Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaa623aa-85d2-3ac3-a2b7-d15bddf9e8ea.roa
File:                     aaa623aa-85d2-3ac3-a2b7-d15bddf9e8ea.roa (raw, json)
Hash identifier:          /eP9K5TwJKMjUzQe61SAJRiGTxeY/FmnRUyGRXWk1R0=
Subject key identifier:   45:2E:F2:A8:02:AB:5B:41:A7:9B:EA:09:3E:AA:11:60:37:2D:22:E7
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E104F0FFAFD712D557F741440
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaa623aa-85d2-3ac3-a2b7-d15bddf9e8ea.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     396572
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:0f:fa:fd:71:2d:55:7f:74:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=51cdd961-2ac2-4fc7-97f7-c49a2005f2ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:af:ba:d5:25:d3:3e:61:e1:17:96:72:ca:2e:
                    f0:09:84:9a:26:de:c3:02:cf:91:80:2a:0b:c0:fe:
                    9e:36:68:e5:37:0d:fe:68:f7:3b:e8:bf:a0:30:23:
                    51:6a:ee:82:35:8c:9a:55:5a:a1:27:df:7a:5f:7e:
                    3c:19:d5:3b:6a:d3:e9:27:ec:5f:e0:4c:2c:8f:08:
                    a9:24:85:9b:31:21:aa:78:fa:8a:09:27:e1:2d:15:
                    25:0c:ba:ef:01:6e:f1:6e:55:44:86:9a:4b:8a:fa:
                    f8:60:22:9d:0e:ba:50:66:b9:3a:80:78:5f:aa:80:
                    5f:83:ac:58:e9:3e:f5:4f:1c:ab:4f:3b:d7:1d:82:
                    fb:3d:cd:35:09:8b:9e:e0:ca:6b:1f:ca:e5:24:ea:
                    71:f3:d5:60:ee:a8:77:fa:5c:a3:67:1d:df:44:2f:
                    ca:01:99:d6:78:4f:f2:d2:47:6e:ce:75:73:0c:9f:
                    0d:10:f7:0e:70:46:c0:10:5d:3c:a4:d0:79:28:4d:
                    fc:c5:15:7d:e1:d2:23:7b:cb:91:25:e5:60:d3:fb:
                    24:68:39:33:5c:15:26:9f:5e:9e:52:e8:2d:f6:37:
                    8c:77:45:ef:7f:af:6c:a8:ec:29:d9:37:ca:b8:b8:
                    1b:2b:df:27:59:2f:2f:fa:6c:3c:f9:df:e5:f1:b9:
                    43:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:2E:F2:A8:02:AB:5B:41:A7:9B:EA:09:3E:AA:11:60:37:2D:22:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaa623aa-85d2-3ac3-a2b7-d15bddf9e8ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:89:02:07:a6:92:56:aa:24:4c:7f:99:c7:56:40:fd:09:27:
         3c:45:ba:0e:65:ee:29:14:27:fa:7d:23:7d:32:ed:a3:bc:9c:
         d6:8f:9c:46:2a:8a:20:d9:19:ea:ce:05:69:47:b5:fe:e3:c7:
         2e:f2:8c:84:94:f9:86:9f:b8:c3:cc:12:4f:aa:da:97:80:61:
         9d:92:29:1b:09:8d:68:8c:8d:e9:c8:76:bd:fc:24:c7:54:e2:
         72:62:00:fb:bc:ff:b9:95:6b:fd:79:b7:55:f4:94:f3:74:e0:
         b7:3d:41:53:28:72:d5:f2:6f:c7:be:9f:4e:f6:ac:8d:61:0e:
         d1:8b:f8:5e:2b:be:23:8d:0a:db:c1:be:46:7d:a3:85:61:cf:
         29:3d:39:db:35:1c:23:9e:66:82:8f:80:df:f9:ca:85:1e:2b:
         e5:bc:d2:ce:95:3c:09:aa:96:8e:b1:8d:da:f4:8a:93:1d:3a:
         73:26:5b:db:42:99:0e:f4:1a:8a:ee:6b:b6:94:31:2f:e3:a3:
         45:5b:ad:94:fc:09:5c:8b:95:43:8c:12:c4:39:9e:02:9f:56:
         58:a3:42:be:4a:c2:01:53:c8:3c:60:5c:63:d7:3c:02:1d:26:
         60:a6:74:3f:1a:5c:e1:f8:23:25:cc:6f:cd:04:10:a2:0f:d5:
         20:69:02:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:57:40 2026 by rpki-client