Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/180fb14a-7f05-31e9-99bb-13a4086b648b.roa
File:                     180fb14a-7f05-31e9-99bb-13a4086b648b.roa (raw, json)
Hash identifier:          F5mmEompT9JbLBpPV8+c+4Y72txLfNk97pFEjZaTwlg=
Subject key identifier:   5D:CF:F8:CE:87:3D:3C:3B:FA:A0:66:30:D5:86:F7:16:07:33:B5:FD
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D300A8190464DAEDBF7CF28A8
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/180fb14a-7f05-31e9-99bb-13a4086b648b.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     397208
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:81:90:46:4d:ae:db:f7:cf:28:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=99eaae82-a451-4299-859f-601a72f78eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:06:60:c6:17:8b:10:27:9b:97:61:2f:0b:63:
                    58:07:bd:23:d6:dd:4e:f2:65:89:be:3d:dc:ac:91:
                    4d:ce:3d:99:4a:32:a1:1a:ef:25:b6:e0:c4:1f:82:
                    7a:10:47:0f:da:ea:42:ce:d5:2e:d0:ae:96:4a:04:
                    d2:4e:27:99:b0:c6:a9:b7:6d:f9:e3:be:60:2b:d1:
                    59:8a:de:58:47:5a:a8:45:0c:b2:38:8b:70:43:07:
                    6f:03:8f:22:5a:70:2d:31:94:19:ea:18:7f:e9:d8:
                    42:8a:3f:9b:da:6e:c0:42:6a:2a:1f:ce:6e:a5:ce:
                    10:cf:b7:0f:c0:20:53:67:68:0f:81:0b:2b:8f:06:
                    2d:7d:b5:4f:50:c2:61:4f:85:74:0e:26:2c:c1:c2:
                    70:33:ff:34:e2:63:b7:fb:25:4a:6b:b7:45:b4:11:
                    3e:60:cb:91:92:d8:49:de:b6:25:43:dd:f7:2e:88:
                    c4:8f:e3:0e:8b:19:be:28:bc:4e:44:1e:26:64:83:
                    d4:ec:7d:38:1e:94:8e:38:c4:ed:28:69:07:a4:27:
                    49:78:1a:35:ea:86:58:9a:8e:43:b2:53:6f:3f:3f:
                    e9:09:f4:48:97:d5:c1:1a:27:c3:bf:14:90:df:fc:
                    4d:e6:88:21:38:9f:e2:8c:5e:d4:28:98:24:cc:10:
                    f0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CF:F8:CE:87:3D:3C:3B:FA:A0:66:30:D5:86:F7:16:07:33:B5:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/180fb14a-7f05-31e9-99bb-13a4086b648b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:6a:a3:fe:7f:ab:66:d3:22:a1:fe:bc:1b:b9:21:7c:b3:a4:
         d3:9e:ca:95:88:e6:cf:b7:5d:b9:f8:99:87:90:ca:97:57:95:
         33:e8:8d:05:43:f0:4e:9f:3f:f3:1b:3f:60:c1:21:b3:c2:d2:
         01:0f:51:2a:dd:8b:e5:96:6a:e8:6e:49:23:f1:66:53:28:de:
         e0:4f:b9:10:b3:f1:fb:d8:3e:ed:3a:3a:33:6a:d0:5e:8d:ec:
         e0:a9:e7:e4:da:d3:85:2f:07:85:4e:fa:20:10:6a:1b:91:49:
         79:18:f1:39:ed:8e:c1:4e:bd:2b:9a:11:fe:35:f4:80:45:a3:
         09:f2:45:61:e3:91:c2:99:35:ad:3e:d8:58:24:4a:87:22:be:
         4d:9c:1c:47:39:17:b4:f7:35:75:1f:93:45:18:d8:2e:9f:bd:
         de:c7:e7:4e:48:a0:d4:4a:03:e4:bb:a1:86:88:64:d0:14:f8:
         44:ea:43:3d:f9:53:8c:c6:40:51:47:2b:8a:3f:5a:3d:ed:7d:
         8a:77:9d:d4:3c:08:43:4d:25:87:39:9f:bb:95:44:a9:d9:a9:
         4f:c2:38:f7:27:ca:41:8d:cf:b1:bc:b4:4b:93:77:8d:29:5c:
         71:b3:4c:9b:ed:43:66:01:3e:fb:c4:b1:20:78:8c:17:64:c2:
         e6:da:4c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:19 2026 by rpki-client