Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c775bf16-838a-3aae-82d1-af8c10019814.roa
File:                     c775bf16-838a-3aae-82d1-af8c10019814.roa (raw, json)
Hash identifier:          D0SUbithzk8WokkzB00JMwgxTuh/ME+e9epn7969Oa0=
Subject key identifier:   0D:22:23:8E:57:75:F2:A9:9C:B5:A6:EA:11:D3:CA:52:8D:A2:D8:13
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D59EA96DA3FD59CA51D707300
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c775bf16-838a-3aae-82d1-af8c10019814.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     396576
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:96:da:3f:d5:9c:a5:1d:70:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=5325274a-dfc2-43bb-a55b-e62697c6c424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a3:8c:19:15:15:4e:a7:a6:83:70:0f:85:e3:
                    f8:95:b2:58:ae:db:4d:06:c0:b3:7b:b1:e2:e9:25:
                    8f:ea:5e:55:c6:0f:ba:01:fa:71:ee:5e:c5:63:b1:
                    2d:6e:54:7b:3f:b5:e5:42:73:22:10:b1:24:40:69:
                    5d:c6:10:d6:c2:00:7c:16:51:82:da:dc:a6:49:81:
                    ea:3c:a4:a8:2b:67:ae:84:9c:05:2f:cb:4a:ac:c7:
                    7e:2c:a6:54:d9:f3:34:91:f3:06:bf:18:b9:4e:94:
                    6a:f6:13:6c:0f:b0:81:f1:74:88:fd:0d:04:0d:1e:
                    67:0c:08:42:af:85:b3:79:5c:73:d6:03:01:ce:55:
                    ff:c1:11:17:80:b4:b2:58:71:86:32:46:db:81:dc:
                    84:04:22:d7:0f:eb:8a:d9:0d:37:52:e1:d1:52:68:
                    7c:ad:9f:05:94:bb:fe:c5:cd:f2:ff:2a:3e:5d:c9:
                    b6:c8:3e:e2:f9:90:97:27:d1:43:46:ed:27:4a:d6:
                    2e:31:90:87:4e:a6:49:7b:e8:5b:4f:f4:67:2e:6f:
                    45:1c:ad:62:13:3f:eb:6b:40:4a:07:ef:dc:e7:9a:
                    3c:ef:13:14:d4:93:4f:01:af:7d:3c:9b:1c:af:bb:
                    5f:14:f9:75:db:e4:61:25:76:51:62:f6:fe:b7:ab:
                    ff:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:22:23:8E:57:75:F2:A9:9C:B5:A6:EA:11:D3:CA:52:8D:A2:D8:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c775bf16-838a-3aae-82d1-af8c10019814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:34:50:bd:d3:e8:0f:f0:1d:fa:6e:59:fe:5e:5d:2f:99:fe:
         9d:c4:d0:90:49:cf:97:a7:09:fa:78:86:91:58:ee:6d:e9:13:
         8d:c5:17:a4:ac:60:99:84:4c:c1:8b:55:35:4d:d9:d4:d1:83:
         a1:d5:3c:a9:f3:12:a8:b4:0c:6e:0b:46:6d:06:2c:d9:95:9f:
         d0:b5:5a:b3:7b:69:31:46:d6:6f:a5:5c:b9:3e:0a:3c:9c:2e:
         88:0e:83:34:74:53:5d:f4:48:96:75:1d:fb:86:3c:bb:09:0c:
         a1:33:c4:4f:13:e9:fd:34:6b:84:da:98:bd:3d:48:7c:ba:5b:
         47:ba:07:3b:d1:05:54:12:8e:5a:63:bf:89:61:4f:1f:62:e9:
         2c:e0:f1:84:d2:83:1f:08:fd:ac:63:d6:27:14:aa:69:ff:51:
         28:7a:49:5a:c7:10:fa:b6:a8:be:c9:13:f0:71:23:72:35:4a:
         2c:90:b5:d2:3e:ef:6f:88:ec:63:93:40:67:44:a2:f7:51:35:
         a1:78:c3:94:cb:df:4e:e1:ea:9f:12:a1:b8:f1:e5:b2:a9:05:
         16:d3:62:77:7d:fb:e7:2e:47:8c:72:16:3c:ea:9e:e4:55:7e:
         0f:24:78:f4:86:10:25:7f:cd:b5:16:52:3c:6c:23:e7:f2:c4:
         7e:34:67:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:43:00 2026 by rpki-client