Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df641e57-e58c-33f4-9f81-94d30a05cae6.roa
File:                     df641e57-e58c-33f4-9f81-94d30a05cae6.roa (raw, json)
Hash identifier:          w7h2LIytuVa5+l9GexTD8SuLFC0W3O8z369TV+oqkg0=
Subject key identifier:   96:26:CF:9A:B2:D1:B0:39:46:26:5D:B4:58:E6:BF:83:DA:AD:07:2B
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EA7904FFE19206C5C5C73F5C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df641e57-e58c-33f4-9f81-94d30a05cae6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36628
IP address blocks:        2620:74:20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:4f:fe:19:20:6c:5c:5c:73:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=70046656-6289-47d1-89ed-03ac180d1bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4c:9d:68:96:61:2a:f0:f5:c4:93:6d:23:30:
                    9a:55:f1:a4:3b:e0:77:ef:3a:9e:db:24:bd:85:db:
                    2a:b2:7a:6e:d9:21:f2:d2:cb:6f:27:9a:11:a9:b4:
                    c6:89:10:80:4c:ac:6b:40:20:54:90:7b:6f:3d:04:
                    fe:a7:9f:c5:ce:d8:7e:54:2d:07:a8:9e:fc:d3:bc:
                    53:a0:81:f0:25:24:85:89:c8:18:ac:70:81:bc:76:
                    d3:4c:92:db:bf:f3:c3:14:d9:09:ce:e2:f8:63:0c:
                    89:17:a6:80:2b:f2:9f:e4:25:92:80:76:dc:1d:b8:
                    f9:ad:38:dd:a9:dd:d4:d0:cf:b7:e9:2b:e9:07:d5:
                    ef:b7:8c:fd:92:84:64:e0:86:34:b1:77:97:1c:ba:
                    07:4f:36:ee:af:b6:7e:3b:19:e9:0a:01:ea:9c:52:
                    15:b3:da:99:2d:54:2c:9d:53:7c:83:7b:f8:89:d3:
                    7f:d8:0b:68:7d:96:e7:ae:37:a8:1e:0c:06:32:cb:
                    49:44:f5:6a:48:ba:63:f1:41:54:61:fc:79:8d:03:
                    2f:61:4e:e7:c6:c3:be:22:09:63:69:61:9c:e5:ba:
                    d6:ef:d6:6d:3c:7f:42:dd:20:16:82:dc:9b:07:e4:
                    87:2d:9b:24:38:a0:3a:f3:46:13:ab:b0:63:02:e3:
                    54:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:26:CF:9A:B2:D1:B0:39:46:26:5D:B4:58:E6:BF:83:DA:AD:07:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df641e57-e58c-33f4-9f81-94d30a05cae6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:00:96:8b:92:a7:6f:dd:5a:f4:2e:f6:33:69:0c:ec:b4:3b:
         f5:d5:ec:97:ca:95:1c:3e:76:d2:39:ac:a0:c0:fd:b4:cc:40:
         c9:71:65:be:9b:62:c9:10:ca:f4:1d:da:40:e8:1d:53:40:01:
         34:d4:f4:5a:b4:4e:12:11:6e:74:2f:e1:72:09:d0:f4:b4:ca:
         42:a4:32:94:85:d8:d4:03:eb:7b:14:9f:8f:15:97:67:a4:bf:
         e6:1f:3d:b5:73:ba:71:16:e3:ba:15:28:f1:c6:83:64:c2:4e:
         4a:74:88:f0:ab:6e:ca:dc:45:04:f4:dd:8c:bb:a3:2b:80:fd:
         12:00:83:43:c8:62:b8:ff:13:e6:cf:2b:1e:2b:39:86:5e:6a:
         db:fb:10:f1:52:4d:68:01:7c:c0:b4:4b:b7:4b:37:7f:4e:ec:
         5a:0e:af:2e:b8:14:8b:39:27:c5:66:27:f5:a3:d2:dc:23:32:
         35:b9:2b:13:08:f3:4d:d1:90:10:59:ee:d7:a9:bd:d6:5e:aa:
         9e:d6:ea:08:ed:14:ff:5b:75:99:65:be:15:4c:25:40:1c:61:
         5d:4c:7a:f2:a2:80:e4:26:e3:ad:ce:67:6e:bd:ff:bf:31:fd:
         fb:48:9a:f3:68:0b:46:7d:d7:8e:1e:1a:cf:49:d6:42:bf:4f:
         c7:fe:b3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:53:32 2026 by rpki-client