Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba6c45d4-d761-3ace-a3f3-976815895243.roa
File:                     ba6c45d4-d761-3ace-a3f3-976815895243.roa (raw, json)
Hash identifier:          8KDS4qm7rHNeIe1qFp5jdsop3Pn+zv2MkKyI7LLv4as=
Subject key identifier:   7D:A3:D2:CC:9F:FC:EE:55:5A:97:CF:80:80:99:D5:1A:AC:1A:F7:68
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EC7A1E2D4D1E10D22EDB9E030
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba6c45d4-d761-3ace-a3f3-976815895243.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     397201
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:e2:d4:d1:e1:0d:22:ed:b9:e0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=fb74f35c-dfae-43ee-bbb5-0b61a5ce8837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d4:55:dd:1e:eb:90:a1:47:8c:8d:55:eb:a5:
                    27:f7:53:d9:65:14:ec:59:d5:a5:c0:04:ae:dd:9d:
                    77:0d:03:ac:a9:4b:50:bb:49:2f:01:c9:ec:7e:aa:
                    0f:43:93:92:e7:0f:62:61:5a:6a:cd:11:07:0f:6b:
                    28:36:33:cd:7c:48:a9:48:09:0a:46:ff:c9:a2:5a:
                    7d:39:05:9a:96:86:cd:3a:02:ec:26:4a:5b:03:c8:
                    7c:1f:cf:c8:48:3f:16:35:79:6e:02:66:8a:c5:83:
                    19:fa:98:6f:59:1e:f9:57:4a:a0:4e:e1:86:6f:1e:
                    0a:12:89:ad:03:24:a1:f7:eb:21:76:f1:e1:d6:99:
                    bd:7c:84:3a:16:ef:d4:18:5c:bd:b4:43:c8:3c:4e:
                    2a:ca:cd:9f:fb:04:be:85:53:13:ec:1f:40:d4:60:
                    91:60:b1:87:75:24:f4:4c:d9:28:f7:45:59:30:9c:
                    ef:39:8f:6f:39:95:38:bf:8b:df:84:02:df:4c:18:
                    5c:80:95:17:a3:15:34:21:b6:dd:7b:95:6e:a8:97:
                    4c:15:0d:11:e8:7d:e3:57:60:49:9a:fe:45:bc:a9:
                    13:6f:fc:94:be:28:58:4d:0f:0d:e4:5a:00:4b:28:
                    52:3d:48:10:80:fe:9a:d2:b2:3b:2d:ee:31:c1:d8:
                    9e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A3:D2:CC:9F:FC:EE:55:5A:97:CF:80:80:99:D5:1A:AC:1A:F7:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba6c45d4-d761-3ace-a3f3-976815895243.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:6b:bc:94:38:86:79:72:89:bd:ff:cb:86:81:0d:d5:1b:62:
         22:6f:5c:ff:55:56:a3:0a:bb:10:23:b0:d8:ae:6a:f2:3a:ea:
         b8:39:e9:76:9b:fb:b2:4f:72:9c:65:0f:00:74:91:13:eb:3d:
         f3:c5:1f:aa:5f:ac:b8:b9:cc:06:b4:e0:23:3e:68:0f:6d:ba:
         82:5e:0a:96:c9:21:35:9e:5c:69:17:a3:9f:df:cc:7b:2f:3b:
         b9:f8:d4:55:29:2e:67:57:fb:56:cd:90:d6:3b:54:2f:81:fe:
         12:28:bb:69:27:81:9e:59:e1:9e:a5:74:b6:a4:f1:3c:27:a0:
         cd:d9:92:77:39:69:d8:e3:2f:24:01:2d:e0:e1:8b:f8:32:77:
         8b:c5:dc:9d:1f:cb:bf:90:9a:92:7c:60:40:57:60:a1:86:48:
         53:a0:5d:a0:97:a1:ac:3a:95:fa:b2:09:73:ff:13:77:13:fa:
         a0:f7:64:fc:a6:bd:b3:42:e9:0f:15:cf:bb:b0:46:46:3f:14:
         d2:4c:67:23:02:ac:05:3a:c2:ba:f7:73:65:40:b0:1d:c3:53:
         01:96:fa:42:8b:2a:ae:84:d5:83:27:73:3c:a2:58:ae:61:f6:
         e5:b3:d6:af:7d:ec:5e:31:06:f5:b6:a9:ab:cd:87:0f:39:dd:
         49:1b:61:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:56:47 2026 by rpki-client