Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5e919a49-2b83-3386-ae82-eb87291d5fe4.roa
File:                     5e919a49-2b83-3386-ae82-eb87291d5fe4.roa (raw, json)
Hash identifier:          HvvCiE/9N6Gk3CJAKhyG0xrNo1HtCEvuQ9SAWG5IKuI=
Subject key identifier:   01:13:4A:66:3D:37:E8:4D:DC:E9:FD:F9:9A:BD:8B:C8:D3:DC:28:21
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E04361943BD6BBCABFAD4AA00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5e919a49-2b83-3386-ae82-eb87291d5fe4.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     396615
IP address blocks:        2620:74:2b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:19:43:bd:6b:bc:ab:fa:d4:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=da80bf76-012d-417b-a13a-981e22f74cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:63:d9:b0:d8:4b:26:c5:12:87:0e:2c:ec:b7:
                    80:10:3f:b3:d0:4d:9b:7f:d8:d0:a3:ca:8b:38:ec:
                    06:44:3b:2c:3d:11:55:51:c9:cd:0a:73:25:31:d4:
                    a8:9a:ef:42:17:73:19:87:90:27:86:64:34:2a:62:
                    00:3f:20:f7:f6:fd:97:46:b0:cf:f1:14:98:3e:79:
                    3c:c3:65:08:6e:1d:40:eb:ea:d8:9e:91:81:6b:f7:
                    dc:48:45:ad:7c:31:ee:a6:7f:78:2d:1b:24:4f:b9:
                    8b:51:74:f9:36:e7:5b:a7:d5:8a:19:dd:92:21:60:
                    23:dd:c3:7a:15:b3:bc:cd:ae:b4:16:ac:2a:90:59:
                    0f:ad:bf:f7:7c:eb:ce:f0:06:e2:6a:66:4f:d1:42:
                    81:bd:50:4c:b7:13:b5:d4:c8:02:ad:dd:41:f1:3c:
                    47:f2:4b:71:89:84:e9:5a:04:b2:3d:cd:d8:9c:44:
                    c5:29:70:55:19:92:42:51:72:0b:bb:e5:e4:23:c5:
                    d0:40:12:33:db:39:32:a6:89:0a:32:26:3d:cd:76:
                    a1:66:92:02:e1:ae:ab:74:64:82:06:25:02:5a:6f:
                    9c:55:7b:b0:62:c8:f9:37:c5:ad:ce:1d:b8:79:a4:
                    34:f7:b2:e8:f0:54:71:67:97:3a:76:b6:a1:b3:67:
                    6f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:13:4A:66:3D:37:E8:4D:DC:E9:FD:F9:9A:BD:8B:C8:D3:DC:28:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5e919a49-2b83-3386-ae82-eb87291d5fe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:53:cd:bf:02:6c:9d:6a:de:cf:dc:7f:f5:f4:4e:e2:ac:0b:
         dc:6c:7d:ab:1c:d1:30:ff:d2:ef:f3:e7:ed:24:49:79:a8:1e:
         3a:f8:2b:f9:8b:39:25:a3:60:31:69:c7:42:41:49:7b:a1:61:
         a4:c9:e9:21:91:41:e3:6f:7d:50:1e:9d:68:12:40:e0:56:31:
         9b:95:4f:4c:3d:50:0d:98:f8:39:0b:94:f5:21:1e:a6:fc:f3:
         e5:1b:a6:d9:c7:b5:51:13:ba:1a:ea:c1:a3:a0:ad:e6:30:3e:
         4f:5b:15:9e:76:76:ae:0d:44:9b:e0:ad:29:be:ae:78:69:3e:
         1f:b6:eb:c0:71:b8:fd:29:7c:bf:94:e5:42:bc:dc:e2:88:17:
         dd:87:f4:72:62:eb:53:ab:1b:1a:7c:ab:e0:f9:4b:6c:80:4f:
         c4:16:51:d1:16:76:16:c3:06:ef:30:fc:b1:77:88:17:79:4b:
         19:9d:99:55:5f:ce:a7:1e:e4:90:dd:a4:1e:3a:3a:fb:70:4f:
         00:ad:e1:93:18:26:9a:46:b5:d7:9a:0f:7a:79:98:d8:fc:97:
         32:21:01:fd:10:ff:14:c1:4f:17:77:1d:8b:5a:46:fc:e8:c1:
         35:70:c4:74:fa:c7:d3:c7:20:ad:ba:39:58:50:a4:44:6f:98:
         e9:a5:d7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:59:55 2026 by rpki-client