Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/4eaa6267-2328-3fa5-81e5-eabb4343d53c.roa
File:                     4eaa6267-2328-3fa5-81e5-eabb4343d53c.roa (raw, json)
Hash identifier:          Loqhn2cjd5Xt/RkOvP+WJ47HVCBxiYorfJNgQ0vqlqs=
Subject key identifier:   E6:32:03:56:F6:9F:6F:AA:AC:3D:AA:59:BD:AA:DA:4E:8C:D2:22:71
Certificate issuer:       /CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
Certificate serial:       010D0C9F4328584EE4235AC1E0306B26521BB800
Authority key identifier: 2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/4eaa6267-2328-3fa5-81e5-eabb4343d53c.roa
Signing time:             Wed 19 Aug 2026 18:04:03 +0000
ROA not before:           Wed 19 Aug 2026 18:04:03 +0000
ROA not after:            Fri 07 Jun 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        2620:1ec::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:5a:c1:e0:30:6b:26:52:1b:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
        Validity
            Not Before: Aug 19 18:04:03 2026 GMT
            Not After : Jun  7 04:00:00 2030 GMT
        Subject: CN=84c021b9-7434-43a8-b613-018e77469d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3d:d2:63:1a:62:92:e1:1d:e5:07:68:6a:7f:
                    f8:10:70:ac:c8:02:01:04:55:86:9d:80:f5:9b:1e:
                    6c:69:d0:0a:db:8f:75:4c:c9:26:ba:34:68:78:97:
                    36:1e:8f:49:16:56:17:16:36:56:50:21:44:6b:97:
                    dd:10:8b:e5:c8:d7:7e:d7:fd:79:ce:39:2c:94:2a:
                    00:1f:b2:69:b1:73:6f:6f:d3:e5:5d:2c:59:07:02:
                    0e:b0:30:f8:1f:f3:15:e2:37:12:b0:4c:a7:10:da:
                    22:40:1e:e9:3d:d7:8e:f6:a3:bb:3f:cc:89:ce:ba:
                    8e:78:60:c1:d0:67:08:bf:36:ae:b0:70:58:23:28:
                    f1:61:61:ca:a3:14:80:ad:4c:b2:ff:23:cc:b7:cc:
                    95:48:ec:9b:0a:95:b5:7f:8b:0b:d3:32:5b:2f:ff:
                    98:46:23:3d:5e:bb:50:32:d9:d0:a0:24:aa:02:eb:
                    db:a1:e2:eb:99:9a:3b:f3:b9:3c:88:d4:55:20:ca:
                    af:be:83:45:8d:a4:40:d3:92:9b:54:42:77:91:91:
                    99:bb:d0:21:73:fa:cf:21:58:e0:dc:a2:22:9f:f9:
                    dc:da:f8:31:1f:8c:80:07:b0:64:c8:c2:6c:13:b0:
                    42:39:1e:fa:cd:46:0e:05:24:1f:6f:8a:b8:30:bf:
                    b9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:32:03:56:F6:9F:6F:AA:AC:3D:AA:59:BD:AA:DA:4E:8C:D2:22:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/4eaa6267-2328-3fa5-81e5-eabb4343d53c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl

            X509v3 Authority Key Identifier:
                keyid:2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1ec::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:57:79:db:21:e3:65:97:19:cf:e2:4e:1c:a8:95:fe:c2:9d:
         68:c4:c3:bf:6a:fb:ba:11:9b:87:d6:51:de:d6:dd:ec:dd:07:
         49:18:2b:05:68:22:9a:7f:67:2d:f8:60:51:6d:b2:b1:97:7b:
         d2:5a:ba:7c:64:e1:25:99:50:e4:42:55:5d:56:9f:a5:ae:ee:
         d3:66:af:dd:62:83:82:84:ee:0c:be:8f:58:12:03:e8:88:56:
         95:4b:b0:7c:cb:f7:9e:38:a6:76:fd:33:e4:63:6b:02:65:72:
         89:b1:af:8c:71:a3:ea:2b:d4:95:02:be:be:eb:46:9d:40:24:
         e0:07:52:70:b2:5f:b1:fc:26:2d:37:2f:08:90:1d:f5:de:67:
         41:15:84:0f:0d:3a:be:58:9f:68:b4:d6:1a:11:9b:8b:56:d7:
         08:cd:a1:1b:5f:b0:09:d2:6e:8b:04:dd:ed:f7:34:41:50:65:
         d9:fa:46:30:97:6b:d1:92:bf:72:c3:6c:11:c8:43:2f:99:76:
         e9:98:c3:b5:6e:3f:7e:02:c7:12:31:6f:4a:a2:c7:5e:b7:6d:
         2d:d4:3a:50:51:02:ed:e7:ef:63:4e:31:e9:9f:56:c2:7d:31:
         01:7a:26:9d:d0:5c:51:29:4b:e1:0c:45:03:38:15:21:3b:96:
         9d:14:0a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:57:58 2026 by rpki-client