Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c5b5f61-622a-33bc-afbe-ed3e170bd840.roa
File:                     5c5b5f61-622a-33bc-afbe-ed3e170bd840.roa (raw, json)
Hash identifier:          8mD3ZUM21qeIkEpfAbdIouRG7Ejr3ceuSJmmkdo0O50=
Subject key identifier:   0C:F6:38:34:4B:C3:3E:B3:97:CB:13:A5:D3:7F:DC:C3:A6:DF:28:95
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584DD625C5E9504C6FF78896B780
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c5b5f61-622a-33bc-afbe-ed3e170bd840.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     397197
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:c5:e9:50:4c:6f:f7:88:96:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=dd9fbaa4-f28e-481e-b8e4-c51e71274dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:94:22:a1:da:ac:06:46:58:89:cf:e5:ce:82:
                    d3:c0:ee:ab:cb:c5:51:3d:73:3d:70:6c:6e:33:97:
                    22:57:9a:3f:02:78:24:36:6e:42:f6:46:8c:dd:fc:
                    01:b4:cd:f7:9c:ab:6f:23:b0:57:d5:18:b0:0c:88:
                    6b:a9:db:d2:83:35:6a:20:47:db:02:a8:01:46:77:
                    a4:5c:cc:d7:c0:cd:c7:6e:92:94:f7:5f:ab:c1:65:
                    83:af:7a:04:4d:ff:ee:1e:92:6c:ce:34:c7:df:ba:
                    3d:12:e7:2d:5b:ac:92:cf:9a:65:56:39:f7:f5:f2:
                    7c:61:5b:94:6d:21:81:4e:d4:7c:63:f8:6b:39:10:
                    dc:35:b5:e5:78:e6:21:25:ee:69:72:89:64:8c:08:
                    22:24:1a:db:89:0f:07:39:63:05:ce:97:b1:a1:50:
                    c3:f9:46:96:e1:42:0c:6d:18:17:3a:94:d7:8d:c2:
                    18:2a:85:7b:09:7f:89:ff:34:9f:2a:13:a0:5f:22:
                    1b:d8:fe:38:5f:e9:c3:87:a4:06:7a:44:e8:63:f9:
                    15:7c:d8:c2:0b:e8:a0:64:23:6b:d9:f7:06:ef:87:
                    1b:ad:6c:e1:dd:e1:cd:2b:ac:ca:a3:94:55:6d:28:
                    75:de:9b:eb:a6:4c:47:77:91:9e:bb:13:01:b1:08:
                    63:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F6:38:34:4B:C3:3E:B3:97:CB:13:A5:D3:7F:DC:C3:A6:DF:28:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c5b5f61-622a-33bc-afbe-ed3e170bd840.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:28:79:df:92:32:1b:df:cb:94:6b:f3:88:2e:cf:c6:f2:fe:
         d8:8b:b6:7e:a0:32:ef:f2:c1:c0:98:87:29:20:d1:9f:79:10:
         74:46:8c:4e:87:3f:68:95:f0:26:1c:38:50:86:ba:8f:4f:5d:
         0a:cc:85:a9:9d:ec:62:45:aa:c8:fb:d4:f2:fa:c4:f4:48:a2:
         5c:d7:d0:8b:90:fb:26:b9:ef:87:52:7f:73:89:61:79:d4:01:
         c5:ca:14:86:72:4d:f9:f6:46:a8:65:89:c1:e2:2c:2e:2b:51:
         d4:78:98:69:35:c3:6f:76:67:4a:a1:3c:ad:56:50:3e:dd:26:
         0f:7f:23:6e:1a:05:ae:5b:21:c1:5c:d7:18:28:f3:0d:1a:e1:
         ff:21:f8:dc:6e:ae:99:03:71:2b:e3:ff:0b:d2:6f:c8:65:55:
         f4:3a:f8:09:c0:cb:95:ed:80:60:ad:a1:b0:90:32:b3:21:a3:
         e2:0d:e4:34:81:ca:75:95:72:ec:c1:be:9f:79:b8:be:e4:a9:
         7a:5f:40:c3:83:eb:86:4e:21:c6:9f:59:e4:43:f3:d8:66:ac:
         45:b8:76:d7:f9:b6:10:e6:4b:71:96:6f:01:37:df:44:37:e8:
         d2:0f:2a:5a:75:26:5e:09:61:25:f4:68:d7:3d:2a:e7:c8:6b:
         ce:9d:fc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:10:11 2026 by rpki-client