Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a20abcd6-8b8e-342f-8560-fe83689bcf27.roa
File:                     a20abcd6-8b8e-342f-8560-fe83689bcf27.roa (raw, json)
Hash identifier:          KLmZwDgxYT/0LsSCHX58i+l/tqfio8F3TkVI6yp5bYk=
Subject key identifier:   6D:08:8B:2E:0B:51:DC:17:0E:30:29:B6:69:1B:39:1F:56:70:10:46
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E104F0A12053B85E25B046E00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a20abcd6-8b8e-342f-8560-fe83689bcf27.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     396604
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:0a:12:05:3b:85:e2:5b:04:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=e0dd1a3d-f5cd-4f13-8420-d26165a58ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d0:f9:33:10:0d:3a:2b:0c:e8:86:7d:22:3b:
                    7a:9c:3c:f3:a6:68:74:a6:f2:4e:02:20:9f:07:2b:
                    46:c9:d8:c7:4c:d5:ed:95:79:65:4e:60:18:77:5b:
                    41:ee:1f:5f:f0:4c:67:f0:88:d3:07:83:6d:ff:5d:
                    7f:d0:3d:68:3b:7a:d9:05:17:f2:48:c5:77:6c:ae:
                    6f:10:6d:d1:9e:7d:9e:ed:52:77:59:f1:90:ff:a9:
                    7b:a5:b4:0e:97:75:6f:ed:3a:5f:b2:fb:f9:f8:7b:
                    79:58:92:c7:34:25:23:ac:a4:9e:07:08:09:93:18:
                    0f:38:32:90:4f:e3:84:e4:16:bf:5d:6d:f8:b1:31:
                    47:2a:e6:61:57:9b:33:dd:cb:0c:94:fc:20:a4:a2:
                    91:66:71:88:aa:e0:09:e6:30:56:d5:b9:a9:05:eb:
                    30:82:dd:f5:22:a6:12:45:0a:db:d6:ae:05:f0:18:
                    32:e8:db:c8:6c:e5:97:1b:d5:3c:17:34:be:99:f4:
                    89:89:79:c8:58:97:93:02:8d:4e:ef:a5:ce:88:21:
                    6d:30:05:d2:b5:8e:01:09:02:4e:3e:10:7b:d1:2d:
                    98:c7:38:b9:7d:14:56:0f:11:0d:0e:d9:dc:64:19:
                    9a:16:9b:bd:5c:00:6a:8a:e4:77:2d:e9:05:30:0b:
                    59:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:08:8B:2E:0B:51:DC:17:0E:30:29:B6:69:1B:39:1F:56:70:10:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a20abcd6-8b8e-342f-8560-fe83689bcf27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:89:b0:63:dc:55:58:ac:cd:69:b7:77:b1:d9:99:b0:2b:a4:
         9c:06:bf:e0:91:c4:e8:4f:5c:20:96:56:a8:a8:d2:75:66:5e:
         18:e4:32:80:5d:5f:f8:c6:92:c0:ba:43:79:c8:ee:14:59:9c:
         33:87:fd:78:be:51:a5:ed:b3:04:0a:97:aa:46:b9:07:a3:a1:
         0e:6f:ea:a6:01:ed:fe:c9:a8:ce:79:a1:6c:6e:a5:36:28:41:
         f0:da:52:85:c1:c7:95:47:5a:ae:cf:55:61:57:58:4f:ba:4b:
         90:28:dd:d0:74:ef:07:b9:e6:5b:d0:4a:7a:08:b6:a9:57:23:
         ce:c7:8d:d4:21:b2:e0:44:ec:6b:9e:55:52:34:16:7e:ed:aa:
         8a:67:da:f3:1e:7f:a7:4d:20:f8:ac:72:18:62:58:69:88:88:
         e3:e8:e8:47:6f:53:3b:bc:d1:17:36:21:d8:41:5c:08:97:cc:
         51:9d:68:da:9b:30:c4:96:a1:2f:d0:d3:4c:e8:d5:0c:50:2f:
         e6:69:e1:b9:45:02:fb:70:b2:10:bc:3b:f2:c3:e5:92:ef:02:
         30:67:36:cb:4a:63:27:fb:0a:7a:d3:09:9b:a9:d0:b8:e7:fb:
         a9:72:94:a4:a9:c6:36:84:93:c0:f5:fb:52:48:d3:dc:cf:68:
         98:40:79:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:27:31 2026 by rpki-client