Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37af780a-7ad0-3a7d-8e72-f9650b109811.roa
File:                     37af780a-7ad0-3a7d-8e72-f9650b109811.roa (raw, json)
Hash identifier:          CZl/Klxfox4/ixrShjtZT8tx44xI68ff72pfnC0USD8=
Subject key identifier:   F3:48:CB:FC:00:E9:A0:A0:BE:5A:B9:7E:99:37:65:A1:50:2D:C9:A6
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E253F1155C90A08ED840F3000
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37af780a-7ad0-3a7d-8e72-f9650b109811.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     20172
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:11:55:c9:0a:08:ed:84:0f:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=786e101b-4ea5-40ce-a509-11ea8f5991a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:22:6a:7c:6f:8f:23:2d:24:8b:77:c8:c4:5e:
                    11:9e:58:64:95:14:25:05:bd:54:d9:94:2c:a8:32:
                    df:6d:f1:2d:2a:fe:9f:b2:4b:23:0c:cd:f6:83:e6:
                    a1:de:46:19:6d:08:ee:81:e3:0e:e5:bc:52:9f:75:
                    3b:db:33:61:ac:58:40:ad:a8:42:5c:e3:80:fb:7e:
                    f9:a8:fb:9e:02:59:fa:de:41:0c:fd:4a:e6:a8:84:
                    93:57:95:b2:aa:6e:cd:75:96:b3:f3:75:34:c6:25:
                    e0:97:c7:d3:ac:d9:8d:ac:d7:aa:cf:0d:18:4e:a9:
                    1e:b4:6c:cf:15:9a:a9:8d:44:80:e5:83:2a:b5:d6:
                    6d:be:b3:42:0e:54:9d:8a:aa:39:d7:fb:f3:bf:9c:
                    65:69:48:00:d6:29:87:4f:1d:e4:f6:67:a9:c6:21:
                    98:33:40:eb:3d:99:3a:6a:3d:b4:70:d4:3a:4e:bc:
                    da:a7:c2:d3:34:01:29:93:b6:0c:a0:1a:4b:01:de:
                    6e:b7:7a:cd:63:da:f7:04:37:bd:12:a2:0d:5d:b1:
                    06:d9:94:4e:e1:9c:b6:4e:3d:07:f3:75:45:88:fd:
                    70:10:96:40:31:9d:0a:4f:55:fc:f1:8f:ab:d0:fd:
                    b1:59:c8:af:13:d9:7d:5d:55:e4:8a:3d:75:e5:75:
                    13:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:48:CB:FC:00:E9:A0:A0:BE:5A:B9:7E:99:37:65:A1:50:2D:C9:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37af780a-7ad0-3a7d-8e72-f9650b109811.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:93:1b:1d:81:35:a1:20:cd:75:fb:cd:7a:9d:a5:43:12:04:
         59:15:cd:f2:32:c1:f4:d7:e6:e0:b9:81:79:ff:b1:61:36:15:
         0b:2e:fb:74:cf:34:8d:11:4e:95:f5:da:5e:28:cd:40:13:c2:
         d1:df:60:9a:e7:1b:c6:94:21:5e:1d:13:78:87:0f:5d:aa:ef:
         d2:a3:2c:7c:62:0a:9a:60:79:f8:c8:4a:15:cd:9c:2d:f9:7a:
         31:4b:78:f5:2d:c8:a7:ab:5e:9a:8b:f4:4e:3f:4c:b7:02:eb:
         b6:76:9f:a8:e1:8b:7b:e3:32:5d:85:fa:65:d5:46:1a:91:70:
         5b:6d:27:b9:88:08:8a:d0:44:58:4b:a3:53:61:d1:35:d3:f8:
         e8:79:f0:07:cf:b7:2d:4b:ae:65:67:88:51:df:80:b5:7a:71:
         ad:32:df:02:8f:df:0c:5a:15:d3:4a:b6:a8:de:2d:a7:9e:52:
         06:95:7d:aa:47:aa:9f:71:25:c8:23:81:e2:bb:65:09:ca:5a:
         9c:91:d5:af:7d:f4:f6:70:89:80:8e:af:e0:f2:f5:2d:95:e9:
         7f:60:d5:a4:60:74:78:05:5a:ad:44:49:af:10:d1:4f:4c:4e:
         8f:26:07:9e:db:ee:63:a3:bd:e2:bf:ce:4e:ec:07:84:c2:5c:
         55:93:27:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:14:52 2026 by rpki-client