Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9566ca7-bbd2-3432-a0e3-ed96d4e57c39.roa
File:                     d9566ca7-bbd2-3432-a0e3-ed96d4e57c39.roa (raw, json)
Hash identifier:          0bkSWdZk9pO85JJrOdilObrM1C65mapfiLLLpIua7Fw=
Subject key identifier:   4B:7B:1A:EE:F3:84:0F:F5:5B:17:9A:55:EA:19:30:16:B2:A0:09:0E
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EDC9231E518DC179AA9922280
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9566ca7-bbd2-3432-a0e3-ed96d4e57c39.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     396543
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:31:e5:18:dc:17:9a:a9:92:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=fa62c3c1-7ba3-40e4-8b40-a5119c986bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b3:09:43:32:e4:50:7f:11:98:a7:d2:c2:ca:
                    6e:e6:c7:d3:8d:75:11:10:7c:52:74:f2:fc:6a:b6:
                    10:fb:eb:b6:7f:f5:e5:06:aa:10:bd:4d:af:0e:2e:
                    3a:ad:51:7a:73:fa:26:70:2f:eb:0f:23:91:d7:83:
                    98:c9:36:9b:47:88:5d:a0:8e:01:d4:f0:da:43:6b:
                    2a:f1:6e:50:73:96:79:95:17:0b:89:f0:f0:dd:de:
                    43:4c:fc:a5:90:09:70:5c:a7:01:f3:da:fe:90:3e:
                    9f:83:e0:e0:22:25:b1:5c:f9:3e:2c:05:cb:af:79:
                    92:a8:34:0a:4b:6e:41:a9:52:f5:cc:df:8f:49:95:
                    11:89:b5:2d:04:de:42:7e:ae:5c:b8:63:d2:08:4b:
                    cc:df:af:99:40:79:ca:70:f3:7f:94:a6:46:c1:0c:
                    90:25:66:5b:15:15:4c:74:55:10:c6:4a:62:38:77:
                    93:39:65:12:c5:88:2c:41:e9:51:92:d2:f3:14:00:
                    47:e1:dd:38:06:b4:da:75:4a:1d:4c:54:6a:b7:ac:
                    f7:50:32:72:99:19:9d:45:17:e4:8d:11:54:29:48:
                    b8:5d:2c:fa:04:2c:4d:f5:1c:77:ac:06:09:8e:fd:
                    fb:12:4c:d3:78:90:53:5f:42:1c:0c:b1:05:33:d8:
                    6a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7B:1A:EE:F3:84:0F:F5:5B:17:9A:55:EA:19:30:16:B2:A0:09:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9566ca7-bbd2-3432-a0e3-ed96d4e57c39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:76:26:c6:30:2f:c6:d9:9f:a3:5f:47:d5:c1:30:e1:ab:68:
         43:06:ce:1f:cc:d3:0b:08:07:7b:4c:69:ae:e2:6f:a2:69:e1:
         3f:29:10:e7:17:70:4b:63:9b:5c:09:7c:3a:32:06:c1:50:7a:
         51:75:c4:c9:86:3a:09:cc:db:81:82:e5:da:86:2b:4c:41:b7:
         28:c8:0c:90:bd:1a:6d:86:54:db:50:6b:6e:33:66:5c:44:c1:
         b1:3f:32:4b:e1:0a:4c:a9:4b:b6:04:a2:6f:a0:4a:a8:f5:ff:
         7c:4f:ae:a7:71:b1:be:d0:08:d4:f8:a2:87:60:34:e4:46:e3:
         13:1d:92:54:99:50:ee:c2:28:b5:78:a2:12:a2:01:60:a4:0a:
         00:e3:fc:ae:88:1b:eb:7e:1d:c6:38:d9:d0:7f:d6:ee:64:82:
         3d:1c:aa:82:aa:99:3c:07:2a:c3:59:74:bc:4a:05:de:bb:f6:
         18:18:74:89:fb:dc:07:d2:7c:96:16:0c:5a:bf:b5:ad:d9:bf:
         bf:b1:b8:a8:18:86:cd:57:85:c4:56:4f:99:f3:84:87:a9:cd:
         a5:90:91:d8:fb:c2:cd:29:cc:48:cb:de:48:a6:d6:22:74:97:
         c6:01:4a:52:f6:fd:a4:71:2e:14:e9:ac:5c:52:97:53:de:52:
         79:dd:8b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:53:42 2026 by rpki-client