Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b788f28-19e4-32c4-a293-8ce6047a481e.roa
File:                     2b788f28-19e4-32c4-a293-8ce6047a481e.roa (raw, json)
Hash identifier:          O+OaL7ohbr+TVQyRoOaKzmCmequlvs3PTaKVLJjEEyA=
Subject key identifier:   74:88:C2:D1:22:A2:C6:25:9B:C0:FD:A0:2F:D5:50:8A:F2:DD:01:67
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584CF587A9C4BE266AFD6B747A00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b788f28-19e4-32c4-a293-8ce6047a481e.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     396590
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:a9:c4:be:26:6a:fd:6b:74:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=acbd5d68-6422-4727-907e-9509a7be7a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2d:2f:ae:ab:ff:3f:6d:92:0a:0d:17:a7:b8:
                    e4:c2:f0:2a:16:62:29:aa:a7:02:bb:c4:6a:0f:a9:
                    75:88:a7:4a:ad:3b:29:ea:11:29:30:80:14:f0:26:
                    bf:65:03:79:d0:7b:0f:14:e8:f3:a6:38:9e:ce:ab:
                    5a:be:b0:e4:50:80:27:7a:45:56:2b:6d:7b:94:ee:
                    35:49:c2:b9:87:44:44:8b:e2:41:93:6d:4b:59:cd:
                    db:de:8a:86:3d:9d:3e:35:51:c2:19:26:c9:35:9b:
                    62:ec:74:92:a8:6c:b0:2f:47:b5:9c:28:b1:e7:23:
                    2d:c5:70:c7:52:d2:90:47:36:c3:b2:e8:6e:3e:37:
                    91:f8:e6:48:38:2a:9b:1e:55:b2:b3:a3:92:42:8f:
                    e7:7f:df:3f:ac:bd:05:82:be:7b:99:a4:f8:c6:62:
                    75:de:ca:22:3f:00:06:c5:c7:7f:a0:11:24:9e:3d:
                    ab:33:13:fc:b1:33:96:12:8b:8e:74:54:a4:2c:23:
                    dc:27:3f:92:a5:42:71:f3:50:8a:2b:a0:9a:04:64:
                    1b:29:83:60:86:60:fe:ed:06:7f:88:af:f3:f9:37:
                    88:46:3d:6a:20:61:c1:b5:4b:3c:c3:91:df:f2:24:
                    cf:2c:0e:3c:52:6e:2f:e7:51:b7:a6:d3:d3:fd:ce:
                    60:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:88:C2:D1:22:A2:C6:25:9B:C0:FD:A0:2F:D5:50:8A:F2:DD:01:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b788f28-19e4-32c4-a293-8ce6047a481e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:80:4c:01:e0:b6:e5:99:d6:93:16:3d:8a:bd:dd:6d:64:06:
         c0:7c:58:b1:5f:76:33:57:d2:69:11:11:2a:bd:84:a4:bb:51:
         14:16:87:23:96:a6:83:fc:80:70:cb:85:98:87:b0:4b:0a:7a:
         30:d0:d4:fb:33:dd:b1:bb:7e:f7:f9:5d:66:ab:06:5e:e4:9d:
         d7:aa:21:39:40:fa:9f:96:a2:36:6c:18:cc:47:2b:c4:85:b1:
         29:20:cd:10:54:f9:d5:b5:bb:a3:c1:0b:3a:de:b8:b3:67:b0:
         10:0c:48:f1:1f:b2:8d:62:bb:bb:bc:d5:03:d8:85:49:79:8e:
         80:92:b0:69:ff:48:80:1e:5e:3f:1b:95:4c:35:25:eb:96:7c:
         1c:d9:7a:5b:98:a0:30:ab:f8:23:61:c3:f5:ad:d4:34:bc:67:
         08:d0:a7:8d:ee:24:6a:8c:9c:d8:65:ab:9a:13:50:05:d6:76:
         21:58:8d:0e:49:4f:94:18:44:45:16:a5:56:82:5b:ac:7a:b7:
         08:a1:d8:d4:4c:7b:f6:e2:5c:79:37:9e:52:68:07:f3:bd:a6:
         61:d9:e2:16:ba:36:35:82:e7:4d:fc:8c:ce:4d:66:d3:2a:7a:
         30:9a:be:f1:17:a4:aa:95:8d:38:82:67:a4:c1:30:a1:b6:fc:
         8b:b9:c2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:38 2026 by rpki-client