Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0a916dd0-0e3f-3aa8-96b3-2c575cb007db.roa
File:                     0a916dd0-0e3f-3aa8-96b3-2c575cb007db.roa (raw, json)
Hash identifier:          KyNRMzu9Yhu/Yno/GKjvbZgS4Pupuj1ND4gfCX5+Vzs=
Subject key identifier:   98:2F:DC:CE:D5:AD:37:CC:87:D9:13:A5:93:6E:DC:20:52:DF:EC:4A
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E131990629F93F52026B35540
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0a916dd0-0e3f-3aa8-96b3-2c575cb007db.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     36629
IP address blocks:        2620:74:2a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:90:62:9f:93:f5:20:26:b3:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=1acc87d6-5f53-47c0-8e53-eef8781e4cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:12:93:6f:b7:0c:8b:e5:13:f0:e7:7d:8a:0d:
                    92:20:62:02:0a:a2:47:38:21:dd:55:b7:93:34:2b:
                    86:98:eb:77:c7:ab:86:81:8e:cb:09:13:c5:27:d9:
                    6f:0b:6b:3e:de:a5:54:4c:99:64:e4:50:c6:ce:58:
                    f8:72:e3:7c:d7:61:0a:16:4b:1c:19:c5:28:dc:1e:
                    32:50:36:a9:39:0e:87:6f:99:dd:f3:8e:73:8f:eb:
                    36:30:4e:13:b1:c7:e7:56:43:0b:b1:5e:5e:d1:90:
                    92:a4:b3:27:f2:a4:85:0c:3a:15:f0:57:92:14:fb:
                    b0:c6:8e:2b:98:e7:20:36:f1:84:03:af:82:a1:f9:
                    ca:b7:17:79:6e:3d:89:47:1f:81:fd:46:41:4e:b5:
                    16:a4:15:c8:f9:21:e5:27:d0:fc:64:69:17:c9:10:
                    20:de:2f:14:28:7d:9a:20:54:75:62:38:f6:90:97:
                    05:6b:01:7d:07:28:a0:ef:6c:89:3a:5e:b8:24:ab:
                    b7:a8:6e:69:4a:89:00:39:3b:8f:2a:a2:6c:37:e5:
                    85:b6:0b:bf:33:15:8a:71:f7:5b:58:42:e1:c5:ad:
                    ce:cb:e9:3a:00:10:ae:d0:01:7d:39:a7:63:bf:b2:
                    24:28:3f:cf:d6:dd:ae:cb:f2:f6:c4:a6:6f:a0:b9:
                    05:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2F:DC:CE:D5:AD:37:CC:87:D9:13:A5:93:6E:DC:20:52:DF:EC:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0a916dd0-0e3f-3aa8-96b3-2c575cb007db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:96:87:1c:93:d3:f7:d8:03:de:81:a0:b1:84:c9:3b:e0:c6:
         38:39:d3:3d:24:92:2d:bd:f5:e3:14:09:74:24:4d:7e:ed:46:
         92:bf:62:08:84:b5:b9:52:3b:96:87:a3:5b:fc:5a:d6:7e:16:
         50:9c:6b:f9:78:82:4e:0b:36:34:41:f2:9e:3d:81:76:5a:31:
         6d:e6:af:37:52:ea:e8:1e:20:44:a0:57:b8:f2:64:7c:51:ac:
         6a:88:72:52:15:75:b0:15:ea:e4:00:d2:f9:36:93:19:10:e6:
         0f:6f:99:b4:4c:0b:60:36:c1:1f:96:54:89:52:74:62:f3:cf:
         ea:77:1a:33:78:80:57:cb:11:0d:67:4a:d2:54:2f:1e:0c:d9:
         8b:d5:7f:07:e8:83:5c:35:5c:78:c4:7d:c1:5d:6a:e7:53:33:
         df:49:ee:a5:5a:21:e5:3f:d1:26:02:6e:3a:02:88:2a:32:61:
         7b:0b:b0:4a:65:9a:68:33:b4:2d:74:1e:95:f1:7d:59:61:2f:
         78:a3:9e:62:f9:b0:df:52:4e:2d:92:18:cf:a2:7c:f4:f4:b6:
         6c:f4:1f:43:d2:0b:75:71:33:ec:3f:f3:e9:6b:37:ff:ab:91:
         2f:e6:30:07:e1:6d:92:ba:43:36:10:58:b1:72:e0:70:9c:20:
         c7:3d:c9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:52:28 2026 by rpki-client