Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9dcdef3-2819-3d52-9969-766e8bdaf9cc.roa
File:                     d9dcdef3-2819-3d52-9969-766e8bdaf9cc.roa (raw, json)
Hash identifier:          ULEspYQ8ivJnQPyDwJEaWAosOiu+eiYFcgJdab2DAtc=
Subject key identifier:   39:8E:11:41:B0:E8:E2:73:98:93:7C:E8:84:C3:BF:3D:9E:99:47:45
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F698D8DD5BDEC9D9D10865480
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9dcdef3-2819-3d52-9969-766e8bdaf9cc.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     21313
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:8d:d5:bd:ec:9d:9d:10:86:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=0fa0dcd5-4057-4d84-bc1b-55baa2f2e93e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8c:35:f7:c0:09:f7:87:91:7f:5b:1e:99:f2:
                    64:1c:09:51:46:4c:e7:d3:5d:b3:38:d4:a4:43:df:
                    ea:6a:f9:33:b3:42:43:67:9a:31:74:c8:85:db:b1:
                    07:6c:e8:88:0c:f3:81:29:a3:9c:39:b3:11:b7:48:
                    5c:8f:18:50:a0:38:e4:61:55:54:03:68:fa:2b:64:
                    e8:10:0b:f9:eb:cc:14:57:81:ad:4e:20:5a:eb:7d:
                    0d:75:81:cd:d7:7a:0d:71:19:0b:f1:ab:01:29:15:
                    36:e3:b1:21:73:fe:81:c0:9c:70:6d:db:a9:9c:93:
                    26:be:b7:18:c8:2c:de:8a:9d:06:5a:28:51:6c:f0:
                    4d:09:db:35:11:1f:79:22:a9:73:92:07:29:96:71:
                    29:4d:61:12:1d:8a:06:05:13:c6:d1:55:c1:2f:3a:
                    6e:4a:c2:26:7d:0b:c4:71:3b:20:c8:ab:a0:2b:0f:
                    77:78:6c:89:a2:70:6a:71:a6:69:8c:d9:86:b8:ca:
                    d6:4a:a8:fc:6e:0c:18:2e:1e:16:9a:76:3e:39:de:
                    4a:ab:84:f7:a7:f7:6f:77:34:7f:68:4e:8b:59:45:
                    78:e1:8d:ad:0e:b1:fe:ea:b6:8f:cd:19:32:ff:3a:
                    e2:29:ba:0f:14:ae:af:c8:7e:ce:5a:0e:b3:3c:d2:
                    cd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8E:11:41:B0:E8:E2:73:98:93:7C:E8:84:C3:BF:3D:9E:99:47:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9dcdef3-2819-3d52-9969-766e8bdaf9cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:c4:a0:f5:62:74:36:fa:cb:ad:cd:37:74:fe:d9:06:ea:35:
         92:83:e4:34:81:06:99:c9:8c:3d:ad:2f:78:5e:19:bc:2d:d8:
         cb:1b:32:a7:01:46:cd:51:8a:7d:43:39:4e:bf:46:de:77:10:
         e4:a6:b1:90:93:f8:1a:19:8c:67:26:e3:a9:4f:f1:37:d7:cf:
         11:78:c8:df:3c:da:98:b7:3e:1f:1f:ac:4b:57:41:12:60:8b:
         40:5f:a8:05:a0:2b:b2:9b:89:3d:e1:35:94:7e:b5:04:cb:49:
         95:fe:8a:5f:db:5c:54:92:17:4e:59:f9:79:9d:ed:9a:68:9c:
         2f:78:fa:77:f5:c0:14:89:b5:c1:69:15:45:03:9f:3c:62:c4:
         9c:4a:e9:35:d1:60:eb:23:0f:77:37:0d:dc:d6:b3:c1:00:51:
         d5:1c:86:f2:6c:6a:eb:ca:2b:60:f9:39:02:1a:1e:2b:0e:f6:
         b5:0e:9d:9e:a3:f6:ed:d1:5d:eb:cb:4d:18:27:d1:26:cf:c9:
         b7:45:f4:85:d1:c2:80:b9:34:9f:b5:ae:76:79:05:a8:a1:28:
         7c:4f:95:15:27:bf:4b:a2:f1:50:25:ec:f2:4d:74:12:0d:4a:
         98:01:c8:7d:1d:b5:aa:71:14:03:d8:1b:ae:91:45:3c:43:e2:
         02:9d:d4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:35:36 2026 by rpki-client