Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/81bfc665-f53b-3003-acf5-cec864a17d24.roa
File:                     81bfc665-f53b-3003-acf5-cec864a17d24.roa (raw, json)
Hash identifier:          XPJmvD3SVEwK+a7b75zwGHuKsvoJdpOKECBiDRhld+8=
Subject key identifier:   93:A0:3C:5C:C3:43:8F:73:94:1B:DB:86:79:3C:81:F1:CE:AF:EB:03
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F454293D2470D34669EB19C80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/81bfc665-f53b-3003-acf5-cec864a17d24.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     396587
IP address blocks:        2620:74:2c::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:93:d2:47:0d:34:66:9e:b1:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=39e4c14e-161e-4b78-bd14-a7f7a01c244d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6b:67:f0:16:83:0e:37:a3:f9:6c:b0:d1:33:
                    ee:2e:93:ca:a1:49:38:74:0d:e0:07:4b:51:27:83:
                    06:9e:97:de:c8:87:aa:f7:15:6e:20:6b:68:b3:c0:
                    91:20:9e:88:c0:5a:87:bc:45:da:51:2f:59:e5:98:
                    b8:ce:48:1c:4b:ea:a1:3e:89:de:84:92:64:88:c8:
                    58:64:77:dc:b5:a6:ff:57:98:46:4b:50:95:98:55:
                    7f:0b:72:49:84:39:41:dc:c8:8c:7b:c3:93:ed:ac:
                    d3:56:19:9e:8e:f7:82:cf:6d:1e:44:1b:8e:41:57:
                    07:2b:98:fb:cf:1e:ca:09:ed:c6:de:90:4a:0d:80:
                    25:c7:7a:ce:27:8c:d5:b1:72:46:e5:7a:e5:a2:ea:
                    c9:94:2a:f6:1c:4b:08:84:d4:33:df:08:7d:07:c5:
                    44:ca:49:6e:d1:ca:8b:e3:80:3f:ac:58:6f:a2:20:
                    c7:e3:a9:49:0a:7a:4f:e8:de:56:1c:ce:d4:26:ad:
                    55:e4:41:c3:1e:59:48:0c:5d:84:60:a3:94:d1:2e:
                    7b:ea:a7:92:51:5f:6e:92:5b:44:dd:10:0b:1d:ba:
                    17:72:cf:b8:66:dd:2b:1a:a5:94:fa:6b:5c:d9:07:
                    cb:40:ce:b6:69:13:9b:e0:ad:ae:e6:cd:2d:a0:e2:
                    ef:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A0:3C:5C:C3:43:8F:73:94:1B:DB:86:79:3C:81:F1:CE:AF:EB:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/81bfc665-f53b-3003-acf5-cec864a17d24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:27:09:51:9a:55:81:41:f6:eb:72:7b:e1:f3:5e:c9:1d:62:
         0c:f3:6b:64:13:91:68:29:c5:c4:ab:fe:c8:6a:81:7e:e7:2a:
         e9:8b:52:cd:6a:96:e2:55:19:c3:0f:d1:a5:d5:e6:12:ea:be:
         56:75:f7:e7:34:c4:a5:28:48:53:35:68:d6:ba:eb:f3:6e:50:
         8e:7f:4e:43:b5:d5:0d:d0:ca:f3:a1:d3:eb:88:60:36:b4:aa:
         dd:8c:5e:2f:5c:53:33:e4:80:0c:7d:4b:4d:33:d7:b4:49:d7:
         1f:4b:07:ae:bc:af:4e:5f:ee:56:eb:d6:ee:25:46:bd:51:75:
         4c:37:94:48:96:a9:a4:23:c6:f1:d8:a6:49:1b:40:16:16:2d:
         3c:d6:7f:83:cc:48:4e:c3:08:ba:f3:cf:02:4f:44:e3:97:24:
         f7:39:51:1f:47:71:03:8d:7e:51:ef:ab:59:79:f8:ad:4a:dd:
         b5:a6:ea:4b:4b:c1:b1:a4:7a:ba:76:7d:e9:2a:bb:57:db:a7:
         0e:8a:48:6c:eb:f8:8f:53:0c:56:7d:54:6f:1c:bc:d1:02:a2:
         09:68:74:9f:fc:2c:03:83:e0:36:e6:2d:4b:59:e5:4d:c5:65:
         76:1b:8a:e3:51:76:db:26:4b:cd:80:65:0c:43:c2:b3:56:67:
         61:b7:8e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:52:49 2026 by rpki-client