Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/71773767-f9bd-3e8f-b391-961bd104d745.roa
File:                     71773767-f9bd-3e8f-b391-961bd104d745.roa (raw, json)
Hash identifier:          +YXOR/1KUu+v/WYk3Dm0k2SFYrELb1bq2uL0suk3t5g=
Subject key identifier:   75:A1:B2:2A:A0:E0:AB:BA:40:1A:89:6F:AE:6F:2F:A5:C7:69:36:F1
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584DE2D88C1FEAF7AFB0A1B78A00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/71773767-f9bd-3e8f-b391-961bd104d745.roa
Signing time:             Tue 19 May 2026 14:10:35 +0000
ROA not before:           Tue 19 May 2026 14:10:35 +0000
ROA not after:            Mon 17 Aug 2026 14:10:35 +0000
asID:                     36630
IP address blocks:        2620:74:20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:d8:8c:1f:ea:f7:af:b0:a1:b7:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May 19 14:10:35 2026 GMT
            Not After : Aug 17 14:10:35 2026 GMT
        Subject: CN=a8e0625e-553e-40ea-93ff-2a7f9c90649c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6c:39:f5:4c:fd:13:98:74:d2:b3:2b:ef:d3:
                    a7:13:7d:33:a3:1e:58:3d:5c:97:d5:0a:a2:c0:fd:
                    7a:3e:0d:fa:00:0e:74:e0:07:b1:23:ce:dc:4d:a5:
                    a9:85:f1:0d:21:e1:78:bc:23:44:40:7d:d6:0e:b0:
                    a7:66:64:c2:76:88:22:ff:0b:a8:d8:50:92:23:f7:
                    24:62:c3:aa:b0:53:2b:60:9c:f5:2b:fb:6c:9f:eb:
                    60:97:53:7c:00:76:9a:26:47:66:50:98:3e:8e:30:
                    6b:c9:56:51:e2:68:43:d7:b2:1d:24:8e:16:cc:62:
                    88:d4:97:85:a2:5c:1c:07:d4:c3:ae:ed:db:cf:ca:
                    91:80:60:b7:77:9b:0b:da:50:0a:46:c6:79:84:bd:
                    66:f0:77:54:0d:2a:c4:d0:0b:36:40:7a:72:ab:40:
                    5c:93:00:f7:a2:52:51:97:9d:3c:47:0f:a3:e5:90:
                    c5:80:fc:e6:34:5b:06:34:3d:f5:6a:3a:7a:64:c4:
                    0c:63:84:23:9a:0c:8c:a0:af:e4:ac:c2:1d:d7:02:
                    aa:ad:5c:82:12:c5:9b:6e:28:de:5e:0e:b8:db:0a:
                    78:5d:87:27:ff:a0:98:93:ad:9f:93:77:7d:3b:01:
                    1b:6f:b9:81:04:ef:00:8c:5f:1c:bd:f0:1e:ab:46:
                    09:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A1:B2:2A:A0:E0:AB:BA:40:1A:89:6F:AE:6F:2F:A5:C7:69:36:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/71773767-f9bd-3e8f-b391-961bd104d745.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:65:65:95:d6:9c:5f:b8:75:d3:ff:fc:30:6a:38:4d:7c:b9:
         37:8b:af:07:6f:54:3a:21:8f:6c:5a:d4:08:19:19:5f:84:63:
         39:2d:46:04:5d:64:e8:27:d1:5c:13:86:95:16:06:12:ec:28:
         4e:9a:03:a3:7b:0f:c1:1f:ed:ef:2c:80:1a:b1:f6:b8:b6:79:
         05:18:b7:1a:e5:f1:02:bb:75:49:3f:9d:f1:96:d8:a8:c4:fc:
         cb:4e:2c:34:e2:2c:d2:d2:f2:b2:3b:59:2b:da:5b:ad:cc:e8:
         5f:49:4e:8c:7a:34:2e:99:f1:d6:41:df:f6:5f:1c:8f:17:28:
         b0:63:c0:7b:3e:6e:25:c4:d8:de:d9:4d:4f:3e:24:1a:0a:02:
         74:21:e5:93:9a:2b:1a:5e:50:35:66:d5:1f:dc:f2:88:df:eb:
         1d:b7:23:a8:58:1e:c8:9c:60:90:b8:d7:c9:d3:cd:8b:c5:72:
         70:58:5d:2f:e3:e6:6f:82:fa:5f:b8:b6:10:d0:a7:e2:e2:f4:
         2c:52:20:f1:67:1d:a7:86:6b:70:7f:70:4b:6d:bc:05:45:d1:
         28:9d:c3:24:32:bf:79:40:5f:83:81:48:3e:07:b4:fd:dc:4a:
         3e:ed:2b:6b:4c:39:4f:b6:a3:00:21:6f:c7:9f:ce:09:cc:1c:
         6c:16:20:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:50:33 2026 by rpki-client