Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c426e094-0f31-30c1-bf59-1310513e6d6c.roa
File:                     c426e094-0f31-30c1-bf59-1310513e6d6c.roa (raw, json)
Hash identifier:          DQA+vqhuhvrOLow5JUhvDJ6BIbv6XxRYS8J8KohiGyw=
Subject key identifier:   81:11:1A:BC:81:C8:E1:A8:41:39:C8:46:CC:DF:83:AD:BC:92:33:7F
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E3A2F5DC7FB563666F5455BA0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c426e094-0f31-30c1-bf59-1310513e6d6c.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     396546
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:5d:c7:fb:56:36:66:f5:45:5b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=c4bdc1f3-99d9-4d95-a841-e8436de7fbd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1a:dc:d3:58:ce:4d:40:72:f7:b3:40:43:12:
                    8e:95:e2:d6:f9:ec:4c:3f:aa:a1:a7:5e:36:3e:3c:
                    4d:de:b0:49:74:cd:67:3f:82:71:94:1b:aa:96:cb:
                    5a:04:41:0e:8c:47:4f:b7:7b:5a:30:fd:df:ca:68:
                    24:d6:9f:69:88:47:5d:aa:ff:50:e4:53:75:b9:d1:
                    1f:21:54:20:96:e9:13:e6:55:a7:ef:0e:60:0d:12:
                    21:43:8a:a5:7a:e9:b7:7e:96:a1:d0:58:96:d5:24:
                    d9:44:d3:78:a6:1f:41:91:14:13:3e:c6:40:4b:1f:
                    c4:32:5e:7a:bc:5f:76:84:be:ef:5d:54:9e:ed:05:
                    bc:97:3e:82:c8:ec:c8:54:45:63:4c:12:da:9d:60:
                    68:cc:5c:35:5b:72:66:0f:b9:de:8e:bb:bc:f0:d2:
                    b4:b7:9b:22:eb:f8:be:77:64:94:2c:8d:fb:20:14:
                    7f:f9:d9:5f:1d:8f:57:4e:16:55:b3:df:53:c0:b1:
                    72:52:e2:5e:53:bf:09:74:b9:9b:12:2c:56:24:03:
                    bd:a6:d3:0e:90:a8:77:5d:36:cc:04:ba:a4:5c:4c:
                    ca:d2:bb:6d:b8:c2:8b:5f:20:1b:af:7c:5f:88:7c:
                    80:f0:dd:93:27:9f:99:46:cd:ac:f5:17:5e:79:4d:
                    ca:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:11:1A:BC:81:C8:E1:A8:41:39:C8:46:CC:DF:83:AD:BC:92:33:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c426e094-0f31-30c1-bf59-1310513e6d6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:7b:1a:21:0c:f8:f7:85:64:a4:30:f2:1c:3d:6e:ea:14:ff:
         61:fd:50:9d:14:d1:38:54:78:5e:d5:48:53:24:ac:f1:53:bc:
         e8:3a:0d:96:b0:fb:40:08:c2:ad:f4:d5:98:c7:3d:af:db:a3:
         7d:f1:ff:c0:6e:2a:ca:f0:02:7e:50:0a:29:92:57:0f:d7:4d:
         c6:5c:70:8b:f1:d7:97:ef:fa:d1:84:29:0c:4d:64:85:9f:1e:
         f0:c9:cb:a9:6b:af:6c:5a:61:e2:02:60:83:24:83:8b:c7:f7:
         d1:51:c4:f2:52:2f:86:a9:b8:0c:67:02:45:9a:bf:49:1f:01:
         8b:3d:94:33:94:a2:17:68:09:fa:fa:ed:02:47:d6:16:7d:af:
         85:6a:78:41:19:2e:d8:1e:57:8a:9c:88:01:ca:92:dc:28:80:
         ce:38:48:17:5c:eb:fe:f4:d1:f7:fd:b1:a6:44:de:b6:fe:27:
         83:de:51:b7:8b:aa:1b:57:fb:33:1f:6a:61:c7:dc:58:03:7c:
         52:3a:3c:8f:5f:70:df:5d:be:fb:b5:16:c3:9e:a3:88:84:19:
         48:bb:e3:bd:7f:3f:d0:f6:c2:21:42:a4:f9:09:ec:6d:d8:00:
         89:08:d7:cb:aa:dd:95:06:f8:f2:8c:17:d4:5e:57:ae:6c:f8:
         f9:c5:85:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 17:21:14 2026 by rpki-client