Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f323b50e-6c7c-32eb-94ba-5fc015cacbd2.roa
File:                     f323b50e-6c7c-32eb-94ba-5fc015cacbd2.roa (raw, json)
Hash identifier:          M5in+yQUjE5fmfcRwDrOmQBYWDgHEZccc+k8o5TJUzU=
Subject key identifier:   65:A1:8A:B3:44:9F:33:66:BC:39:6E:18:1A:E4:9E:AA:EC:93:64:E7
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EA7932AF4E24942F447CD8AC0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f323b50e-6c7c-32eb-94ba-5fc015cacbd2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     40647
IP address blocks:        2620:74:2c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:2a:f4:e2:49:42:f4:47:cd:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f01083a0-bd74-4ea7-836b-a73e9c6b9001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:76:78:d8:e7:74:e7:19:1c:83:fe:6a:d8:15:
                    27:17:5b:c5:c1:9f:14:a4:0d:76:c2:2e:4b:0a:87:
                    ff:c8:e7:2a:f4:f0:81:d4:a4:a0:d6:a9:0f:2d:74:
                    9a:4f:c4:0f:ca:de:b2:75:d9:f1:84:29:1d:c4:61:
                    ff:97:6c:77:59:09:80:ad:b1:e5:4c:74:d8:97:cc:
                    e5:51:0d:8a:fd:5f:aa:db:56:d1:a5:d2:e7:e5:7b:
                    1c:03:82:b5:a9:d0:db:d9:e0:61:11:93:c3:f0:8d:
                    83:28:d3:46:b9:e6:9c:2f:df:fe:62:77:7a:13:04:
                    ae:1a:fa:8c:e2:b8:12:f5:ea:7a:f4:22:32:12:29:
                    8f:70:bc:fb:82:4f:85:52:80:87:de:a1:de:cf:e5:
                    e9:2c:28:c4:2c:40:d0:a5:ff:1f:20:06:78:d0:29:
                    a3:9b:74:cf:a0:b7:c7:a9:44:48:b4:cf:dd:66:a6:
                    9f:15:95:27:64:87:f0:43:32:27:3d:91:a0:2c:5a:
                    53:f9:ab:ae:9c:fa:f3:fe:e2:31:b2:d6:f5:65:08:
                    ba:22:7d:51:56:c7:90:41:e3:98:b4:8f:59:e9:cc:
                    9d:5d:7a:73:23:b1:4f:7a:33:e1:8e:7d:a0:48:32:
                    cd:84:88:4e:d2:31:bf:90:6c:d4:d7:85:78:36:a6:
                    bc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A1:8A:B3:44:9F:33:66:BC:39:6E:18:1A:E4:9E:AA:EC:93:64:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f323b50e-6c7c-32eb-94ba-5fc015cacbd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:d9:d7:56:cc:37:40:ef:ee:f1:c4:92:fe:00:7c:d4:db:3f:
         90:28:c0:a3:ba:1d:88:07:5c:92:b5:f8:79:21:5b:c8:44:fa:
         ca:a3:b3:18:da:dc:f5:11:cd:b9:47:17:63:f8:12:b1:a8:10:
         0d:72:13:f7:1d:a4:bd:14:4b:c9:8f:56:87:32:5d:bb:cd:fc:
         52:78:c5:26:6e:0f:20:99:dd:f7:bc:06:69:21:43:20:35:d1:
         99:98:6f:ed:53:06:ff:53:c2:28:d6:7a:2e:e9:59:4e:d3:9f:
         89:a6:71:f0:2a:e2:51:c3:93:68:f4:24:4c:c4:29:e4:c1:2b:
         98:75:b7:31:76:2d:f3:b7:80:85:58:22:c2:90:24:fb:a1:66:
         09:ad:47:22:6a:2a:73:d0:84:ca:61:10:2a:f6:b5:c3:39:71:
         9d:3b:eb:cc:a9:46:12:06:8c:85:47:df:9d:9d:c9:4c:9e:7d:
         a5:20:3c:60:d3:a3:67:4d:e1:b4:46:33:c0:3b:12:83:0e:46:
         38:f1:b8:58:d3:54:2e:34:90:f8:76:e1:cb:3a:0c:61:e4:8c:
         d2:27:0f:a2:48:56:b9:e7:33:09:22:c5:96:69:7f:cd:ae:f6:
         bc:35:fb:4c:c0:fe:bd:4e:d8:82:cd:ed:70:00:f0:d9:8f:1b:
         0a:b2:41:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:28:19 2026 by rpki-client