Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/01c2d898-a68c-363b-b764-607c4f2ff389.roa
File:                     01c2d898-a68c-363b-b764-607c4f2ff389.roa (raw, json)
Hash identifier:          s8vB6opJiTIL2ilinzGxrcqxLE1CcYHwzrb6ZcQ6lbk=
Subject key identifier:   13:63:A6:AF:58:65:47:84:8D:6E:CF:68:C9:23:0D:91:4E:E5:53:06
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D300A89BB316E654DFE881300
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/01c2d898-a68c-363b-b764-607c4f2ff389.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     27544
IP address blocks:        2620:74:2b::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:89:bb:31:6e:65:4d:fe:88:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=f549b7e7-1bc7-4e42-9843-e7a8e7cf7628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:da:a2:90:d5:78:07:99:a6:a0:dd:a4:f9:a7:
                    d2:d9:89:b0:a3:7e:ba:ec:8f:be:2d:63:0a:66:4d:
                    97:fc:15:8c:5d:7c:40:61:fd:6e:1d:c7:b4:96:f0:
                    2e:94:0b:f7:9f:15:d8:5d:ef:cd:c7:a4:25:cc:37:
                    29:ff:6f:6a:85:c8:8a:ef:f5:f5:b4:fe:a0:72:10:
                    af:a1:08:4e:5f:ba:f2:ba:65:38:f6:f8:98:e6:e6:
                    5d:7a:01:be:0f:29:d0:35:7a:b1:b1:08:aa:2a:ed:
                    90:06:a0:a7:17:4a:0f:d7:85:2b:45:85:55:ca:0f:
                    22:5a:cb:d4:76:a5:80:fb:75:e2:e3:9a:51:ea:ce:
                    86:75:b7:66:35:c3:4a:83:47:f6:f9:02:9f:89:81:
                    3b:aa:3b:30:e1:3f:9d:9e:d4:ad:f6:2f:fe:68:a9:
                    fb:70:27:27:49:cc:00:1e:64:b2:7a:4b:e4:bc:f6:
                    09:01:56:12:33:fa:42:a0:58:a1:52:a9:30:75:9f:
                    2a:54:a4:14:17:a5:9c:6d:34:95:1e:12:85:24:17:
                    bb:56:06:75:6a:df:7f:e7:7a:ea:54:22:4e:d6:a6:
                    8c:3a:1d:df:64:9d:e3:b5:36:91:22:7c:27:c2:9c:
                    7e:51:40:18:e4:48:a7:2e:d1:0d:e7:b2:ec:72:e4:
                    b7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:63:A6:AF:58:65:47:84:8D:6E:CF:68:C9:23:0D:91:4E:E5:53:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/01c2d898-a68c-363b-b764-607c4f2ff389.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:a6:bb:f3:52:0b:2f:ea:9e:3a:65:e4:fd:4e:8e:f2:5d:8b:
         4b:ae:e6:2b:11:c5:2a:67:16:85:57:45:b0:d8:1b:7f:f9:88:
         09:14:da:3c:91:3e:87:fc:1f:ef:54:84:dd:3e:4b:20:52:86:
         58:bd:d4:dc:55:53:1b:e3:31:8e:90:34:33:77:4e:91:7d:50:
         b4:e9:21:3f:d0:ba:89:70:02:11:2c:6b:29:5f:fa:b2:e5:7b:
         50:14:ce:78:7f:9f:48:54:2d:d5:1b:c0:ec:05:f1:ee:61:01:
         b2:85:11:9a:b8:27:24:3d:35:cd:cb:93:59:82:6d:6f:c2:b3:
         8d:a1:97:bb:e3:2c:60:f8:fd:92:cc:5a:2d:e6:64:19:86:0a:
         91:34:7b:02:de:27:e7:ee:03:a4:b4:90:52:c5:a5:4d:a0:92:
         7d:74:23:75:59:1c:60:0a:06:2a:20:26:fa:bf:6f:5d:9b:69:
         30:5d:73:81:55:42:00:aa:f9:ab:ad:c5:d4:cb:ca:02:5a:cd:
         e3:c0:97:11:b7:30:a0:c0:61:cb:ec:29:92:0b:1d:a6:f4:67:
         87:c6:98:b7:68:2e:0c:67:5a:9c:6f:90:83:00:97:a0:2e:9b:
         04:24:32:c9:43:d9:c9:f6:fb:2c:7a:ef:42:7c:79:78:4c:c2:
         b5:08:a4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:29 2026 by rpki-client