0:ec:ee:ac:b5:1e:94:1e:24:
                    49:ce:6a:52:03:75:b1:c8:d8:32:e7:da:e3:82:9c:
                    38:0d:5e:4e:d6:f0:91:6f:67:e5:4e:f5:17:2c:9e:
                    9b:e2:5a:5c:4d:d1:9b:db:1e:e2:06:56:90:f0:0a:
                    0b:9a:08:3c:cb:10:82:1b:13:38:55:e3:f3:6b:38:
                    56:6a:bb:12:a8:48:6f:45:cd:fb:fa:83:9f:83:b9:
                    53:c4:db:48:00:43:1e:a2:0c:00:0a:0a:c6:98:a6:
                    0e:9a:ae:52:fd:0d:5f:c6:28:e6:18:b5:ba:84:ca:
                    72:13:69:48:8b:9b:5e:62:dc:66:18:59:71:51:b9:
                    9f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A9:89:54:F3:FC:7D:06:06:00:6C:C9:C3:BF:72:F5:C7:6A:F8:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a087d679-2ecd-31cc-aed8-368c700128a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:85:68:03:5d:d7:c6:90:19:7e:15:31:4f:c7:7b:50:96:9a:
         17:6f:8f:37:6b:a9:d3:c4:1a:1f:91:67:7b:a4:bf:80:45:51:
         6b:a2:8d:49:96:fc:a6:e5:75:8d:ab:db:e8:7e:96:d9:c8:90:
         eb:e7:31:72:20:93:c4:0c:7d:f1:a7:94:b8:72:86:bb:6e:85:
         c3:be:6b:96:25:4f:2d:da:1b:73:09:fd:c0:da:3d:7e:72:95:
         cf:58:9d:ee:a6:9a:23:1a:6b:5c:da:d2:76:b8:28:72:97:06:
         99:2f:2e:16:e0:95:ce:d7:dc:08:d5:6b:fb:30:a2:da:6a:82:
         13:e7:0b:95:33:94:eb:cd:b4:f1:2a:33:8f:fc:cb:78:7b:cb:
         ed:3c:e1:31:3c:55:97:3a:ac:f6:23:42:5d:a1:06:b5:05:73:
         1f:2a:e6:6b:9c:9c:93:3b:22:90:9c:cb:cc:4e:41:b8:79:92:
         1a:ea:db:dc:49:fb:33:37:81:35:86:b7:08:6a:dd:7c:dd:fe:
         6e:a7:a2:8c:0d:c6:d3:fd:f8:ae:7a:53:ec:c6:5b:2f:1f:7d:
         ba:6c:a2:43:08:9e:28:22:68:69:f9:9c:b9:ed:5c:10:bb:75:
         a6:fe:6d:de:9d:6a:96:38:0c:af:be:5a:d9:14:01:b9:ec:e7:
         c4:b7:91:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:50:13 2026 by rpki-client