Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be198c7f-6d71-3b66-96c8-1a3e613fc7be.roa
File:                     be198c7f-6d71-3b66-96c8-1a3e613fc7be.roa (raw, json)
Hash identifier:          6FsKGXhIj7JTVgIFFrkTlj9XwRIFRFXOCdR+HtKYjyk=
Subject key identifier:   A9:27:F5:D7:D4:A5:10:3D:F5:A9:56:37:E7:79:D6:3F:8D:08:97:5B
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E104F07B2DA3C6108C26F4680
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be198c7f-6d71-3b66-96c8-1a3e613fc7be.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     20172
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:07:b2:da:3c:61:08:c2:6f:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=8c7138ed-2d96-455d-af1e-1ded181b6e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:30:74:a4:48:4d:ea:01:98:21:b2:6c:66:ed:
                    9a:16:8e:1e:23:ae:09:a5:8c:db:32:b5:c9:ca:1b:
                    ab:5f:34:a0:bc:cc:90:82:ad:c4:5f:1b:2d:8c:f7:
                    bf:cc:07:d8:e1:af:e6:a2:08:05:e1:e9:4e:cb:9d:
                    b7:4b:25:96:c6:56:be:43:ab:5f:13:f6:7f:79:41:
                    75:98:93:d3:b2:24:07:cf:db:c2:e4:76:62:b0:a2:
                    da:6a:75:a7:99:b2:42:a5:35:c6:1f:52:95:4a:00:
                    90:9e:97:78:ef:5b:f4:56:42:ee:4c:3e:94:a6:eb:
                    c5:ed:dc:a0:95:4c:c9:68:2e:1b:a2:1d:b1:87:e5:
                    0a:d8:85:fe:57:96:d7:a7:6f:de:bf:39:a7:eb:aa:
                    e6:83:cc:be:c5:4e:8d:d0:a4:1a:43:c7:d9:36:84:
                    d2:45:5a:1c:56:08:4b:d3:36:f2:09:39:f9:2f:0e:
                    b9:76:92:23:66:47:71:cf:50:56:87:06:18:99:c3:
                    8b:d8:c2:68:2a:dc:ff:db:c4:55:7b:a8:8a:49:e5:
                    d3:df:6a:d6:85:0e:d3:49:4f:cc:12:3b:21:fc:09:
                    df:4a:58:3b:23:f1:5c:a6:5e:6e:a3:76:a0:39:b9:
                    90:7a:6e:43:98:8e:88:b8:57:15:1c:71:b4:4a:8a:
                    48:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:27:F5:D7:D4:A5:10:3D:F5:A9:56:37:E7:79:D6:3F:8D:08:97:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be198c7f-6d71-3b66-96c8-1a3e613fc7be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f2:60:56:74:25:5a:92:49:22:fd:41:a1:eb:de:fe:74:35:
         84:4b:8a:42:e4:c6:5d:3d:ed:82:b9:62:b9:3c:7c:a2:75:8e:
         b0:86:f0:3c:a9:c2:6e:6c:1f:f2:3a:6d:27:8d:76:86:9d:29:
         a8:40:a5:50:84:cd:dc:6e:02:fc:d1:86:25:0d:ed:6f:67:52:
         d0:b1:69:a4:d3:17:dc:70:62:c0:6d:de:0f:8d:10:1e:dc:c2:
         68:0b:49:04:7a:ca:2a:ba:67:66:90:39:42:b3:ca:df:c0:45:
         18:12:2a:98:6a:7c:a0:78:98:40:3b:25:48:de:0d:13:1e:f3:
         a3:1a:00:20:50:2e:3c:b9:6f:23:c8:90:a1:73:08:96:2f:72:
         4c:a3:ca:2f:99:b9:0b:7f:f0:12:74:5f:1b:91:8b:71:8b:a6:
         f2:0a:14:24:74:91:9b:86:1b:73:bf:68:f0:e4:b8:17:a3:2c:
         51:7a:9b:91:bb:01:0f:2b:15:41:d6:08:51:a0:5d:11:fb:58:
         20:72:f5:c3:6d:3d:01:46:12:2a:09:70:30:36:8b:2d:21:38:
         94:57:62:58:88:d2:dd:c7:73:f2:95:b9:2f:e7:60:26:b3:f9:
         46:f6:37:3c:cd:31:e2:6b:1d:1e:74:e2:0a:7b:86:c6:d7:66:
         39:c9:b4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:51:01 2026 by rpki-client