Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/11fd6045-f503-390b-a153-c675ac2df301.roa
File:                     11fd6045-f503-390b-a153-c675ac2df301.roa (raw, json)
Hash identifier:          3UaLWo9qRtgY6SxDtajk+PANJXXA/NBNHv/nt7y5Zek=
Subject key identifier:   CC:44:39:DC:39:37:86:4A:E4:39:06:56:02:A4:0A:39:6B:6B:36:32
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E7204C2EBD42D3312FFF6CB80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/11fd6045-f503-390b-a153-c675ac2df301.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     20431
IP address blocks:        2620:74:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:c2:eb:d4:2d:33:12:ff:f6:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=0b9d5e06-fdda-4fb9-9f50-b0be99122d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6f:71:4c:7f:ff:ad:ca:dd:61:2c:4c:37:04:
                    0d:41:3c:65:3e:a3:e9:65:93:6e:1c:8e:b0:c6:bd:
                    44:41:e4:0d:d1:2e:45:b0:98:3f:8f:83:4e:5c:20:
                    ce:23:8b:26:3e:b5:da:2c:1f:f9:94:69:af:c3:1a:
                    2e:be:46:86:f0:e1:44:6e:56:05:84:8c:bc:65:f1:
                    96:ca:d2:0c:6f:94:c3:94:40:98:3f:8a:62:0d:19:
                    97:c1:0c:cf:39:43:96:a7:a4:d9:96:7f:20:b5:d4:
                    c7:db:42:b7:55:b8:0a:b5:12:72:c7:96:c8:0a:2f:
                    b9:6e:46:bd:b7:61:8e:d3:23:4c:db:51:18:87:dc:
                    3b:33:ce:08:22:96:fa:37:d3:e2:ce:83:24:e4:cc:
                    51:d9:54:d6:f9:54:25:29:9b:83:80:ef:8a:98:40:
                    3e:06:ea:48:6e:3a:87:8a:22:d7:5a:bd:32:73:24:
                    78:f6:dc:0b:a0:2e:d2:ae:34:ad:af:32:37:f7:bb:
                    84:57:31:43:28:03:80:21:65:2f:6c:38:14:e4:2f:
                    08:23:06:5d:73:e0:b7:5b:ab:0e:7a:45:50:c6:28:
                    33:c7:3a:91:87:bd:9f:dd:19:2f:0d:89:30:e0:bb:
                    2d:c7:c5:8d:df:46:eb:5c:ff:60:2f:b0:4d:70:c9:
                    cc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:44:39:DC:39:37:86:4A:E4:39:06:56:02:A4:0A:39:6B:6B:36:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/11fd6045-f503-390b-a153-c675ac2df301.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:7a:5a:34:54:c9:55:74:87:99:af:14:96:69:e0:48:d0:92:
         8b:7d:7b:c1:62:e5:12:85:94:1a:78:0f:4d:19:d0:34:4f:02:
         65:5a:95:dc:c2:66:4e:b4:08:96:07:8f:c0:ad:cf:a0:84:aa:
         28:e6:79:48:b4:b8:0d:a5:9f:6c:2b:90:13:87:0a:74:2f:6f:
         14:65:8d:40:76:23:41:9f:7a:85:d1:4d:06:6b:81:66:e1:1c:
         cf:b9:c9:32:b1:40:0b:42:6b:1f:25:14:19:e0:ac:97:7a:13:
         88:ab:af:2f:69:a0:70:03:25:23:25:59:d2:41:46:ce:62:58:
         8a:d9:49:84:92:a3:25:58:6c:4c:08:19:5f:18:a0:6a:73:0e:
         14:be:94:6f:e1:dc:36:31:8d:95:f8:3a:b6:f8:e2:0e:15:98:
         1c:a6:79:21:33:f4:02:2a:0b:a4:2a:b7:84:46:5f:77:fc:4b:
         12:f0:02:04:43:63:af:ca:32:a8:fc:0c:75:d6:e2:7c:22:f8:
         63:a3:c0:96:50:29:7c:2d:7b:4e:3b:e0:22:ba:b8:86:df:77:
         1d:3b:64:8d:99:97:e7:e8:81:be:1b:bb:5e:ed:52:98:a7:e2:
         e6:36:f7:67:81:27:38:97:b2:4e:84:61:c2:be:e1:7f:96:29:
         f8:06:71:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:41:49 2026 by rpki-client