Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/73bf5d53-b927-3fff-87af-0a04affcd821.roa
File:                     73bf5d53-b927-3fff-87af-0a04affcd821.roa (raw, json)
Hash identifier:          sU3/8xyLhBwo7sHdaJflDlkMLXxA6ajRM8ckNB68TKQ=
Subject key identifier:   08:8C:43:30:B3:06:62:98:98:C5:C0:47:4E:E8:DD:FF:FC:FF:FF:AE
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EFE122BEFA8A8413AD05A96B0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/73bf5d53-b927-3fff-87af-0a04affcd821.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     36617
IP address blocks:        2620:74:20::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:2b:ef:a8:a8:41:3a:d0:5a:96:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=9c8bc912-4dc2-4b90-8898-da67b6e622d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f8:a9:83:0e:da:16:99:ef:e9:56:c6:9c:c6:
                    86:c8:46:29:07:05:fe:9c:bd:36:9f:07:87:7a:66:
                    93:f4:60:17:6f:bd:20:25:7a:65:ca:8e:27:07:bd:
                    c4:10:70:43:0d:27:0e:fd:52:2d:e8:25:af:d8:5b:
                    1c:ea:d6:c0:3a:b1:30:07:43:e4:41:b3:fb:e4:9e:
                    d5:93:70:13:cb:bf:3e:f7:48:35:42:49:8d:96:d8:
                    aa:a8:d1:8b:43:01:af:6b:b1:d0:83:27:cc:1b:ab:
                    ea:bf:88:3b:3d:27:5b:10:8a:5a:04:bc:ec:c4:f3:
                    7c:1b:ba:ec:ee:d4:3e:a4:82:7d:00:a6:e8:8b:84:
                    a7:2f:b0:aa:13:1d:b5:2f:f4:58:6a:68:4a:88:04:
                    63:86:d1:cc:f5:14:0e:47:b3:33:e7:05:b0:3e:e9:
                    14:ee:47:93:4f:54:c8:7c:6a:c0:b4:58:97:50:bd:
                    23:f8:00:b3:10:69:31:95:8d:87:4e:50:8f:95:98:
                    9f:e6:df:22:62:c2:2e:c5:8a:e9:52:4e:0c:21:fd:
                    6d:4c:ce:1b:75:da:12:5f:e4:8e:14:58:5a:61:4a:
                    04:5a:c7:bf:67:03:cd:f6:13:0a:3e:7a:a8:79:e3:
                    53:cb:9f:7d:1d:3f:48:ab:38:da:6a:22:ae:48:7c:
                    d1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8C:43:30:B3:06:62:98:98:C5:C0:47:4E:E8:DD:FF:FC:FF:FF:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/73bf5d53-b927-3fff-87af-0a04affcd821.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:67:82:5f:af:67:d1:6e:77:7d:7b:2d:31:9f:62:3a:49:ba:
         05:ef:47:a2:26:c7:f3:f3:67:de:7b:72:83:19:a4:8a:34:54:
         ec:11:7c:14:f5:d7:41:f0:60:79:6e:9f:f4:6a:c1:d8:c4:ed:
         a3:64:de:b6:d6:bf:8c:72:db:f5:cb:9f:9c:23:ec:a5:8c:ef:
         64:fa:68:5b:a9:0d:93:0f:c7:95:5d:1b:1a:d8:ee:f4:0c:30:
         c4:20:d7:80:c3:b3:f6:43:d3:b0:9e:16:f1:90:19:36:69:70:
         4c:a3:a3:34:f1:0b:34:61:4f:69:64:b3:ba:18:67:32:da:25:
         af:26:f5:f8:ef:76:e6:cb:7b:9d:8e:87:8b:39:dd:5b:a0:31:
         6b:3a:e0:99:64:5e:5a:96:6d:e3:51:ce:32:e0:51:06:07:77:
         24:61:39:e8:07:06:c0:ba:91:59:95:20:7d:6d:7d:fd:16:d9:
         f4:1d:1f:92:20:98:41:5b:61:94:a3:72:5b:b5:73:82:4a:3c:
         db:a2:aa:dc:20:c9:b9:4f:5e:fb:40:90:c4:7c:5e:c6:67:8d:
         4f:2e:17:61:eb:13:55:b0:ed:ae:5f:be:f7:73:5f:a0:1b:dc:
         05:51:48:82:74:76:4b:84:b4:8e:5e:a9:52:d9:95:f6:d5:18:
         41:5d:a2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:57:07 2026 by rpki-client