Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bbad48e4-4954-3b54-98e3-31dcfba0b816.roa
File:                     bbad48e4-4954-3b54-98e3-31dcfba0b816.roa (raw, json)
Hash identifier:          r8VFFamTg651deMyJs3B6nEMJzdnE9oeb/qnshelnO8=
Subject key identifier:   6C:F2:81:BB:D2:91:F8:2C:C4:21:07:2B:59:A1:DA:91:BD:45:A0:4C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584DE2D88B90CA26E98B01A350C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bbad48e4-4954-3b54-98e3-31dcfba0b816.roa
Signing time:             Tue 19 May 2026 14:10:34 +0000
ROA not before:           Tue 19 May 2026 14:10:34 +0000
ROA not after:            Mon 17 Aug 2026 14:10:34 +0000
asID:                     396826
IP address blocks:        2620:74:20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:d8:8b:90:ca:26:e9:8b:01:a3:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May 19 14:10:34 2026 GMT
            Not After : Aug 17 14:10:34 2026 GMT
        Subject: CN=67ba161f-e600-4634-863f-a338b767d7aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b6:52:5b:6d:97:fd:fd:93:72:6f:d4:4a:52:
                    76:8e:19:ff:06:49:66:e5:01:4b:15:03:ee:a6:f7:
                    95:8e:07:e2:00:25:a4:c1:5f:0c:bd:e0:71:0d:a1:
                    81:4a:96:3d:d4:1c:9d:28:cc:a2:cd:42:72:bb:7b:
                    31:ef:dd:3c:8a:f4:0e:48:5d:86:af:d2:2d:99:84:
                    da:40:4c:db:75:f7:88:7d:1b:58:4e:97:1d:c4:93:
                    1b:f4:81:da:8e:43:7e:04:37:1b:ca:91:7b:80:9c:
                    0e:42:d2:a2:15:ce:da:97:21:67:0b:42:74:6f:eb:
                    ca:1f:6b:a7:83:4a:60:93:61:ca:ff:8a:1c:0d:f8:
                    01:a9:15:9b:22:e7:7e:5d:54:69:32:98:c5:16:a8:
                    c1:94:c2:71:5c:9f:e7:22:62:79:a4:b6:31:32:43:
                    75:88:e2:46:2c:23:d0:5a:22:20:5e:ef:4a:5f:fa:
                    91:58:c8:31:43:cf:af:43:93:84:da:00:7c:79:cc:
                    c2:f9:3e:b4:61:83:d1:b7:cb:f9:b3:3d:26:2c:90:
                    f4:ac:ce:6d:13:b0:4f:87:b9:08:d8:6b:43:7b:75:
                    9d:54:4b:87:42:23:b0:32:84:f9:e7:06:58:51:5e:
                    fb:2e:9c:e0:7d:94:44:5b:75:72:2c:ce:c0:ba:dd:
                    7f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F2:81:BB:D2:91:F8:2C:C4:21:07:2B:59:A1:DA:91:BD:45:A0:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bbad48e4-4954-3b54-98e3-31dcfba0b816.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:4d:95:42:7c:f2:04:6d:4d:4c:b3:49:32:33:1a:56:48:47:
         31:b7:35:21:e9:93:9c:25:f8:bf:b7:27:72:f1:f8:9e:88:62:
         c6:71:15:4f:64:8b:2b:04:e0:6e:fa:d3:06:04:d0:04:85:37:
         36:b9:74:d6:0c:ff:88:2b:42:f3:18:39:ff:15:f1:34:8b:4a:
         8a:09:23:58:65:71:4c:f4:d6:88:da:5c:62:60:3d:1b:82:70:
         5d:5f:45:be:57:cc:bb:69:ae:24:09:29:04:60:3b:f7:69:33:
         cd:f0:61:f3:81:12:9d:b1:c2:f0:49:99:2c:a6:c1:0d:f1:c6:
         4f:d4:48:f2:b7:a1:5d:8a:41:80:d1:f6:1f:48:78:99:d7:2f:
         5a:41:3c:92:86:48:9b:9c:9b:1c:42:72:40:15:08:cd:20:06:
         d1:90:32:a5:67:24:ea:ae:a6:09:aa:e8:80:9e:2b:6d:f5:51:
         4e:43:aa:33:3e:ec:09:a8:5c:f0:92:50:0f:ca:35:8e:9a:80:
         2d:42:a3:80:12:e9:e8:fe:73:25:1c:16:54:5f:06:f7:ab:5d:
         9c:a5:06:db:3b:c6:bb:c8:77:dd:01:a4:58:63:8f:30:97:fe:
         78:c9:60:5b:51:9b:49:68:8a:0f:97:eb:e0:72:65:4e:44:5f:
         c4:15:2f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:45:12 2026 by rpki-client