Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fbdf453a-5a87-3bd1-b390-b73280df4dfb.roa
File:                     fbdf453a-5a87-3bd1-b390-b73280df4dfb.roa (raw, json)
Hash identifier:          L1iMp9haqZEsnHKzRb1LhIS/jEobuw5G++eIITKNk5E=
Subject key identifier:   86:8F:F5:79:0B:18:9B:36:3F:8F:71:11:73:4B:D7:DA:86:57:23:C4
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F498786D7A6F3A6CCCB437520
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fbdf453a-5a87-3bd1-b390-b73280df4dfb.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396590
IP address blocks:        2620:74:2c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:86:d7:a6:f3:a6:cc:cb:43:75:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=de70d180-ceb5-448c-8a0e-a3b3e43e3dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:58:32:12:a9:5e:5b:78:da:74:49:de:a5:c8:
                    9d:03:93:e7:25:5b:a9:01:2d:57:30:5e:24:44:43:
                    a5:6a:cc:2e:58:44:d2:98:25:8d:76:9b:08:a7:c0:
                    06:88:5b:95:1a:d7:c5:74:63:7a:c8:93:e6:6b:c4:
                    ec:e0:5d:7a:3e:71:ca:44:1d:77:4f:39:c3:90:6d:
                    c4:10:a1:b1:e4:cd:52:42:37:f3:92:59:69:c7:42:
                    1e:09:e1:b3:3b:34:7e:75:3c:35:81:7a:4d:96:4f:
                    4e:cc:a5:22:81:ce:ee:2a:4d:dd:d9:eb:d0:30:8f:
                    54:cb:e0:b3:2c:43:6e:ed:c3:3f:b4:eb:3a:5b:e2:
                    6e:e8:5d:f2:d8:f0:56:60:a7:c5:dd:9c:65:46:60:
                    1d:ce:f2:69:45:54:9f:f4:c5:28:8c:d3:66:30:70:
                    49:6b:ea:d4:b5:69:c2:99:0a:fa:8c:5d:85:9b:fb:
                    fc:30:0f:1f:96:23:3b:4a:be:cf:d5:78:76:ba:ee:
                    75:3a:3c:11:70:08:a5:89:a4:d0:fc:ce:1a:2f:b4:
                    d6:79:35:7f:2a:e7:7f:4d:40:5d:09:44:b0:da:9a:
                    1f:1c:58:f0:bb:b7:e5:0b:ed:fc:98:81:5d:43:65:
                    59:63:ba:9a:c6:7d:3c:4e:a3:1d:f2:84:c8:4d:b9:
                    73:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8F:F5:79:0B:18:9B:36:3F:8F:71:11:73:4B:D7:DA:86:57:23:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fbdf453a-5a87-3bd1-b390-b73280df4dfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:ec:26:f0:cb:ae:a6:90:e9:fd:b3:8a:6c:d6:66:bb:2c:67:
         8e:94:c0:81:09:7c:3f:54:9d:82:00:38:c5:2a:b6:3c:93:55:
         ab:70:7a:5c:4a:36:81:24:26:3c:e9:82:82:a3:86:9c:e0:de:
         36:1c:07:76:aa:f8:ea:ec:d0:44:c8:01:01:29:29:15:a1:1d:
         d2:fe:9a:69:7b:b5:2b:79:31:0d:c0:3a:0b:e5:a0:61:08:8c:
         39:66:c8:c5:bf:72:67:29:6b:d3:9c:4a:79:78:88:c7:88:95:
         e3:6a:a8:14:27:aa:9d:17:b5:00:b8:b1:92:97:41:ae:33:1e:
         39:89:43:8c:51:f3:80:9e:1a:74:3d:91:85:26:de:fa:0f:22:
         d3:b2:e0:b4:4f:1b:0d:28:01:fd:ef:11:53:68:a4:f0:d2:01:
         7e:a1:0c:d7:86:07:42:e8:18:75:40:96:07:98:a4:26:f6:77:
         f1:91:e2:23:cf:bd:18:c1:04:60:9d:f4:c0:e3:a6:e3:09:a8:
         a1:d6:b2:f8:7d:87:96:df:c4:6d:02:b3:fd:e1:4e:e3:05:78:
         94:37:45:c9:59:f4:d4:93:18:ec:04:5e:19:26:71:f8:c5:3b:
         f4:35:b9:d3:96:f5:54:7f:cb:b8:f9:f7:c4:48:b3:37:5d:92:
         19:eb:44:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:39:34 2026 by rpki-client