Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/44c64a82-3480-3ab7-a7e4-b2cb1002cf20.roa
File:                     44c64a82-3480-3ab7-a7e4-b2cb1002cf20.roa (raw, json)
Hash identifier:          kZMLn3eedijyXka9ydy4B4gYB5cDLl4I8rlupmPQpjg=
Subject key identifier:   1F:D9:A5:30:67:D9:7D:CB:CD:72:75:B3:0F:52:17:1D:CD:7D:D0:44
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E0435D2E52E01F25CBD27AE00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/44c64a82-3480-3ab7-a7e4-b2cb1002cf20.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     396592
IP address blocks:        2620:74:2b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:d2:e5:2e:01:f2:5c:bd:27:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=cd70e9ee-612c-43eb-b4be-732d54415520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c1:23:b0:9b:6a:5d:d2:63:b2:2b:3a:60:98:
                    5f:c2:c9:5e:2b:06:b6:d3:f8:a6:31:af:26:c0:98:
                    b3:a3:89:cb:23:c8:6b:51:35:a8:c8:2e:c1:24:e9:
                    38:7d:76:b1:a0:ac:f0:b6:2d:49:eb:ae:60:59:0f:
                    bc:be:1d:85:16:35:52:a2:6e:d2:e4:3d:05:fb:ae:
                    d0:36:f3:0c:1b:2e:0a:0c:1d:4e:e2:59:21:11:e3:
                    91:a7:5b:75:43:d4:20:f6:5b:e5:a8:86:76:5c:43:
                    1c:17:49:35:db:52:99:45:ab:bc:f3:b9:47:47:48:
                    d8:94:ea:5c:7d:49:c8:98:da:bf:db:b8:bd:58:c8:
                    35:a0:41:94:e9:c5:3c:93:d6:16:c2:6c:45:75:a7:
                    88:68:c6:82:b4:58:f2:fe:ab:06:6c:5a:19:cc:54:
                    90:96:8c:50:c6:24:f5:07:f2:7a:a1:0b:3b:53:86:
                    87:fa:f1:c7:cb:25:0e:0e:cb:8e:85:39:54:ac:a1:
                    2d:74:6c:9c:35:73:41:b6:9b:dc:d5:1b:14:70:91:
                    b8:db:aa:ed:a1:aa:17:d7:27:1c:43:44:8a:ec:1a:
                    2a:6e:08:30:cc:72:10:1e:a1:9b:99:95:63:b7:fb:
                    ee:0a:77:04:51:5b:f2:3d:38:31:28:b0:34:25:25:
                    3f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D9:A5:30:67:D9:7D:CB:CD:72:75:B3:0F:52:17:1D:CD:7D:D0:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/44c64a82-3480-3ab7-a7e4-b2cb1002cf20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:b6:1d:9d:c9:33:9c:0f:c5:5a:f4:8d:74:a6:50:20:f9:6d:
         1f:4f:2a:a9:a5:a4:dd:f6:84:ea:85:10:fa:07:5b:7a:b0:ac:
         70:89:8a:19:64:e4:01:ff:c8:82:fd:5f:e4:7c:50:2e:bf:f1:
         d1:3b:b3:6d:f4:c5:e1:e1:15:bf:dc:22:68:03:03:20:07:36:
         b4:87:69:04:ce:46:b2:a7:63:ed:13:6b:d6:c1:b0:70:4d:e6:
         d7:93:f8:0b:f9:1d:86:82:eb:c9:22:44:8f:1b:a8:ad:8f:0f:
         d7:b9:7c:22:3b:9b:97:ff:21:30:4d:3d:d1:e6:ad:3c:5e:92:
         57:8a:8e:64:df:21:f1:48:89:73:b6:ae:32:5d:89:90:b8:70:
         ac:8c:59:ac:b1:3e:95:19:72:53:11:08:f2:36:0a:33:32:bb:
         dd:98:2c:b0:00:87:37:8e:d0:8d:f3:f5:f8:af:34:11:02:61:
         46:c9:09:c4:41:da:3b:79:a4:10:07:8d:78:79:60:af:0a:c7:
         c6:b6:c1:19:41:0f:cf:42:44:c9:2a:f2:fb:24:a5:92:18:62:
         e1:b4:4a:e2:c8:70:9a:83:90:17:69:c0:e4:2f:6e:f3:96:c1:
         8e:cc:07:ec:0b:0a:e8:ff:c1:71:7a:18:40:a7:ce:70:57:17:
         af:68:b1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:23:52 2026 by rpki-client