Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de032a30-60e9-32f5-a47f-e93fe1f3af5b.roa
File:                     de032a30-60e9-32f5-a47f-e93fe1f3af5b.roa (raw, json)
Hash identifier:          AU7j1kqPC/y8dEDRH03hjZ+ma1D/VDYFSBSrD1Zw/PU=
Subject key identifier:   99:F1:2A:79:59:3F:83:5A:B9:2B:4C:BC:BC:50:9E:05:07:8B:F2:1B
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EC7A1DE3E1F5659F6D3C60400
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de032a30-60e9-32f5-a47f-e93fe1f3af5b.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     36619
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:de:3e:1f:56:59:f6:d3:c6:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=72811067-67dd-4d30-aa7b-3dd3b84ef08a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e9:c7:ec:6e:a2:c3:eb:7a:dc:4a:ba:fb:3a:
                    70:95:bf:08:75:7c:95:8d:19:d6:13:c0:87:a7:63:
                    db:7f:2c:be:f2:da:9e:79:82:35:69:ee:f4:08:be:
                    0e:b4:79:15:80:fd:48:c9:3e:bf:71:12:5b:a9:a7:
                    b3:ef:ca:d2:27:06:02:a6:47:31:27:7b:cb:67:2b:
                    4c:79:21:e1:ce:05:18:81:ab:d9:79:d6:db:09:2d:
                    9e:04:9b:1a:ca:a5:3d:21:36:fb:79:55:56:29:ee:
                    1f:c5:32:4b:2c:e4:1c:40:b7:e4:52:c0:f0:13:b7:
                    30:6f:9f:69:0e:a8:61:a1:4c:77:98:1d:96:fa:e9:
                    5f:fe:b3:e5:89:92:13:94:a3:3c:2a:f8:64:55:2b:
                    46:83:fd:09:a2:e8:ee:32:9d:95:6b:4a:90:93:70:
                    13:2e:8e:cd:4e:16:35:9c:d8:d0:60:63:5c:a7:90:
                    6d:a6:c4:c5:d4:d2:e8:7c:2a:e4:31:eb:7b:c0:07:
                    b7:e4:d1:db:30:cc:5d:5c:fd:f7:2c:82:08:59:42:
                    c5:c8:0a:9b:77:5e:28:cb:1b:c6:28:59:7c:82:9a:
                    69:a4:78:2e:bc:c7:fa:e8:c7:d3:43:53:d0:0d:8f:
                    85:c5:52:33:96:05:d7:87:01:b7:08:ec:ab:9b:de:
                    1b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F1:2A:79:59:3F:83:5A:B9:2B:4C:BC:BC:50:9E:05:07:8B:F2:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de032a30-60e9-32f5-a47f-e93fe1f3af5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:6f:70:03:80:ab:26:d0:e4:34:bb:2f:62:47:7c:de:e1:f6:
         69:48:6e:95:e5:64:4e:d8:48:87:8d:8e:49:8e:60:d7:7b:60:
         1d:a0:fc:20:5b:49:70:09:50:50:0b:8c:ae:71:db:66:8a:5e:
         0f:f2:3b:10:57:5f:b3:40:cd:b7:16:f1:a5:41:02:4b:3c:b4:
         e5:ad:fb:b1:b7:d0:e9:fc:18:5b:b5:7f:2d:42:9c:b4:00:34:
         8e:5b:12:2a:4d:4d:2c:2d:40:b6:70:ed:68:03:9e:b8:3d:90:
         7f:fb:32:0d:85:6a:38:34:7d:56:57:45:be:a6:b1:36:a4:89:
         d3:ed:97:f6:e8:1c:1c:9a:48:75:18:58:f7:8d:e9:45:c2:80:
         46:40:8d:e2:ae:7c:6c:14:4b:43:12:8c:86:3b:b4:84:46:40:
         9c:b9:34:df:39:55:87:6e:23:9b:11:59:40:4e:b8:d3:ad:31:
         8d:50:07:4b:51:f8:ac:5f:30:ca:ab:75:3e:d2:69:7c:96:3a:
         cc:b1:c9:9b:a7:d1:76:f5:e4:47:fe:5e:f9:48:2d:ff:17:8b:
         82:b0:03:bd:3b:96:62:f7:13:5f:4e:9c:08:9e:f3:fb:99:ca:
         66:b8:78:99:46:80:56:79:c4:8b:35:42:cb:64:9e:de:61:0a:
         58:cf:d8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:53:30 2026 by rpki-client