Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4ab9c91-5278-3fcd-9b6f-6b2c9b5db42a.roa
File:                     c4ab9c91-5278-3fcd-9b6f-6b2c9b5db42a.roa (raw, json)
Hash identifier:          TqwtZPG0aDSwTY5HZeVJebRndfhN0WW3zCQu95jbDU4=
Subject key identifier:   6F:75:62:AF:24:BA:66:13:07:32:0B:8D:E7:D0:BE:A0:82:B6:57:FB
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E253F17E8FE9FA573B1A5D0C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4ab9c91-5278-3fcd-9b6f-6b2c9b5db42a.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     396602
IP address blocks:        2620:74:2a::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:17:e8:fe:9f:a5:73:b1:a5:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=8c29ddd3-6d76-4116-9a19-aa0986071638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:47:86:57:17:7e:0d:4d:74:16:db:73:fc:b0:
                    2e:20:0f:cb:40:47:41:9b:74:06:69:a8:3f:f0:87:
                    af:a1:53:de:7d:b3:87:8a:a6:d0:f8:8a:10:3e:aa:
                    a2:09:14:d2:ec:26:5a:ed:0d:cc:e7:1d:4a:92:f5:
                    63:76:76:c6:3a:a9:04:ab:fd:ac:f2:f7:76:38:67:
                    19:9f:c9:17:22:c9:14:9e:2b:2b:8e:d9:54:53:7e:
                    4a:fa:5c:b3:d7:9e:ba:7a:43:82:9f:e4:80:18:b9:
                    62:fd:04:c1:01:43:9d:61:bb:4f:9d:aa:a8:8a:77:
                    0a:d9:f1:c4:67:d9:94:d3:09:3d:1b:69:87:30:f5:
                    bd:5e:e2:a0:08:73:8c:15:0b:0c:69:d8:4e:07:fb:
                    0a:f4:9e:a9:22:d7:a1:96:2f:18:7a:5f:36:3e:08:
                    6d:1f:6e:2a:c7:52:6e:af:2e:44:bd:ca:30:e5:37:
                    b3:46:76:67:42:35:0c:95:a6:b0:32:c9:46:7d:31:
                    66:31:b4:d8:75:a2:2c:19:8c:25:d4:fc:97:f0:3f:
                    3f:aa:b0:95:c4:34:39:95:e8:93:ca:e8:b2:ea:1a:
                    24:92:3d:63:ae:f0:0c:46:a6:44:e7:38:a3:f8:b3:
                    ea:44:33:d4:c3:5e:6a:1e:49:ee:c1:39:53:c2:ae:
                    12:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:75:62:AF:24:BA:66:13:07:32:0B:8D:E7:D0:BE:A0:82:B6:57:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4ab9c91-5278-3fcd-9b6f-6b2c9b5db42a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:64:f4:c4:fa:2c:31:fc:fb:ce:2b:fd:0e:a8:f8:e4:1e:cf:
         0c:9d:be:16:08:de:ee:11:74:e9:ab:56:82:33:08:cc:5b:d8:
         dc:74:97:62:8c:48:70:3d:2f:62:f4:78:07:54:66:b1:e3:ba:
         7c:c3:18:b9:9f:ff:c0:ef:e2:06:61:a3:13:be:7c:bf:ac:ae:
         e4:1e:f3:a7:b1:ea:30:7a:56:3d:e0:ba:bf:5c:ab:ba:e6:85:
         1a:9e:e6:bd:c5:44:b6:1c:17:12:fb:f9:c6:19:17:8a:56:e0:
         3f:43:75:6e:b7:80:6c:0e:ca:ff:59:6e:3c:43:d0:86:f5:59:
         ed:03:d7:3a:ea:47:37:90:64:8d:39:43:42:58:aa:22:77:54:
         5b:19:d4:1d:01:bf:42:92:36:75:b8:c8:a6:57:5c:ec:eb:e5:
         ee:7b:5c:87:6f:bb:01:a7:a6:4b:28:90:2b:e3:db:ab:67:96:
         38:7c:2d:4e:9e:d1:c0:5b:53:28:95:59:a8:88:26:9c:5b:c2:
         ea:d7:d7:b9:ae:b5:26:af:6b:34:c3:94:19:55:d4:5b:54:ba:
         ba:20:cd:21:a3:b5:40:35:f8:66:55:14:53:15:dd:7c:9e:16:
         2c:eb:32:82:15:32:d2:b1:d3:d1:26:66:28:c2:dc:52:26:b2:
         42:4b:e9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:33:27 2026 by rpki-client