Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/a99233be-1207-3ee2-bad9-d47dffd5091c.roa
File:                     a99233be-1207-3ee2-bad9-d47dffd5091c.roa (raw, json)
Hash identifier:          8TvPQxD24R7zSbqMqOKQrxu4dwo/TfDdHtB+xirZnjw=
Subject key identifier:   79:F0:A8:97:6F:67:D5:70:31:29:74:5E:0D:A3:E8:C2:E7:C7:04:C5
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584DBFD07CF78D9161AA3728F410
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/a99233be-1207-3ee2-bad9-d47dffd5091c.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     1288
IP address blocks:        2620:171:a5::/48 maxlen: 48
                          2620:171:a6::/47 maxlen: 48
                          2620:171:a8::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:7c:f7:8d:91:61:aa:37:28:f4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=76daa2ae-f9ed-425b-959a-efa2b12f14c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d1:2c:16:17:fb:8c:a6:ce:23:b8:08:a8:19:
                    a4:c8:87:31:f0:61:dc:f6:b8:66:ae:69:78:d4:9d:
                    7f:9c:34:85:f8:d6:7e:19:0a:ee:a5:3d:b3:15:eb:
                    45:1d:94:45:3f:e8:df:40:c5:64:0b:9b:75:e6:40:
                    4c:31:7f:2f:68:18:ae:8e:75:0f:ad:a9:a8:b1:a4:
                    6e:c2:90:fa:fa:bf:cc:74:5d:c1:5e:35:25:17:0f:
                    a0:66:75:fe:a1:24:78:91:fa:6a:ec:f5:49:78:52:
                    25:a1:4f:91:17:33:d6:db:3a:22:6f:4e:1f:9f:f1:
                    32:00:f3:6b:b7:46:a8:48:44:0e:74:27:75:31:a9:
                    37:0e:5c:a2:05:c5:4a:36:53:c3:f5:c5:8b:a1:48:
                    fc:a5:6b:d1:7b:e0:38:99:d5:fc:37:d0:0b:c4:41:
                    79:70:0d:0e:b1:57:d8:f2:54:0b:cd:e4:e4:fa:8a:
                    d4:a2:0c:f3:e7:22:13:47:7f:91:78:63:60:3d:2a:
                    7f:02:49:7c:4c:be:b9:3e:49:67:b0:6f:e7:51:9e:
                    4d:1d:c2:4d:52:0c:ef:bf:20:42:ee:48:8f:a8:05:
                    b7:37:23:36:96:a0:8b:89:a3:84:38:db:15:14:69:
                    03:5b:78:49:6f:72:ca:46:1b:0a:75:f1:90:74:3a:
                    a4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F0:A8:97:6F:67:D5:70:31:29:74:5E:0D:A3:E8:C2:E7:C7:04:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/a99233be-1207-3ee2-bad9-d47dffd5091c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:171:a5::-2620:171:a9:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:d8:d0:24:cd:2b:9c:01:4c:ab:8d:a8:bd:df:70:fe:38:16:
         d1:44:76:55:8d:c2:26:99:94:c0:3d:2a:0f:1f:d5:cd:ca:d8:
         d3:26:c9:bf:54:8b:d9:4f:f0:ff:21:06:b5:53:27:2a:ba:6c:
         f7:59:d4:76:73:0f:e7:96:94:38:5c:33:7d:7f:d4:9d:c5:d5:
         d6:d4:26:9c:b0:fb:d1:09:82:68:ec:fb:24:34:14:5c:ed:cf:
         fd:74:58:69:72:9f:f1:f9:3f:d8:8c:8a:90:02:b4:63:81:bf:
         1c:72:ee:3e:ad:d8:88:9f:22:6f:a2:0d:4b:03:23:1e:97:67:
         21:d6:28:3e:e4:80:8a:7d:e0:12:77:2a:3c:24:54:37:a0:39:
         e5:36:2b:95:8a:b2:b6:42:ac:2b:22:22:11:33:ae:cd:2d:a0:
         39:5b:48:52:49:de:fa:b1:b6:18:e7:c2:20:df:f3:4e:63:da:
         95:fd:ff:88:0f:12:fd:41:36:5a:c3:51:83:1a:2d:d9:3a:92:
         fb:d3:6f:b0:04:82:12:4e:4c:6b:41:60:ec:68:01:89:fd:28:
         00:62:f5:8b:4b:db:e1:1d:0e:e2:08:b2:cf:7e:1f:6e:b3:e3:
         2b:d5:74:32:02:f8:85:34:f1:05:0b:9c:d2:c5:fb:5c:5b:41:
         d8:82:62:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:34:23 2026 by rpki-client