Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb7fc9ef-3af8-374c-966d-6249887babce.roa
File:                     fb7fc9ef-3af8-374c-966d-6249887babce.roa (raw, json)
Hash identifier:          4E1+pUr6kk76KGjblORTaIZIOSL/n7jvC4R4n7Y36MU=
Subject key identifier:   AA:4C:00:E6:88:3F:6C:91:B7:39:76:D3:7B:B9:EA:9A:4B:B8:AB:16
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F576811FF36FEB83A0CFE8EF0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb7fc9ef-3af8-374c-966d-6249887babce.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     396552
IP address blocks:        2620:74:2a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:11:ff:36:fe:b8:3a:0c:fe:8e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=4b8b48ef-fb26-450f-b8b8-7e982cf6f6ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5a:88:79:9c:5d:e9:e6:3b:e6:60:e4:5a:0d:
                    e8:5b:b7:df:43:06:69:7d:1c:49:30:c7:cd:f7:c3:
                    df:3c:3f:ad:45:9b:b1:ec:e2:fc:14:f2:63:5d:23:
                    0c:49:28:92:1b:37:48:db:af:e6:8a:bb:24:ff:f5:
                    f9:75:95:91:39:0e:40:35:e2:85:af:8b:df:51:ae:
                    5e:80:33:4c:77:dc:42:c4:de:cf:05:23:b1:f3:2b:
                    a3:88:62:ea:94:b5:bd:0e:55:0b:d4:b0:e0:04:08:
                    d2:15:5b:85:eb:b6:ec:32:a7:93:f2:c9:ed:33:4e:
                    0c:db:3c:8b:14:fa:f3:f0:29:87:b2:73:2c:b0:97:
                    fc:9a:b5:22:2a:7a:5f:9b:0a:98:21:49:0b:7f:6a:
                    4c:0f:e2:5d:41:5b:9b:de:be:53:68:f4:b9:fd:9b:
                    6c:44:38:c8:77:c1:25:f6:ab:9a:5a:ef:e2:2b:63:
                    07:ab:fe:89:5a:49:00:c8:48:08:f0:dc:9d:75:59:
                    55:8c:93:b7:93:7c:29:60:42:f4:d4:e2:d0:d5:c9:
                    7a:8c:42:c1:e6:20:3a:64:4d:de:5a:4f:20:02:7e:
                    c6:b9:33:f4:98:7d:94:72:be:b1:23:a4:67:b6:42:
                    0b:58:f5:f1:4e:2d:82:8b:d2:de:7e:3f:68:c5:f8:
                    bb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4C:00:E6:88:3F:6C:91:B7:39:76:D3:7B:B9:EA:9A:4B:B8:AB:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb7fc9ef-3af8-374c-966d-6249887babce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:87:ea:d4:10:e8:8c:7c:07:25:24:68:69:bc:0c:98:6e:c8:
         75:36:6c:fe:2b:3b:5f:00:31:9d:0a:ef:e7:be:8d:52:7e:dc:
         d8:de:1b:27:dd:20:50:6d:7f:54:61:8c:c9:50:2f:c4:48:3d:
         90:3d:c7:dc:d8:0a:e5:1e:ac:9b:06:08:dc:ce:7d:29:81:c4:
         f9:bf:01:e1:32:19:f9:67:02:c4:1e:0b:84:b1:4f:d0:3e:42:
         7c:56:01:f6:8f:56:3f:7c:f5:f6:96:f1:31:3d:09:69:34:0c:
         08:1d:b6:44:27:52:62:91:36:a1:b5:d5:e7:4b:b2:c8:8f:f2:
         28:fd:0e:d5:aa:74:f8:fd:6c:c9:63:b0:6d:e7:a5:7b:3c:04:
         f9:28:bc:c0:a4:a9:7b:45:8e:0d:e0:af:56:6d:f8:db:1a:6a:
         5d:ae:af:86:ff:57:d0:97:7d:70:0f:f1:da:3f:d6:0a:ba:6a:
         7b:46:96:87:18:69:80:04:30:0d:77:f3:8b:70:6a:bf:1e:42:
         b1:1b:02:77:3b:56:1d:fb:ea:7c:69:64:1c:6b:a6:ce:d7:ba:
         35:6a:7b:dd:e9:57:83:2f:46:09:c5:a7:52:c2:6b:de:11:10:
         91:48:2d:8e:cc:66:7e:a4:7b:d1:d4:ff:3c:69:cf:01:bb:77:
         18:24:da:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:11:19 2026 by rpki-client