Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9a49422-7587-3e1c-ae43-6db8a437033e.roa
File:                     d9a49422-7587-3e1c-ae43-6db8a437033e.roa (raw, json)
Hash identifier:          6s15r6NMyr3CczDabWyaeTfVWwCosDUxQlvf/ww3xWE=
Subject key identifier:   EF:26:6D:5F:52:C8:95:64:88:3A:92:0C:A8:56:E8:A1:49:D8:D8:AA
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EFE122C688DA8ABD6233E1B20
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9a49422-7587-3e1c-ae43-6db8a437033e.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     36619
IP address blocks:        2620:74:20::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:2c:68:8d:a8:ab:d6:23:3e:1b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=c4a6eb42-0300-4028-99ba-891351461fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:81:0f:a4:35:fc:a3:b3:14:44:a3:29:15:5c:
                    2a:e4:fe:99:dd:8a:31:10:ef:03:9e:09:08:5c:1d:
                    e1:af:9e:b9:39:94:13:c6:e6:71:f5:08:19:ba:95:
                    5b:86:95:08:a4:fc:b3:dc:5a:4b:46:0b:ef:35:87:
                    7c:29:c0:9b:b8:81:c5:52:b2:cc:bd:22:41:53:6f:
                    01:8c:aa:d8:5f:88:c9:95:e8:d8:f0:73:52:84:cf:
                    e5:b0:63:76:eb:44:08:15:20:74:49:2c:72:54:8b:
                    ba:cc:47:ad:5e:19:bc:f0:ff:68:ac:0e:5a:d9:7a:
                    62:23:26:24:13:62:fc:34:72:2a:51:a0:c4:79:02:
                    76:11:2a:27:c9:d2:0c:6a:2e:64:9c:d0:95:3a:3f:
                    c1:42:a2:65:20:c6:b5:44:4e:19:93:34:3e:57:f0:
                    5b:2e:9e:2b:43:1d:7c:60:b3:d7:38:78:39:ca:fc:
                    d9:46:f5:6f:9d:f8:82:76:5d:16:63:9b:e8:0f:08:
                    38:f7:8a:0a:23:a6:48:f0:85:5a:75:b6:03:e9:ef:
                    df:a6:e4:c3:61:d9:4e:d7:00:5b:6b:6d:43:85:7b:
                    e7:51:c0:f2:c2:fd:df:60:dc:41:42:f6:a7:a8:ef:
                    be:0d:de:63:aa:fe:b9:2d:3f:2f:43:75:bd:e3:c6:
                    2d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:26:6D:5F:52:C8:95:64:88:3A:92:0C:A8:56:E8:A1:49:D8:D8:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9a49422-7587-3e1c-ae43-6db8a437033e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:94:ae:dc:75:28:5b:e7:03:b2:4d:20:ab:cf:0c:88:2f:97:
         2e:e5:79:29:0b:f2:63:39:fc:03:c2:38:ff:da:0c:25:4f:38:
         23:50:ad:b2:d6:3d:fa:43:95:9f:e7:51:74:57:5c:a5:19:71:
         da:5f:35:38:3c:01:68:79:f4:40:88:38:f2:91:b1:c2:d4:3a:
         03:ee:f5:85:c4:31:19:88:a9:4e:29:93:dd:24:ed:8a:14:0b:
         fe:5c:ce:59:9e:f3:fd:83:f9:1a:1c:e0:9e:2d:f5:a0:62:9a:
         93:87:bb:c7:f9:ba:a7:28:72:43:25:a1:06:76:09:8f:ad:a3:
         af:fc:e9:d0:bd:0c:c9:51:3e:af:bd:24:db:c2:6d:c9:3d:2c:
         52:47:63:22:9e:10:42:cb:4a:df:f0:80:21:ab:45:8a:79:e2:
         be:fe:77:bc:ff:4a:7f:df:77:46:2b:96:39:1b:e3:a3:8d:12:
         1f:39:5e:0a:4b:4f:26:6f:48:0e:22:f5:d2:63:4a:cc:80:6e:
         1a:fb:7d:d1:fd:92:09:74:cd:e4:09:20:ff:60:3c:46:ad:c8:
         17:c3:41:08:7e:dd:81:00:9e:e9:49:ee:f4:c4:b3:ae:75:b8:
         74:3c:85:f9:97:74:94:cd:1c:5a:c6:04:71:dd:9f:69:23:30:
         6d:a8:eb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:10:15 2026 by rpki-client