Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c77bf1a-ad33-3b4c-a52b-2cc5f0271f11.roa
File:                     4c77bf1a-ad33-3b4c-a52b-2cc5f0271f11.roa (raw, json)
Hash identifier:          tFltgAzGWsWVkRyKsVgqJI42QA/CQLecHhjsqnilxkE=
Subject key identifier:   E9:B7:95:F8:E4:C9:C7:17:39:4A:8A:4A:E8:54:6E:23:26:57:11:3E
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EA2DFCBE6018BEF4214C0AA20
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c77bf1a-ad33-3b4c-a52b-2cc5f0271f11.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     396594
IP address blocks:        2620:74:2c::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:cb:e6:01:8b:ef:42:14:c0:aa:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=7ef0b81a-272a-4a94-925b-20d58246afc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a4:43:f3:b5:23:df:4f:84:bb:c2:8f:de:00:
                    a6:8f:28:a2:54:47:dc:fe:38:ee:05:3f:dd:87:72:
                    5f:4a:5f:6e:08:1f:84:bd:08:b6:e2:8c:6d:58:b2:
                    53:ec:63:de:e1:79:c9:e5:7d:16:2f:2f:1e:aa:d9:
                    33:8f:50:ce:8d:98:bd:c8:cb:cb:a6:a5:01:4a:38:
                    59:14:d1:f7:d5:5f:41:40:3e:5c:34:3a:56:d3:18:
                    7c:52:ee:91:8e:b9:5f:d0:9d:24:d5:b1:31:76:89:
                    d5:31:9a:8d:f7:55:43:e6:12:02:c3:e6:50:7f:22:
                    34:8a:c3:a4:c2:ec:99:8a:2f:52:20:dc:fe:9e:ed:
                    12:56:64:ff:9b:a6:05:2c:58:bb:d8:24:bf:cc:43:
                    c2:c2:18:94:c2:0f:de:8e:7a:39:da:1a:41:89:f3:
                    89:56:f6:45:05:4c:20:93:3d:81:6a:62:94:14:84:
                    bf:71:10:bb:4d:34:ec:88:10:71:4e:8e:9a:4e:b3:
                    30:fa:f9:59:c1:91:a6:de:f1:9d:a0:82:58:d0:bf:
                    06:ed:fe:c4:4f:e9:c2:68:29:13:7b:38:80:65:42:
                    bb:ee:67:e1:2b:57:65:72:03:e9:ea:b6:2a:68:cc:
                    90:f0:3b:ad:57:32:42:4f:a6:64:54:47:38:39:a3:
                    4c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B7:95:F8:E4:C9:C7:17:39:4A:8A:4A:E8:54:6E:23:26:57:11:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c77bf1a-ad33-3b4c-a52b-2cc5f0271f11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:01:9a:af:ea:cb:b7:72:31:06:3f:1b:05:a0:ff:e5:59:ab:
         cf:a8:32:c3:ed:ec:16:b3:16:48:7a:1a:84:7e:6c:76:93:9b:
         28:1e:3f:87:f0:e6:23:28:64:89:54:01:5f:58:a2:8b:e1:00:
         b3:63:2d:5c:8d:2e:80:70:69:69:1b:34:dc:1d:df:a6:70:c5:
         51:48:e1:3d:d9:1e:0e:01:61:72:95:98:f2:e9:f7:b7:1b:23:
         f8:37:4e:95:b9:6a:1a:2c:b2:5d:a9:87:cd:9d:0e:87:9c:a2:
         60:54:14:77:35:95:b4:73:33:bd:26:cc:d4:d8:01:1a:27:06:
         c6:b5:44:cb:36:ef:51:84:2e:4a:2c:0d:d9:92:d8:5c:67:f9:
         73:8a:a0:27:f5:31:b6:34:de:57:27:79:d4:0a:c0:9f:99:9b:
         4d:a3:a4:7e:99:c4:b1:25:c8:71:33:ad:58:99:28:08:7c:8f:
         12:2c:ad:71:75:66:de:ba:00:c6:44:a5:b8:39:42:21:c3:04:
         17:03:67:a9:da:e5:b0:2a:c7:cf:77:50:80:e2:6e:88:26:52:
         1f:34:69:c4:2a:ed:b9:49:12:eb:dc:0f:48:45:45:40:86:5f:
         f5:ea:b0:cf:6d:af:cc:5f:43:44:6c:62:af:54:de:0a:d5:cf:
         d5:a3:fe:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:24:17 2026 by rpki-client