Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89114da6-3934-3ca5-8fc7-8280258e1302.roa
File:                     89114da6-3934-3ca5-8fc7-8280258e1302.roa (raw, json)
Hash identifier:          5qnShqZSW2hxSc5frgu74kwnZKgQJK1gznwdpwfWieU=
Subject key identifier:   F4:2F:FB:CD:03:16:01:A7:5F:93:87:82:2B:EE:83:BB:C3:4D:88:80
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E104F0EA2C88E51CD6AE23600
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89114da6-3934-3ca5-8fc7-8280258e1302.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     396596
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:0e:a2:c8:8e:51:cd:6a:e2:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=f231f5d5-1ff7-4a0a-b891-3f7a3dfdb0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:68:6c:39:5b:99:63:d3:06:0f:63:d5:a1:62:
                    cb:cb:76:6d:f7:64:bc:8e:83:35:6e:10:24:ad:ed:
                    f5:8c:62:55:41:f9:d5:bc:75:a5:13:e8:4e:5c:70:
                    11:19:ac:93:69:2b:a3:9f:be:83:30:52:e8:6c:3c:
                    57:62:6e:05:cc:ed:80:2a:a6:ed:46:f0:7b:43:ed:
                    a1:43:f9:78:4f:3f:39:5e:8f:39:83:ba:eb:a1:fc:
                    8e:e5:0b:07:02:bb:60:53:6b:a2:30:5e:33:df:23:
                    0b:e0:9c:18:24:09:54:d1:ff:8b:cd:f2:fc:fb:bf:
                    47:22:68:f2:f9:b5:e0:dd:69:36:a7:5c:49:27:7c:
                    cd:66:64:08:3f:87:8a:02:30:a2:e7:78:0c:d8:97:
                    15:e1:11:5d:d9:d5:e4:db:9b:0d:bf:bd:7f:4d:17:
                    06:d3:b4:0d:9e:61:67:0a:e5:58:c0:c4:30:11:63:
                    19:4f:85:df:31:ff:a5:33:ee:7d:50:f8:19:00:fc:
                    53:92:8b:71:d1:58:5a:67:dd:f8:37:51:48:fe:41:
                    97:76:48:33:f4:11:34:e1:3e:a7:1c:26:24:c8:6b:
                    3e:93:96:96:cd:a8:e4:9e:ab:5d:35:47:26:ca:2d:
                    62:79:e3:e9:e2:81:ab:dc:8a:dd:5a:53:0d:32:c6:
                    80:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2F:FB:CD:03:16:01:A7:5F:93:87:82:2B:EE:83:BB:C3:4D:88:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89114da6-3934-3ca5-8fc7-8280258e1302.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:60:74:16:bf:35:dc:ad:b9:0a:71:3b:84:c6:be:cc:ef:be:
         e9:1f:f0:f0:7c:f3:bc:cc:53:b7:c8:fe:0f:db:55:86:67:e8:
         40:1b:25:6f:53:46:1e:eb:bf:78:4f:3f:ab:b7:4e:77:e6:a5:
         64:0c:d5:ba:75:04:b3:90:63:dd:67:a7:f1:88:78:f4:e4:ea:
         82:3e:32:18:91:2c:d5:6c:af:2f:fc:e4:cf:46:4a:11:6e:aa:
         44:eb:ef:54:03:a1:c0:ae:8e:fd:cf:e2:c4:3a:8a:ae:2c:2b:
         19:2d:7b:82:5b:b2:0d:1d:76:cc:7a:bf:dd:da:03:a7:93:74:
         ab:84:19:cc:97:6b:48:0e:02:18:14:3b:ea:eb:7c:f5:4f:1b:
         26:ec:19:86:5f:36:bb:f8:64:31:92:f8:fa:71:43:36:0c:10:
         9d:a2:bf:ea:ea:71:df:c0:6c:64:d6:e9:9b:94:36:65:be:c2:
         95:d2:c5:c1:33:a7:9e:c7:0d:d2:bd:1d:29:f4:01:ce:44:78:
         6c:d5:1a:21:98:e8:1b:cb:1a:54:bb:00:ed:41:ba:6c:af:20:
         d0:b0:2c:f2:89:c0:aa:18:1d:02:52:18:3b:a5:be:77:fe:3e:
         57:90:89:3d:b9:7a:c1:3d:9e:63:a1:cb:dc:f4:ee:a0:32:e7:
         19:1b:0e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:13:36 2026 by rpki-client