Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da478eb6-36d0-3a83-858c-ffd05bd1d0f3.roa
File:                     da478eb6-36d0-3a83-858c-ffd05bd1d0f3.roa (raw, json)
Hash identifier:          ZmvIXntqRtkm8y5KxynTexIFHuZHKAQ7c/Sv6daqZLI=
Subject key identifier:   DC:7C:4C:5C:ED:68:D9:48:F6:2D:47:A2:09:0C:8A:11:EF:C3:E3:DE
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E131990B36DE7BCA9E0CBAB80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da478eb6-36d0-3a83-858c-ffd05bd1d0f3.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     396567
IP address blocks:        2620:74:2a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:90:b3:6d:e7:bc:a9:e0:cb:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=29e904ab-f13b-4540-b84c-91693b4a944a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2a:c0:23:5e:14:16:e0:e4:15:62:55:ac:8f:
                    ad:32:44:b6:20:d2:ae:84:90:84:25:bb:e7:95:8e:
                    d2:70:e9:df:d1:12:56:d9:f2:f3:c6:ad:af:46:1c:
                    9a:60:7a:df:8d:d3:12:6b:f2:30:69:d6:b1:91:69:
                    ff:3d:ac:ef:26:73:df:d7:d3:c4:d6:21:7e:d7:9f:
                    c8:5b:19:81:18:a9:d7:fa:47:93:6e:11:29:3f:4a:
                    75:f8:89:f1:3f:2e:10:d9:ef:8c:b3:2a:ee:88:b9:
                    0d:82:33:11:e8:e1:b9:34:55:25:b9:c4:2d:6e:6a:
                    43:26:d0:3c:95:7d:9b:10:97:be:66:66:ea:8a:3c:
                    3e:68:4f:be:b4:4a:03:19:31:68:6a:ba:bb:07:0c:
                    39:b1:85:8d:55:69:11:08:23:a5:97:b8:77:db:76:
                    f1:ff:bc:68:14:1d:93:d7:08:5d:c6:1f:41:88:85:
                    b1:e2:54:7e:4e:e7:e0:3a:7e:ba:fd:a2:ea:8d:35:
                    d8:b3:31:a1:0a:71:c8:35:4d:fe:1b:97:e3:85:c8:
                    55:85:73:05:2b:fb:a6:b8:18:ec:cc:12:70:02:2b:
                    cd:fd:a2:2c:bc:cd:c8:4a:10:d4:86:31:b0:c7:05:
                    8b:70:4b:45:33:c6:22:ff:4b:fc:e2:05:3f:4c:1a:
                    3f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7C:4C:5C:ED:68:D9:48:F6:2D:47:A2:09:0C:8A:11:EF:C3:E3:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da478eb6-36d0-3a83-858c-ffd05bd1d0f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:a5:f5:88:ec:c4:b7:fc:c7:c9:7a:a6:a0:04:56:a5:a1:21:
         60:c8:18:e7:ec:e0:ed:cc:8b:69:c6:1f:5f:bc:62:61:a6:6d:
         a2:5c:c7:a0:ab:e5:a6:ad:ca:76:55:f6:e9:a6:17:57:cb:b0:
         a4:d0:3d:fd:74:c6:ec:b7:71:c1:17:c8:67:99:63:c4:85:ed:
         d8:f4:e5:e7:ae:c1:8b:06:2b:ae:fa:cd:ec:a2:f4:40:d6:b8:
         cc:dc:91:42:05:df:80:5f:8d:05:ce:1e:94:40:f9:b6:2c:22:
         6b:bf:33:2c:f5:08:89:2a:27:82:72:bf:06:d5:e1:0d:20:7d:
         fa:ef:d8:7a:ee:ee:32:ef:b3:52:a0:6f:f4:13:6e:12:40:99:
         66:6f:ca:cc:de:3a:70:0f:7c:8d:56:17:67:75:43:26:53:40:
         cc:39:48:2f:e6:65:19:1e:99:2c:25:a9:d7:98:03:d7:2f:2c:
         23:13:b0:24:b6:f7:62:57:06:b2:7d:a5:08:57:e6:83:9b:8a:
         9f:2b:7b:f1:6b:40:ac:e6:19:d1:d7:a7:a2:54:9c:e0:fb:bc:
         c1:a4:25:14:ba:15:12:c3:25:55:72:34:c2:9c:d7:c0:3f:b2:
         be:00:49:ee:88:f0:04:98:ce:47:af:81:78:b2:7a:17:be:11:
         a2:22:f9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:26:29 2026 by rpki-client