Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a154e75b-efdf-3a6b-93f5-ea0510c86608.roa
File:                     a154e75b-efdf-3a6b-93f5-ea0510c86608.roa (raw, json)
Hash identifier:          DHEOFoNw4Z/mQg4asO7ARCfIAXUpoVmFhNmtNdBP1no=
Subject key identifier:   42:09:15:22:DA:90:84:4C:BD:B9:28:13:6B:86:58:84:6B:B9:80:15
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EA7885A2A30717A6C36DF9680
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a154e75b-efdf-3a6b-93f5-ea0510c86608.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396549
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:5a:2a:30:71:7a:6c:36:df:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=260f40a6-0b88-445d-8c7d-2daa70524c8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0e:5e:81:6a:a0:ca:3b:ae:70:c8:94:64:e2:
                    22:94:02:e6:b5:3e:33:de:94:8b:0f:12:c1:00:6d:
                    87:c7:55:12:06:3e:58:4a:7f:65:3c:c7:6e:ba:5a:
                    80:ce:07:1e:36:5f:0f:2f:1e:77:78:ed:fe:5b:f9:
                    85:0e:4c:e3:3d:97:e3:d2:44:e0:77:0b:77:92:2d:
                    c9:39:b2:f1:91:d3:65:2b:91:97:91:5c:dd:3b:77:
                    37:89:db:0e:98:e2:1b:32:85:0f:de:5e:2a:3c:a6:
                    d0:8c:28:d4:d4:b0:4b:16:fb:68:45:5d:dd:98:1a:
                    a2:b8:39:d7:e7:b0:04:e9:71:52:7f:5f:0b:18:31:
                    36:ac:59:95:71:4e:3f:50:cb:73:f7:f0:9e:e9:79:
                    91:bf:2b:72:89:f7:9f:b4:24:6a:ac:83:e5:56:d8:
                    be:cb:d4:4d:15:6e:4a:c6:de:15:42:92:b3:24:22:
                    81:45:bd:ef:70:6e:5b:a5:e9:43:f3:c4:70:a8:51:
                    16:ab:4f:6f:86:96:31:f9:d0:54:df:4f:71:19:04:
                    9a:26:34:12:35:dd:64:e1:99:c2:39:ae:65:6e:d3:
                    e2:1e:67:dd:e8:7a:4b:c4:b9:06:8d:dc:eb:a0:e0:
                    e0:a7:13:48:82:b4:d1:42:33:9b:c5:eb:10:6b:1d:
                    00:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:09:15:22:DA:90:84:4C:BD:B9:28:13:6B:86:58:84:6B:B9:80:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a154e75b-efdf-3a6b-93f5-ea0510c86608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:63:ba:76:a7:ba:a9:56:7f:9b:56:18:a8:66:d1:36:2d:50:
         6b:0a:78:64:25:4f:e5:21:99:54:58:54:90:6f:52:ee:9f:7c:
         ef:c0:32:4e:91:f8:5d:7f:1f:fa:a0:02:81:31:0e:6e:59:56:
         d9:15:6c:73:3a:dd:32:99:5c:75:5d:c1:6e:89:61:82:eb:22:
         25:f1:c7:94:87:71:90:5b:fc:c3:37:8b:81:fb:00:d3:3c:f7:
         5a:0d:2e:33:39:62:3e:ad:c7:e1:c9:7d:2e:76:29:a5:a8:f3:
         a8:05:36:e2:10:02:88:71:1a:e7:63:9d:a6:c8:b6:62:a4:37:
         10:27:f0:7c:a1:16:01:57:f4:c6:60:6f:65:25:7a:5e:6f:82:
         01:00:ac:45:1d:1a:96:f6:d3:4b:c9:c6:94:d0:69:54:2f:b8:
         b4:71:21:04:b0:7d:a9:5f:df:7b:29:69:9e:72:a0:cf:a3:14:
         a7:96:c9:6b:88:42:a4:5d:5b:bd:a2:68:99:95:cd:31:04:08:
         b3:8d:6a:8b:eb:19:51:b0:99:ff:44:4c:2d:cf:ba:f3:93:dc:
         5d:23:7c:1b:40:98:87:c5:22:19:44:5d:98:4a:b1:98:52:52:
         e1:dd:0a:95:60:5b:85:02:d2:c2:0d:c2:6c:ea:7a:36:63:c4:
         11:77:20:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:54:13 2026 by rpki-client