Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/10a1420e-ea2b-30d7-8a87-aa12fd4ae208.roa
File:                     10a1420e-ea2b-30d7-8a87-aa12fd4ae208.roa (raw, json)
Hash identifier:          lDpMywQvMv/ShjivffmAa+Y86WOpikzt4bM0Zd7F100=
Subject key identifier:   B7:FC:08:89:60:B3:2C:B0:FC:7B:5A:B3:9A:6D:78:19:0B:FE:B6:EA
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EFE1229BF23A0246ED45FC140
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/10a1420e-ea2b-30d7-8a87-aa12fd4ae208.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     396600
IP address blocks:        2620:74:20::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:29:bf:23:a0:24:6e:d4:5f:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=baa0bef1-6865-4b30-b68f-c36c2f78de18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e5:58:09:8e:64:9e:fb:d3:00:b3:dc:cb:6a:
                    10:75:27:09:86:8d:e3:37:e8:7f:45:8a:20:79:df:
                    ee:14:bd:56:bf:62:02:06:74:f8:16:cb:84:fa:a3:
                    6e:c8:87:68:71:92:f2:ab:2d:4b:f2:45:1b:08:8d:
                    b4:21:ce:52:bc:42:02:e5:f9:c3:19:3f:72:26:69:
                    b8:1c:73:53:b6:13:d5:06:e1:44:7e:5a:39:04:76:
                    d0:0e:d9:e6:a0:d3:0a:f3:e1:1d:30:bf:b1:bc:c7:
                    48:ed:38:3d:13:2d:b9:50:bc:2b:08:55:d4:b6:c1:
                    f5:03:d9:2b:b6:46:97:d1:e8:a8:e9:4e:ca:df:e5:
                    f3:10:16:ec:e7:67:a9:55:3d:64:55:b5:5e:f4:b9:
                    46:d6:09:5c:5e:d3:f2:e8:4f:88:ed:73:2c:73:aa:
                    8a:9f:fe:4a:31:38:f2:f6:97:ec:d6:d5:05:1c:35:
                    34:bf:df:df:09:39:88:7f:aa:44:4c:d9:69:0a:c0:
                    c6:79:17:6e:b3:8b:1a:b7:20:87:96:31:d7:c6:d6:
                    c8:74:ae:46:da:0e:b8:6c:f9:fd:75:df:6d:21:7e:
                    9b:0a:15:df:47:a8:0d:af:e0:d8:55:a9:f5:d7:ce:
                    d6:4e:40:20:90:da:2b:2c:db:7d:87:ed:4f:97:09:
                    79:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:FC:08:89:60:B3:2C:B0:FC:7B:5A:B3:9A:6D:78:19:0B:FE:B6:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/10a1420e-ea2b-30d7-8a87-aa12fd4ae208.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:df:77:be:62:b2:7d:0e:30:35:d2:b9:ab:75:49:1a:78:47:
         64:20:1a:40:19:ed:8b:af:13:87:17:0a:03:00:10:5f:96:ca:
         44:f0:27:8c:bf:2b:e9:da:53:c6:fe:06:e9:b2:c3:2b:ed:82:
         d2:5e:57:c4:5b:92:2c:f6:50:d8:f0:c7:72:7d:3c:74:77:49:
         62:a4:74:e2:8f:3f:fd:ce:af:4c:9e:a6:f6:01:73:a1:cd:68:
         43:aa:94:ac:5b:d7:ae:de:c0:3a:60:dc:7b:e5:5e:df:70:00:
         e6:cd:da:7c:d5:a5:21:a8:9d:e5:de:d4:b5:53:b1:cb:b7:44:
         21:dc:a9:4e:1a:85:dd:79:85:09:24:15:aa:1a:9a:6c:f0:04:
         b3:c4:82:fc:c1:3d:4c:58:84:ee:41:a8:eb:6a:59:da:9f:00:
         54:46:b3:36:65:e8:a0:01:ad:29:b3:6a:c8:9c:6f:48:b8:0c:
         d9:7a:36:23:d0:00:21:11:8a:91:b2:1d:69:55:ef:46:f1:5b:
         43:b1:07:c4:cf:7c:fe:0c:7f:38:18:8f:e0:2c:bc:b8:01:6b:
         c1:2b:b2:51:ab:8a:c4:f3:09:c8:8c:f7:51:57:2b:0f:a1:4e:
         18:ea:db:85:fa:34:23:2e:ac:29:20:ae:90:d2:49:71:bf:13:
         50:37:22:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:51:34 2026 by rpki-client