Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6da7eb9a-1e72-3516-b74d-b83e19954db4.roa
File:                     6da7eb9a-1e72-3516-b74d-b83e19954db4.roa (raw, json)
Hash identifier:          UjK+Rv+cjt9tLEw9Q1lIXCdk3izHZcLD1MxyZmHK4F0=
Subject key identifier:   FD:8C:4E:FF:A4:04:D6:57:B3:4F:2F:A7:54:11:B7:1E:55:E0:37:D2
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F30527E81A086077F34D72B80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6da7eb9a-1e72-3516-b74d-b83e19954db4.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     0
IP address blocks:        2620:74:ec::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:7e:81:a0:86:07:7f:34:d7:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=081377b6-efea-4e9c-bf86-504d7a1e54dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6b:f3:60:41:3d:41:87:ad:48:e7:a5:af:6d:
                    45:53:99:a7:93:13:c8:a5:8f:ce:e9:e4:6e:00:cb:
                    57:49:7a:e7:ad:3c:d2:81:56:ec:a3:39:d9:b8:fd:
                    bb:45:10:c5:f7:95:90:66:19:6c:81:61:08:b2:f7:
                    0f:d1:19:c5:a7:3c:cd:74:7e:83:b5:80:1f:ff:f0:
                    a2:22:db:54:92:8a:6d:5b:66:9e:55:49:03:d7:a2:
                    cb:14:10:25:5f:a9:16:fe:ae:fd:ac:9a:98:ce:ab:
                    f0:f7:77:11:1f:28:9e:22:1c:64:12:e0:92:21:91:
                    6b:72:5f:6e:2e:29:0f:ab:37:3c:3e:fc:3c:ce:ae:
                    13:1f:00:bf:ba:e3:e7:3b:9e:a4:af:15:5c:b1:24:
                    41:50:8e:d2:06:32:0c:84:c6:67:80:14:c2:a4:de:
                    c0:6d:fb:5c:63:c2:e2:7c:82:f3:68:aa:92:69:df:
                    d3:82:c0:0d:b4:32:42:eb:2e:5d:fd:ad:93:9c:7d:
                    32:db:3b:38:ba:ec:3b:37:67:4c:1b:fd:d4:35:5b:
                    3e:52:9a:3d:16:6e:cc:22:ac:b6:40:20:a7:df:fc:
                    9a:7b:a7:a5:b0:cd:25:70:15:6d:5a:96:67:52:99:
                    fe:e0:d3:56:c8:b3:90:c6:b4:1a:0e:e7:56:85:dc:
                    9a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:8C:4E:FF:A4:04:D6:57:B3:4F:2F:A7:54:11:B7:1E:55:E0:37:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6da7eb9a-1e72-3516-b74d-b83e19954db4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:ec::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:11:22:8b:53:89:50:46:a1:c0:6d:26:12:0c:db:fb:ef:04:
         10:2e:c6:19:04:a5:72:77:74:ad:4c:ff:09:49:6a:24:8e:db:
         6e:d5:60:80:59:d5:80:82:bc:85:25:f1:4e:15:a5:b2:00:b1:
         79:fc:67:f2:7f:0e:b9:d6:99:60:c1:88:57:5f:29:2b:df:fc:
         ae:75:f6:a4:7a:23:14:29:b5:3b:fa:48:64:6b:55:26:62:73:
         ca:fb:42:4f:18:ae:7f:8d:b2:1f:f1:bb:2e:37:d9:00:12:0a:
         f9:3f:dc:30:2f:f6:4a:ab:f2:8e:12:77:59:03:78:42:96:15:
         55:e7:55:ad:b2:2d:29:8e:6b:3f:ab:9a:f1:a1:d5:18:94:a2:
         ec:34:c6:77:50:3e:bf:35:96:d6:1b:fc:f6:a4:53:04:40:d8:
         b7:c4:d2:3b:e9:49:f4:f9:81:a9:77:4f:5c:9c:ca:ae:78:c8:
         af:89:39:71:da:41:64:a1:54:1b:1e:9d:10:54:64:72:5c:6b:
         ec:6f:09:94:e5:70:49:f8:f4:4b:7b:db:b5:3e:65:a9:68:c0:
         57:d4:ee:1f:57:1e:ac:92:c9:c1:6d:4f:f8:29:29:f7:e7:a8:
         d9:b8:84:a5:62:88:cd:c3:d1:31:90:a5:c6:8a:1d:ca:e5:9b:
         e7:f6:8c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:31:39 2026 by rpki-client