Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd373336-389b-3758-a0d7-8eb0603f45ca.roa
File:                     cd373336-389b-3758-a0d7-8eb0603f45ca.roa (raw, json)
Hash identifier:          hwYPhQpYfOfr+3YBD+HjRiaHwhU8VxA9Oo0vAdrqKyc=
Subject key identifier:   E0:37:7F:81:8A:D0:6B:29:58:B7:09:5C:A3:8C:78:C4:48:91:EC:A3
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584DE2D8889B7D3BDE9A79CE2880
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd373336-389b-3758-a0d7-8eb0603f45ca.roa
Signing time:             Tue 19 May 2026 14:10:33 +0000
ROA not before:           Tue 19 May 2026 14:10:33 +0000
ROA not after:            Mon 17 Aug 2026 14:10:33 +0000
asID:                     19836
IP address blocks:        2620:74:20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:d8:88:9b:7d:3b:de:9a:79:ce:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May 19 14:10:33 2026 GMT
            Not After : Aug 17 14:10:33 2026 GMT
        Subject: CN=5149cc34-3269-4c12-9338-3dd3d0dc3a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:15:58:48:cb:fe:20:26:43:c9:43:e4:c5:29:
                    39:ed:11:f9:07:42:3f:77:c8:b5:b2:0b:fe:cb:ec:
                    9a:0c:c3:10:12:3a:70:19:0f:a6:b3:87:27:16:73:
                    03:1b:ce:32:8c:c3:8c:72:e3:e1:de:7f:58:c9:48:
                    7d:f5:5a:c1:e1:71:d0:61:7a:ce:b0:01:99:9c:a2:
                    bf:23:ca:4b:bd:3b:9b:83:9a:7c:db:8e:2c:70:21:
                    55:85:81:00:14:57:2b:07:52:06:dc:bb:26:77:2c:
                    a6:71:2e:5e:76:51:f4:52:cf:59:47:c7:ef:8e:c3:
                    c4:f0:76:21:37:1c:83:fe:da:f7:04:fd:9f:b3:14:
                    f4:47:be:d8:07:65:57:e4:bd:13:5b:6a:9f:de:60:
                    66:e0:bd:a1:d7:26:ff:59:5f:fc:8d:40:13:7b:f3:
                    6b:2f:48:61:bb:e0:ca:a9:69:27:9c:82:35:d3:0b:
                    87:61:a5:78:3e:28:98:4e:68:57:d8:d2:73:a0:99:
                    82:83:7b:6b:2f:72:82:09:e2:0d:00:42:bd:83:ef:
                    07:78:f0:c1:e1:84:3e:45:8a:f7:6e:89:de:fd:b3:
                    7f:da:06:75:8d:0b:e6:b8:52:2f:54:4a:ef:06:d3:
                    01:9d:02:6a:d3:f4:72:07:e0:9d:de:1b:9a:92:e5:
                    1d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:37:7F:81:8A:D0:6B:29:58:B7:09:5C:A3:8C:78:C4:48:91:EC:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd373336-389b-3758-a0d7-8eb0603f45ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:5d:51:e1:84:d2:de:83:a9:e6:d1:40:cf:88:59:70:f9:d6:
         82:a0:5c:0e:e2:a2:47:95:2a:63:42:05:55:e5:5e:fa:ed:72:
         5e:2c:19:1a:30:89:00:bc:69:cc:1c:51:7a:18:b4:b2:a9:14:
         f7:84:26:be:13:6e:47:a1:d8:aa:45:7c:3a:fb:0e:f5:2e:7b:
         fd:73:c2:d2:ba:5d:3c:8c:16:91:34:c8:1a:dd:27:f5:20:a2:
         7e:01:82:55:d9:5a:20:76:3e:90:b4:7d:6a:43:7e:77:dc:48:
         de:cc:cb:12:35:03:45:7f:20:93:7f:d8:79:ae:0f:4c:ba:05:
         2e:33:32:97:f4:aa:47:bd:60:86:13:53:9d:62:97:6d:84:ce:
         08:ad:40:69:69:ec:15:27:96:10:68:9a:98:2b:6b:ee:1f:1c:
         07:d0:b9:d2:71:17:7d:bc:93:d9:2f:8c:29:35:30:d3:a6:d5:
         3e:7c:b8:81:3d:95:ba:dc:68:5e:86:c3:ab:8b:18:f3:87:04:
         61:1b:dd:dd:31:69:e8:19:0d:03:76:b8:7d:37:fb:62:b8:37:
         7d:d2:f4:84:5d:a0:63:7b:66:37:47:55:7d:24:56:15:8b:96:
         c0:67:08:53:57:c7:cc:21:45:7c:2d:cc:64:38:35:b2:c2:be:
         5e:85:19:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:10:45 2026 by rpki-client