Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a029b06-fc28-363c-a63e-1774126e5ec4.roa
File:                     1a029b06-fc28-363c-a63e-1774126e5ec4.roa (raw, json)
Hash identifier:          kTOpsrL6DCR89RFHbjcgZp+rM6EXPlCg/yJcM7f8UWk=
Subject key identifier:   86:EF:FB:12:A3:13:97:78:E3:4D:26:3A:0E:84:8B:32:21:78:C4:D0
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E1319900FB24D640838D65600
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a029b06-fc28-363c-a63e-1774126e5ec4.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     36628
IP address blocks:        2620:74:2a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:90:0f:b2:4d:64:08:38:d6:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=9e503cf7-2dd5-496e-bb82-19da93dd405c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:86:a5:a1:cf:8f:84:e8:2b:b6:f5:9b:70:13:
                    af:40:e9:a3:5e:f7:6c:31:82:25:d9:9f:73:be:65:
                    1f:0d:8e:e2:60:2e:32:28:37:84:90:41:be:3c:0a:
                    5f:b0:ae:12:32:f3:be:57:2e:06:b0:10:e0:22:b3:
                    f9:51:5e:30:62:d9:02:37:ff:f1:e7:9b:41:68:6c:
                    c4:79:70:72:28:58:bd:bd:ba:c8:9c:05:bb:86:a0:
                    0a:11:be:1e:45:10:13:40:1b:90:7e:20:0a:e5:c9:
                    8b:e3:5d:00:dd:9f:5a:b8:a8:41:4f:46:46:89:7a:
                    b2:66:f2:de:b2:de:4d:da:d4:56:62:ef:ae:3c:e3:
                    aa:f1:02:e8:67:0a:3e:80:16:1c:53:f9:6f:fe:6a:
                    06:c3:c4:c2:38:8a:10:36:92:01:5f:48:23:00:17:
                    c1:c7:70:66:3e:54:12:2e:14:26:49:8e:6c:e3:70:
                    5f:9d:f3:bd:80:5f:02:b9:75:87:b2:ce:9e:68:61:
                    a7:9d:96:32:7b:ce:00:91:bf:d7:60:d7:ac:3b:dd:
                    25:6a:76:67:c9:46:ad:6c:c1:e4:fd:d8:10:01:bf:
                    c0:b1:d6:37:70:84:dd:b0:1f:85:0c:8d:73:a5:16:
                    4b:53:53:23:07:9d:e1:a7:04:35:27:31:ca:4d:c9:
                    d8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:EF:FB:12:A3:13:97:78:E3:4D:26:3A:0E:84:8B:32:21:78:C4:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a029b06-fc28-363c-a63e-1774126e5ec4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:70:40:e6:b1:00:0e:9c:7a:c8:7e:5a:ac:51:e0:18:25:7b:
         54:ab:9b:13:f6:cc:80:c6:ef:4a:c0:f1:44:d4:d8:dc:e1:fb:
         1f:6e:d0:9f:75:47:78:14:66:da:f5:0c:27:3e:8e:f0:f7:59:
         dd:f1:fb:9f:a6:01:4a:c1:df:bc:c7:d0:8e:97:72:f7:ae:c1:
         14:b3:c2:e7:57:84:5f:6a:ef:84:e3:b5:b1:51:d9:1a:3b:16:
         3e:cc:ff:cc:47:84:ff:3a:97:f6:ad:7b:68:19:80:1d:8d:b0:
         df:77:4f:d3:24:f6:63:28:35:e6:04:30:a9:a7:bd:c2:81:f5:
         e7:42:49:96:de:36:6c:0b:b9:14:05:3b:27:0c:54:b4:f9:1f:
         2f:3d:9e:7a:75:2c:72:47:1e:b3:e8:c0:d5:e1:0d:12:98:4b:
         0e:6e:d8:ab:ab:9d:24:b4:df:25:07:10:67:04:eb:5e:e3:11:
         b9:67:84:83:d8:a1:7e:60:7c:8e:14:69:b6:5c:5a:b3:d5:9b:
         b3:59:06:69:c1:de:e8:3c:8e:3b:84:55:6b:44:51:3b:31:b5:
         76:8e:20:cc:11:87:5f:7d:e7:ed:23:1d:2e:aa:42:52:46:21:
         28:48:90:89:ab:8a:29:b6:d9:c7:60:5d:5c:3f:96:ec:d0:4b:
         5b:eb:66:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:07:15 2026 by rpki-client