Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/753ef9d2-7b48-3420-b969-0bd53dd948ec.roa
File:                     753ef9d2-7b48-3420-b969-0bd53dd948ec.roa (raw, json)
Hash identifier:          r+mFrcj39geeblKTND8XxXWWhqU3b6LagUVyuXnK4JE=
Subject key identifier:   06:82:2A:14:9E:6B:8F:5D:B2:B8:CB:4E:1D:BE:F7:50:39:29:B8:1C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584CE1FCDB05C413E0B4B764D940
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/753ef9d2-7b48-3420-b969-0bd53dd948ec.roa
Signing time:             Mon 16 Feb 2026 14:00:40 +0000
ROA not before:           Mon 16 Feb 2026 14:00:40 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     397196
IP address blocks:        2620:74:2c::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:fc:db:05:c4:13:e0:b4:b7:64:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 16 14:00:40 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=76207ca0-1af9-4116-b705-f5b2226e2e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:17:9f:b2:66:35:fe:d1:42:45:e1:82:03:20:
                    ed:d4:fd:e6:8b:6c:16:d7:26:e6:9b:7d:60:6f:bb:
                    63:08:ec:8a:4f:a9:99:79:c0:b8:41:61:40:26:98:
                    d9:fc:32:5a:8e:8c:71:9f:77:55:f6:ae:44:1a:1f:
                    4b:27:2f:61:12:81:66:0a:19:5d:ae:d2:ed:ee:6d:
                    dd:c1:47:f8:3b:a0:0c:67:07:c7:01:03:c6:a4:a7:
                    5d:09:19:b8:ac:40:c9:28:a4:f0:f9:07:33:51:84:
                    ad:9e:99:70:bf:47:aa:41:85:4f:c0:a2:72:f6:b3:
                    53:0f:28:77:ff:f3:ef:bd:b7:c6:53:7a:d8:a8:97:
                    b1:ab:06:c6:40:d1:d8:8c:a6:dc:df:a4:f7:b4:49:
                    e6:1a:68:74:b9:b4:de:65:7f:07:1b:04:eb:fe:a7:
                    29:3c:01:88:12:8b:2d:80:1d:92:92:cd:ae:e5:59:
                    97:00:e8:e2:de:5e:aa:bb:03:aa:fd:d0:31:61:55:
                    ef:18:78:2c:e3:d0:a8:68:45:fa:35:fe:3e:fa:ba:
                    fd:77:82:a7:c5:3a:6a:bf:a1:b4:68:05:b7:63:af:
                    88:a3:3d:83:3a:79:0d:25:c2:c8:40:95:09:31:6d:
                    39:36:f6:5c:0f:41:76:a6:f3:4f:71:ad:a1:f4:49:
                    2c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:82:2A:14:9E:6B:8F:5D:B2:B8:CB:4E:1D:BE:F7:50:39:29:B8:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/753ef9d2-7b48-3420-b969-0bd53dd948ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:30:db:94:5d:e3:d1:1d:56:c8:e8:b3:c4:6a:df:83:42:1a:
         87:90:c1:b7:b8:d0:92:ab:32:11:ce:28:a0:db:ef:4d:2c:16:
         f4:79:36:d8:4e:47:cf:07:99:e7:e0:87:e2:85:e5:b3:3a:b9:
         d4:e4:ac:91:c1:3d:f0:fb:18:15:b9:be:6b:12:d4:18:d7:3a:
         55:d8:e4:f1:db:8b:db:b2:d5:f8:03:82:d9:c7:10:b1:55:93:
         7d:2b:6b:af:9e:d8:70:eb:cf:53:a1:44:bd:b7:1b:bd:e9:78:
         fb:29:b3:58:d8:ff:7b:c5:d7:02:cc:e5:44:60:19:51:77:91:
         21:d2:5c:7b:59:30:d1:e2:80:04:fc:c3:f2:f6:5c:3f:a4:3f:
         3e:29:f8:52:b3:64:25:29:68:3b:75:34:50:4a:58:6d:35:7c:
         bc:8e:39:18:0e:1a:83:c0:b0:f9:8c:8a:14:c3:68:ba:ed:77:
         e6:84:d0:6f:93:cd:21:bb:78:a3:eb:2e:80:d6:09:ad:94:4a:
         c4:fd:8c:58:78:58:2e:fd:c7:10:c7:f6:08:85:fa:b9:c5:51:
         c4:67:52:ce:86:fb:39:32:dc:98:ff:60:78:7d:7b:82:9f:d7:
         7e:53:68:33:1e:5d:66:53:42:47:cc:63:5f:cf:05:b1:1b:0f:
         7e:37:cc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:38 2026 by rpki-client