Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/048b179e-1129-3a1d-adea-f5ceea991b26.roa
File:                     048b179e-1129-3a1d-adea-f5ceea991b26.roa (raw, json)
Hash identifier:          GywDOuvsrZh4XyJbwAg9W8SEhY2pvsV7NEE79F+pqk8=
Subject key identifier:   35:5F:68:61:5B:8E:C9:65:03:51:43:F3:66:8F:1E:77:7B:10:CC:3D
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E043626292B3FA93C7FB72A00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/048b179e-1129-3a1d-adea-f5ceea991b26.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     396610
IP address blocks:        2620:74:2b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:26:29:2b:3f:a9:3c:7f:b7:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=f833777e-c9ba-4e0a-a38c-c9fed5437143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:aa:85:62:e2:29:f6:5e:d9:e1:ab:b7:58:aa:
                    15:9a:a6:8a:95:5f:e0:fc:b1:26:a5:37:92:06:6f:
                    68:00:b0:d4:7f:94:7f:d5:12:64:a3:a5:13:97:e7:
                    51:07:e5:70:e2:9e:d9:46:f6:81:7d:3a:dc:18:f7:
                    ad:f2:d8:5f:34:3f:0b:77:39:9d:fe:f4:82:12:13:
                    5c:3f:c4:08:ed:a0:9b:bb:49:b1:66:86:69:df:38:
                    2e:03:ee:5c:83:24:68:61:56:a6:30:d8:8b:50:03:
                    c6:63:00:20:36:8d:e1:99:1e:52:20:03:24:8d:04:
                    da:df:f6:5f:42:61:2b:e8:53:a0:d5:bf:5e:e0:cc:
                    eb:13:02:3b:e4:fa:30:88:91:5e:06:d8:34:2c:a1:
                    ca:f3:3a:f4:d3:26:94:39:87:f8:88:db:bd:d3:82:
                    1c:42:08:6c:14:f1:a7:90:0b:77:eb:b3:7b:84:19:
                    98:68:6d:c4:22:e9:9e:d2:3d:08:b5:21:17:16:8c:
                    6f:3a:df:56:2b:21:12:07:7f:ed:78:8d:4c:37:0e:
                    78:6f:c6:cb:4e:10:a8:aa:a7:3b:fd:5a:e8:bf:23:
                    0a:33:49:2b:a1:c7:c1:e5:48:9f:04:1b:fd:f2:91:
                    93:25:46:24:a8:84:d9:c7:4c:da:d1:ef:15:53:5e:
                    96:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5F:68:61:5B:8E:C9:65:03:51:43:F3:66:8F:1E:77:7B:10:CC:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/048b179e-1129-3a1d-adea-f5ceea991b26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:62:98:76:47:94:59:99:a6:26:1c:9f:b3:7c:a3:fa:2e:e6:
         b9:62:98:5c:2d:79:0e:b5:07:6d:9a:f6:08:de:54:47:9e:6b:
         9e:7f:6b:4a:75:88:74:d5:55:39:91:58:fc:cf:02:2f:be:7d:
         98:2a:67:74:07:92:cd:6b:e4:9f:82:15:52:45:0c:30:6e:9d:
         83:17:b0:7e:7f:16:1e:12:32:de:77:75:79:8b:00:77:74:da:
         54:a2:79:12:23:b4:27:82:7b:b9:63:db:80:e7:c7:7c:f8:09:
         fd:e7:21:ec:af:08:91:67:21:a4:32:c0:ab:df:c0:7f:b1:a7:
         fe:8f:3e:96:29:88:76:c0:29:c4:26:3b:61:04:f8:d1:e7:ff:
         4a:bc:d5:c5:c7:4a:11:cc:ec:12:91:00:75:ba:e0:e0:67:39:
         d7:1a:35:6b:da:93:00:13:8e:71:02:01:29:f2:d4:97:43:ac:
         c4:7f:b9:d9:69:32:86:c0:23:9b:23:09:0c:d0:47:70:56:cc:
         a6:4b:c0:36:f1:90:e7:24:e4:37:0a:7d:7b:cd:4a:84:68:6a:
         19:10:0c:f9:51:8a:37:a1:d1:8f:db:db:f1:c3:aa:60:8d:03:
         9f:00:15:44:65:54:4e:df:94:8f:b3:df:87:ef:04:7d:9f:7a:
         88:32:42:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:57:57 2026 by rpki-client