Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2031dc51-23d0-39ce-bff2-564f0b40cfe6.roa
File:                     2031dc51-23d0-39ce-bff2-564f0b40cfe6.roa (raw, json)
Hash identifier:          qTNU2G+UNuZlzC5pleQsMap1+eOn3UdparSXsjHYht0=
Subject key identifier:   35:85:15:91:EB:F2:8E:08:DF:1B:1B:7D:E3:4C:67:78:9F:C0:04:E0
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E104F05EE3222EBB2A6871A80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2031dc51-23d0-39ce-bff2-564f0b40cfe6.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     396613
IP address blocks:        2620:74:2b::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:05:ee:32:22:eb:b2:a6:87:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=a98b2cca-8eff-4980-b236-1a6f10cd1acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cc:5d:4f:c9:52:39:10:ef:06:08:50:b5:c5:
                    db:9d:c5:96:29:06:99:68:e5:95:06:37:d0:e5:7c:
                    e4:8e:3e:b6:6e:64:53:b1:a3:f3:7f:96:0a:a6:11:
                    09:f8:d9:e9:f5:aa:a9:60:12:a7:95:8c:ec:48:a4:
                    c0:42:1d:4c:d7:a6:e6:40:3d:49:1b:fe:96:c2:04:
                    0e:2c:92:cc:f7:20:6c:da:d2:5c:84:2a:95:32:f8:
                    88:53:00:d6:20:27:82:2f:3c:54:79:f1:51:95:3d:
                    a7:de:ba:19:35:5f:01:9c:dd:f5:c8:5e:6a:26:b7:
                    8a:53:d9:99:d1:24:66:39:31:38:f9:9b:a0:20:af:
                    1b:09:45:99:7a:90:18:5e:69:d4:44:59:1a:69:3c:
                    d1:23:1d:0e:74:2b:61:cc:cc:f9:27:20:44:b8:f1:
                    d8:6a:68:9f:21:7b:c9:33:0a:29:f4:25:77:db:1f:
                    45:1d:8a:6f:f5:f1:ed:8e:44:e1:0d:2e:ca:a6:24:
                    2f:74:4e:ee:0b:86:cf:70:c2:9b:bf:6a:23:0e:26:
                    c6:3b:46:66:ea:23:7a:f3:18:b2:e5:8a:a7:47:b6:
                    8b:27:85:55:70:18:de:6d:3d:ae:c6:82:c3:50:e7:
                    9a:5c:c8:3f:61:3d:d3:6d:17:1e:5f:f5:c3:f5:9a:
                    81:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:85:15:91:EB:F2:8E:08:DF:1B:1B:7D:E3:4C:67:78:9F:C0:04:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2031dc51-23d0-39ce-bff2-564f0b40cfe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:6b:3e:3d:c8:dc:13:fd:f0:2b:a3:f3:26:96:61:cf:bf:45:
         d1:79:ad:7d:2c:db:cb:3d:c6:d1:5e:65:50:a9:c9:1b:ff:ed:
         f4:db:60:29:29:52:a6:3d:5c:a0:5a:ad:0a:cc:b6:10:7d:eb:
         6e:c3:dd:40:3e:08:97:54:ff:b0:18:e0:15:c7:cb:58:47:79:
         70:fa:2c:7d:91:30:9b:eb:f8:14:b3:e3:58:1e:3d:4c:3d:0b:
         b3:dd:52:73:29:86:8b:33:7e:46:50:2f:4f:69:f0:f8:77:3d:
         f8:5b:72:cc:90:65:4b:c7:95:f3:79:ad:65:4b:56:68:26:69:
         37:be:8f:de:65:02:f5:72:6d:3e:99:ab:af:5d:5d:24:0e:da:
         d3:0d:67:d1:e4:ec:0b:a5:24:69:c8:a9:04:91:52:a1:e1:e5:
         70:5a:20:b5:12:e4:b6:24:db:5d:d1:2a:b6:5b:e4:9a:67:ca:
         2f:b9:40:c4:b0:27:64:fe:d0:0e:79:74:8a:20:94:b1:0b:95:
         81:21:4e:28:21:d9:0e:ab:1a:a0:49:83:30:53:b6:8c:1a:54:
         37:ad:4f:ca:c6:5d:3f:1e:a5:14:17:0d:e7:7f:1b:30:fd:14:
         33:5a:9e:9a:4e:ae:89:ff:f6:68:06:e5:8a:ca:22:fe:05:c7:
         78:0b:19:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:41:54 2026 by rpki-client