Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/546d78a7-cdd5-3f65-9a86-8114711a2c23.roa
File:                     546d78a7-cdd5-3f65-9a86-8114711a2c23.roa (raw, json)
Hash identifier:          YgHCzJhYGGj4jMU5o+QDIPwBI4nj9Rj7agApjiW13DI=
Subject key identifier:   8D:29:55:E7:0B:82:7F:F0:E7:81:07:EA:77:16:D5:5F:EE:A9:96:CD
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584CE1FCD9A4DED666E5FB774900
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/546d78a7-cdd5-3f65-9a86-8114711a2c23.roa
Signing time:             Mon 16 Feb 2026 14:00:40 +0000
ROA not before:           Mon 16 Feb 2026 14:00:40 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     396552
IP address blocks:        2620:74:2c::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:fc:d9:a4:de:d6:66:e5:fb:77:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 16 14:00:40 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=57fab12e-d939-4b6d-aa68-64d62363027c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1e:11:99:6b:47:b2:c6:c7:3f:f8:b2:87:06:
                    c7:de:90:d1:23:2b:79:76:da:0f:8b:92:04:7b:f3:
                    c2:b1:19:b7:ae:a4:55:ca:11:68:83:68:50:c5:42:
                    08:37:78:83:54:7e:47:83:40:7d:4b:7d:ca:97:c6:
                    01:9b:81:bc:78:61:2d:6e:ab:c9:5c:42:45:57:95:
                    aa:12:aa:88:f9:ea:29:d8:6b:51:ed:b8:79:2f:a6:
                    fa:6e:cb:cd:21:36:5e:87:0f:93:c5:a0:79:1f:ad:
                    19:52:f7:17:cc:64:ac:a8:01:69:b6:28:54:1f:dd:
                    f5:58:d1:15:10:c6:fd:73:4d:f5:3f:ec:7d:f3:7d:
                    b6:61:7d:6e:0a:3b:2f:e9:d6:1e:b0:34:48:3d:c2:
                    d8:d6:7f:e7:a9:5d:8a:20:59:c4:48:47:6c:87:f1:
                    d9:49:e9:94:dd:98:b7:b9:c6:26:eb:24:d0:64:93:
                    90:aa:de:a4:35:cb:03:94:4b:2f:41:b4:3d:97:a6:
                    27:85:23:44:a8:fb:4e:08:b5:4a:11:ca:1a:5e:ba:
                    95:23:69:3d:2b:9c:8e:9a:46:01:d2:48:49:82:7f:
                    26:50:34:a2:59:9c:e2:b4:b7:9c:b7:d7:2f:f4:73:
                    fc:d7:bc:ed:14:ae:ff:23:38:cd:ea:e1:b6:9b:5a:
                    4d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:29:55:E7:0B:82:7F:F0:E7:81:07:EA:77:16:D5:5F:EE:A9:96:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/546d78a7-cdd5-3f65-9a86-8114711a2c23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:72:f3:7b:98:ec:ed:a0:0f:ee:a4:bd:7d:40:3f:cc:05:92:
         4e:5a:d4:65:cc:c8:67:fe:2d:5a:96:79:26:8e:d1:3b:a9:38:
         22:64:16:36:7f:25:be:be:de:5e:4a:a4:35:8f:8d:e1:0c:ef:
         86:99:21:b8:ae:3f:95:f7:52:dc:dc:24:e9:90:72:2e:e1:71:
         92:7d:a4:72:01:3b:70:4d:1f:49:7d:e0:f0:3f:ed:91:0e:be:
         15:f8:96:b2:9e:9f:27:ab:38:c7:96:b3:58:98:44:a4:38:4c:
         11:0e:e2:83:e5:ff:cb:05:eb:f0:60:99:03:d8:05:bc:4e:84:
         63:6d:da:68:d0:9b:30:a5:86:b0:a7:7b:01:e7:7c:16:04:e4:
         61:f9:35:d4:a4:d7:1a:a7:49:b9:6f:08:03:f2:c2:a4:9b:98:
         95:42:b5:64:96:c9:8d:52:1f:bd:de:45:fa:d7:18:ce:da:44:
         ed:db:db:ae:e6:02:99:27:f3:02:6c:cb:21:88:c1:3f:55:24:
         ed:49:e5:74:e2:01:11:9e:7b:1b:23:e0:5d:4d:cf:65:a5:3f:
         c2:c1:af:a8:6a:71:14:f2:fb:91:9e:18:f2:7e:27:56:0b:6c:
         26:5b:15:7a:5b:2d:86:22:d0:bf:06:c7:94:23:cb:14:26:30:
         96:3b:65:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:22 2026 by rpki-client