Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/61ed12d9-10c3-358e-8b6e-92e6dca3d4ed.roa
File:                     61ed12d9-10c3-358e-8b6e-92e6dca3d4ed.roa (raw, json)
Hash identifier:          VD2ZYu0Zrro8Zij9NEpx6r6CmLH39FiUwdJZUEF8oDw=
Subject key identifier:   D5:0E:D9:D6:E5:A2:E2:89:10:3F:C5:D2:43:F5:C4:AD:59:D8:B6:01
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584CF587A878F3EFB1E7E20827F0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/61ed12d9-10c3-358e-8b6e-92e6dca3d4ed.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     397202
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:a8:78:f3:ef:b1:e7:e2:08:27:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=08efe7b0-717f-4874-bbda-e4a7bf6a4771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:76:1c:0c:98:94:2a:03:dd:e5:5f:ed:0a:0f:
                    c0:5e:5d:b0:74:a0:cd:59:eb:47:fb:a1:96:fc:b7:
                    8b:39:23:17:6c:ea:fa:ae:81:47:be:64:c2:9d:42:
                    56:64:93:35:f7:a6:af:e3:ea:f4:e2:34:ec:5f:2f:
                    aa:5a:ad:18:82:d5:5b:82:6c:90:4a:d5:71:3a:29:
                    c1:44:f2:b1:0e:10:ab:ce:9e:cb:94:2a:da:69:13:
                    07:a7:f1:23:44:53:00:e8:05:33:bc:23:d9:8b:94:
                    b0:da:83:ac:3e:bb:72:26:ef:8e:22:f9:1a:ee:3a:
                    7e:97:c2:ca:15:70:17:ce:cc:e6:be:40:9d:ec:8b:
                    f2:65:7c:03:cf:02:43:c1:10:9d:87:90:34:7e:eb:
                    bc:e8:59:75:9d:37:9b:a5:c3:cb:02:c2:d4:81:10:
                    6d:8d:63:61:bb:76:e2:e6:92:24:ac:9b:99:ae:25:
                    2b:74:a4:5e:3c:74:85:18:53:54:1b:fc:d5:03:ee:
                    43:c7:b2:bf:16:31:fb:5f:36:f4:d8:4e:a9:53:46:
                    dc:ee:80:9e:5b:33:76:56:3b:bf:fc:63:f9:5d:cb:
                    e3:e8:7e:a2:e9:20:b3:8c:68:21:83:51:2d:76:94:
                    f8:3b:1c:df:2b:22:ad:d2:2b:5c:d3:ce:de:d2:99:
                    52:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0E:D9:D6:E5:A2:E2:89:10:3F:C5:D2:43:F5:C4:AD:59:D8:B6:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/61ed12d9-10c3-358e-8b6e-92e6dca3d4ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:53:57:e1:e2:0e:7e:8f:80:ed:b8:97:fc:53:7a:d2:50:43:
         6f:bb:ee:b7:43:d9:ef:9c:84:c7:39:94:13:4d:b8:48:ac:b9:
         e6:ed:10:93:75:59:de:2c:25:4b:f0:52:c5:9a:34:c5:85:56:
         8a:f0:a9:a4:7b:36:3a:b6:56:74:82:2c:b3:1e:05:96:bf:95:
         14:96:fd:db:cb:4c:56:98:16:78:04:26:05:ff:ab:7e:2e:3c:
         84:b5:a8:92:0a:ba:92:44:15:97:8e:93:9c:ed:c3:0d:c8:8d:
         cd:9e:d8:d9:f4:56:61:0a:5c:f7:27:d8:1a:4f:a4:28:96:84:
         74:7a:cf:3c:30:55:e0:a1:0d:e8:5a:50:59:d6:3a:3f:76:b9:
         0d:fa:e1:e0:e2:e3:84:65:86:90:34:c4:72:a2:d9:f8:73:22:
         d4:8d:d7:8f:3e:c3:5c:c7:bd:7a:30:0c:56:41:70:30:8b:f9:
         60:37:74:1a:51:75:52:db:d4:7c:d8:cc:e1:2d:83:d3:b2:1e:
         eb:d3:11:f8:9e:13:03:f2:cd:fe:aa:82:7d:a8:0c:92:9d:59:
         7a:6f:0a:ef:b1:d0:30:5a:6b:4b:65:99:92:3e:cd:9b:aa:09:
         cc:5b:59:9d:91:1e:08:be:46:a5:47:1c:ef:3c:66:28:03:fc:
         f4:3a:f4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:40:41 2026 by rpki-client