Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aab20ba5-5396-39a6-96e4-8f6604c8e135.roa
File:                     aab20ba5-5396-39a6-96e4-8f6604c8e135.roa (raw, json)
Hash identifier:          Ji3irSTirmRBU0r6p7vspS58fy29d7p4Ph7TzYVusPw=
Subject key identifier:   BA:30:37:82:9A:23:D3:95:29:FB:D2:20:FE:D6:4E:7B:70:4C:D4:30
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EC7A1DB30EA50A5AFC9CBF48A
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aab20ba5-5396-39a6-96e4-8f6604c8e135.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     40647
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:db:30:ea:50:a5:af:c9:cb:f4:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=627932ca-d295-45ff-b488-d482af4e2986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:96:f4:4e:d6:97:9a:81:54:76:96:d0:22:7e:
                    a0:77:e5:a4:df:b3:98:38:dd:8f:54:ad:ee:ac:4b:
                    3c:d4:42:2e:fa:b5:ec:9b:01:10:85:d2:37:11:6c:
                    79:39:68:19:d8:39:8d:21:9c:11:e9:01:83:a6:c5:
                    16:06:c3:2d:78:c4:c8:6f:72:d0:8a:c8:40:e7:2a:
                    cc:83:9e:e2:da:8e:e9:cc:69:8f:2a:49:a2:78:86:
                    5a:5c:96:5d:89:93:11:da:e8:e1:75:87:81:06:8e:
                    e6:99:d2:76:9a:1b:bd:6f:fc:b6:c3:d7:b5:a7:df:
                    5b:3f:1d:b8:fa:d2:59:dd:b7:b7:8b:70:25:9d:b0:
                    e6:29:b9:ee:5a:c0:31:3c:17:6d:9d:9f:1a:30:22:
                    fa:00:a6:6f:50:a6:49:07:42:0e:f3:8a:5e:0f:b5:
                    e5:01:91:fb:9c:c9:0d:4c:0d:bf:b2:ae:10:fb:40:
                    bc:b3:32:25:30:7c:1d:a2:01:cd:c2:8f:82:8f:d7:
                    ad:e6:2a:63:36:90:83:21:67:5c:77:45:5f:58:ca:
                    a1:1e:c4:73:1c:c3:a9:ce:33:62:4b:c2:c3:ad:f6:
                    b9:b9:27:b2:0d:c1:25:57:7f:04:06:e3:73:c1:40:
                    19:ed:e4:a6:af:72:3d:53:b2:f8:56:2d:ae:ba:39:
                    c7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:30:37:82:9A:23:D3:95:29:FB:D2:20:FE:D6:4E:7B:70:4C:D4:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aab20ba5-5396-39a6-96e4-8f6604c8e135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:7f:dc:d8:44:a7:90:0a:11:da:92:9f:51:52:66:7b:bc:8f:
         68:e9:ee:60:66:60:18:51:e4:26:10:cb:d1:26:bf:dd:7f:01:
         b5:df:18:e2:b3:17:fc:81:f3:b7:25:f4:4b:b2:32:39:83:19:
         77:b7:25:11:72:f5:e4:fa:9a:df:8b:57:b8:89:9c:d5:09:93:
         69:9c:43:7d:ce:5e:3d:71:45:3d:dc:a9:b0:14:ce:3e:6b:50:
         97:63:1e:08:c8:d7:c4:df:48:02:41:2f:54:a4:ea:14:53:29:
         20:81:82:84:e4:1d:ef:3b:05:dc:5d:a5:6b:66:a7:b7:91:28:
         a8:ca:86:fe:3b:ac:da:c0:f3:58:47:4a:a9:3a:bd:19:60:3a:
         a2:bb:c8:6b:70:c5:a1:67:35:79:62:a1:87:7c:81:7b:e7:cb:
         58:54:30:4e:d9:9f:7c:1f:bb:df:fd:7f:bb:67:f1:99:ed:22:
         6c:ed:44:92:d7:14:2d:a0:d7:7f:4b:b0:1b:67:50:d2:4c:ce:
         cc:29:2a:fd:20:9b:c8:58:c1:55:ce:ad:a3:ff:51:17:61:31:
         f2:2a:b2:e4:f4:a7:91:b8:6e:cc:2c:ed:4e:40:b1:d2:6a:de:
         de:83:a6:e3:98:5c:8e:a9:50:8e:9a:50:4a:3b:f9:c8:a4:96:
         58:67:1c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:55:56 2026 by rpki-client