Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95492b19-4cda-3a63-86f3-5869625ae3b8.roa
File:                     95492b19-4cda-3a63-86f3-5869625ae3b8.roa (raw, json)
Hash identifier:          5DAFjdP2+e3ypJF8RlPTTgh5fpzoojR+N00l7Ihk/5Y=
Subject key identifier:   B3:AD:FF:01:21:1B:97:1E:1D:D5:6A:E1:84:E0:B8:2E:17:BE:58:BB
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584DF4DB780A6410DEA2CD3A8640
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95492b19-4cda-3a63-86f3-5869625ae3b8.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     7342
IP address blocks:        2620:74:ee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:78:0a:64:10:de:a2:cd:3a:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=90471066-0394-4d70-a61f-e15340871e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:24:7c:de:44:7d:18:66:9d:48:f3:29:f8:a7:
                    da:86:d8:ae:4e:c2:4b:03:fc:7a:2e:6e:a3:c9:dd:
                    77:be:33:4d:58:02:19:66:65:31:01:a4:c3:bc:fe:
                    0d:e4:46:91:d1:5b:e3:34:34:fe:7c:f1:27:72:9e:
                    6a:cb:64:e3:c6:0d:59:49:55:c9:45:a7:24:55:0c:
                    d8:78:c9:40:80:ba:41:93:d4:16:50:a3:a0:44:81:
                    4e:4b:af:f6:7f:d4:f0:4e:35:25:62:54:21:38:21:
                    74:89:39:e5:28:c4:e8:09:dc:10:3d:7f:36:0c:d4:
                    4a:27:62:f4:78:35:de:3e:97:f4:7c:c7:3b:7b:37:
                    39:89:6a:55:9a:4c:65:25:9a:d1:da:3b:8f:e2:84:
                    ea:96:f5:dd:db:28:be:2d:79:c9:6f:40:f6:fe:f0:
                    1d:2a:36:15:e6:6b:00:11:76:28:c2:fa:17:5b:bf:
                    08:a3:4c:2d:e2:ec:c1:27:e7:0b:55:f5:55:82:08:
                    87:dd:4d:71:20:f9:d9:e1:af:1c:2c:93:bc:93:9c:
                    1a:30:8d:67:df:b7:ba:a3:c4:f5:f6:7c:4e:4b:2a:
                    e0:ee:39:f5:35:00:5b:34:7c:c3:39:4c:31:8a:c2:
                    a0:ed:31:10:e5:2c:1a:32:42:c5:2e:37:93:9b:2a:
                    4a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AD:FF:01:21:1B:97:1E:1D:D5:6A:E1:84:E0:B8:2E:17:BE:58:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95492b19-4cda-3a63-86f3-5869625ae3b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:ee::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:bb:97:ca:f4:ab:98:17:5f:4b:54:02:ba:e3:d4:cc:1e:e3:
         17:49:93:11:e1:31:85:67:fb:aa:68:be:5f:49:cc:7e:8d:db:
         91:ea:74:a8:3f:60:19:56:d1:25:82:d3:cb:f2:c3:f8:d6:04:
         4c:03:1e:f8:4e:39:87:b7:d9:be:1b:d0:3b:e1:b5:7e:b8:30:
         4d:ad:79:7c:c0:e8:68:5e:7e:35:d4:59:a9:65:ef:cb:ab:01:
         5e:58:3f:0d:92:3d:c4:a0:1b:f5:86:d8:18:8c:11:f9:64:47:
         82:b8:d9:c0:d3:c0:97:1a:5f:47:fd:15:60:f6:3e:07:c9:27:
         b9:fb:b0:3d:0a:07:e1:dd:7a:74:69:2d:15:72:10:29:5e:1f:
         da:5d:f9:4c:48:28:18:bc:c5:eb:08:60:f6:85:9b:6b:fa:6b:
         13:45:73:1d:3a:65:60:4b:69:c8:c7:2d:d9:04:b2:fc:c1:7e:
         69:58:e8:b7:6a:67:2a:e7:02:9a:74:9e:4b:f3:7f:18:ef:5f:
         61:9a:84:cf:ad:a5:72:79:4d:f3:6d:51:bf:98:9e:fd:83:98:
         fd:09:03:60:f6:bb:ba:3d:34:7d:ec:d4:0d:00:09:45:ee:3f:
         8d:a5:23:47:be:a4:5b:8f:68:de:2e:57:0d:fa:59:fa:b1:da:
         55:8f:e6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:34:00 2026 by rpki-client