Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/404f40eb-0815-3d2d-96d9-bdb041d3cf24.roa
File:                     404f40eb-0815-3d2d-96d9-bdb041d3cf24.roa (raw, json)
Hash identifier:          0NEPHHrQWwYjwKlUddXNkExqk9lATbsk2rR2S00+PbI=
Subject key identifier:   3D:12:A6:CE:E1:9F:0D:4B:F9:BA:DF:76:80:D7:FB:49:A8:16:6B:07
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EFE122A35507C20C9781A3340
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/404f40eb-0815-3d2d-96d9-bdb041d3cf24.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     396582
IP address blocks:        2620:74:20::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:2a:35:50:7c:20:c9:78:1a:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=a9e0e84f-d8d6-4873-bc2c-37ea47badf7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:af:ed:b0:58:f9:01:df:76:5f:f9:23:5b:
                    ec:df:63:42:5b:51:bb:d5:50:e7:78:db:d9:1b:5c:
                    d1:1e:01:93:96:48:ba:39:df:33:ca:1e:04:9d:46:
                    ab:9b:a9:91:d0:d0:26:1c:7a:38:cd:12:d5:e9:48:
                    7d:f2:43:2a:cd:f8:23:4e:2a:b4:13:85:82:5d:67:
                    84:2d:ca:06:4d:01:4c:02:4c:53:49:17:51:ef:d3:
                    dd:26:80:7d:04:24:d2:e9:5d:ea:48:37:7e:fa:ef:
                    8d:4e:0f:9b:59:f8:dd:95:de:34:14:58:d4:93:0f:
                    a0:a4:84:8d:33:10:dd:7f:f1:3b:97:ef:58:d0:24:
                    14:b4:38:af:12:20:95:eb:6d:be:18:5f:b5:17:b3:
                    82:98:bc:70:29:cc:76:45:08:dd:80:1a:05:cc:37:
                    5a:f3:dc:c2:b6:0e:dc:2f:3c:8d:a2:53:d0:74:20:
                    0f:d7:7c:a2:f1:0d:83:91:ce:a4:60:8f:08:18:6b:
                    93:7c:fe:f9:b4:2e:a7:38:79:7d:8c:a4:df:e4:ad:
                    36:42:c1:db:1c:6d:49:c2:2f:4d:ea:6f:d8:5f:d0:
                    a6:34:3e:2f:59:74:34:e8:21:8f:13:f2:68:ac:62:
                    ae:59:62:fe:86:bd:80:8e:ac:3d:ac:a6:17:bf:b2:
                    45:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:12:A6:CE:E1:9F:0D:4B:F9:BA:DF:76:80:D7:FB:49:A8:16:6B:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/404f40eb-0815-3d2d-96d9-bdb041d3cf24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:8b:40:08:ca:fd:a6:77:fe:14:6e:7c:c7:66:aa:4c:7c:5f:
         76:62:06:e6:8d:8c:f1:3e:e8:05:27:59:c6:65:1c:6c:fb:9f:
         7a:f2:50:dc:4c:3e:84:1a:05:25:a7:2c:d6:e0:db:7b:93:b9:
         19:d6:27:9c:79:fe:41:04:fa:cd:c3:41:18:7e:a7:7f:4f:ca:
         73:b4:1a:56:ba:bc:e8:84:5c:1c:ce:71:29:b2:de:46:26:92:
         6b:5d:d9:f3:65:5d:7a:81:24:01:07:9a:54:f9:97:7d:ac:3b:
         cf:76:fc:69:c7:a1:3c:80:21:08:bb:50:75:6b:9d:c3:1c:e0:
         f7:fa:4c:6e:1a:c4:06:31:4e:fc:b8:45:30:fd:29:cb:09:4d:
         f2:67:90:8a:a4:3f:17:90:4f:bd:65:20:bb:0d:1e:f6:e0:e6:
         47:41:01:2b:a9:a8:b0:4c:1a:f0:a0:81:a3:c1:62:54:31:01:
         a8:14:24:1d:e4:e6:e1:94:81:f3:61:db:ad:0a:97:66:8b:9c:
         d1:1b:ef:ae:c5:d6:79:ea:47:35:e6:da:31:7a:b1:45:20:d0:
         5e:b3:cc:50:62:b7:9d:ae:be:52:06:d2:a5:0e:00:f1:31:d2:
         32:9e:20:72:35:09:ea:ee:4e:15:e1:65:54:77:a6:5a:9d:f5:
         03:01:0e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:55:10 2026 by rpki-client