Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fe205ace-6126-3452-8b1b-18737ec00307.roa
File:                     fe205ace-6126-3452-8b1b-18737ec00307.roa (raw, json)
Hash identifier:          je3OxHDrvPa0brq3Qg44lPabCBNxosuJ1rko2ZtXjFo=
Subject key identifier:   4F:AE:6D:D1:CB:2A:A8:47:BD:58:C5:13:26:54:59:FD:65:00:08:35
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EA2DFCA508F45AC478322B500
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fe205ace-6126-3452-8b1b-18737ec00307.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     396826
IP address blocks:        2620:74:2c::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:ca:50:8f:45:ac:47:83:22:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=31ecb339-b630-49f0-8825-448206c46b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b9:c0:88:ed:e7:7f:da:be:c0:20:b4:05:9b:
                    30:a2:eb:96:77:f3:02:e8:a5:3b:da:0a:5f:da:58:
                    d7:c3:d5:1a:d6:b4:2c:f0:ef:d4:06:19:cb:f6:bc:
                    53:b7:74:d9:a9:5d:44:44:3b:6d:94:71:26:27:88:
                    de:c0:3a:d5:24:ee:fd:42:3e:01:d5:d8:4c:91:44:
                    91:1b:0a:f3:51:fc:fe:6f:69:b8:83:08:2d:3f:06:
                    2b:4d:23:ee:f7:38:d5:18:6c:47:5e:2a:30:38:a3:
                    cf:8d:9d:cb:fe:2d:ed:8b:2b:a7:dd:7a:58:07:59:
                    e8:8e:43:cc:24:57:63:ef:50:ff:aa:dd:37:49:8f:
                    6c:64:b3:db:55:5a:68:7b:c5:76:ea:4a:b9:7f:8e:
                    4f:95:e7:42:ec:7d:e7:06:ef:08:bb:92:9b:eb:b3:
                    cc:8e:84:db:42:2c:c2:27:e1:78:b3:58:1e:f5:6e:
                    ff:d0:9b:4b:71:2b:eb:35:58:cf:7a:69:3a:88:f3:
                    07:c8:68:88:39:45:1a:a3:b1:47:a1:63:20:90:ff:
                    0a:6c:40:f5:d5:8d:09:69:7b:b2:42:d9:a6:63:c6:
                    30:d8:48:79:0f:1d:e8:72:5e:b6:c7:48:e1:e4:e6:
                    e1:87:fb:7f:1c:de:73:de:64:6c:7a:ee:91:24:9b:
                    ef:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AE:6D:D1:CB:2A:A8:47:BD:58:C5:13:26:54:59:FD:65:00:08:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fe205ace-6126-3452-8b1b-18737ec00307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:a0:e3:3c:0c:cd:9a:4d:c0:fc:01:2b:70:42:b5:54:ea:78:
         b5:01:49:bc:dc:35:1e:b2:9e:0e:a7:05:d2:0a:1c:b7:ff:d0:
         fd:0f:03:1c:f5:2a:db:57:f7:4d:9a:41:17:07:ac:ac:d6:fc:
         90:65:9f:45:1f:a2:8b:91:6d:ed:93:3a:7c:05:93:69:fb:8a:
         8b:6a:94:6a:0a:d6:22:9e:00:23:9a:f9:3f:d4:67:d4:70:89:
         ad:ea:c5:48:41:0d:84:5b:f7:d5:72:0b:d9:0a:a9:97:01:78:
         77:84:b9:68:d8:57:35:ed:09:d4:2e:27:17:23:7b:1e:bc:00:
         ae:4c:63:6e:0c:ef:11:5e:35:5f:3e:87:c1:91:b3:f4:27:f9:
         f9:05:32:14:1d:77:f7:6a:88:6b:1d:43:35:83:4c:1b:a2:c4:
         3f:9b:72:00:72:cf:49:6a:3b:c0:e3:aa:b3:df:19:50:af:0b:
         ee:31:e5:f3:55:03:7b:a4:81:6f:36:24:2f:a8:d1:6d:af:2c:
         99:bb:79:ad:22:3f:10:cc:74:3d:f7:ae:a1:54:3b:a1:b0:b6:
         ca:d1:ad:ad:8b:45:b8:38:21:8c:2e:b3:cc:f6:14:84:18:70:
         38:87:d7:1a:41:7b:76:08:3b:ee:3e:20:bd:4d:37:61:3e:d2:
         c2:74:1c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:05:17 2026 by rpki-client