Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29d3f06c-490b-3100-8cb2-1f58adaa91a5.roa
File:                     29d3f06c-490b-3100-8cb2-1f58adaa91a5.roa (raw, json)
Hash identifier:          kG5hXLyILowtiN3v28FkG+uDo22xlTF4oqYAFYr2sKQ=
Subject key identifier:   DC:32:72:1E:C0:E3:AB:D0:99:41:FA:71:F6:C5:6B:4D:20:05:0D:7B
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F49737CAC496AE9708031F3A0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29d3f06c-490b-3100-8cb2-1f58adaa91a5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396562
IP address blocks:        2620:74:2b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:7c:ac:49:6a:e9:70:80:31:f3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=695a9ddf-0e3e-487b-b76b-b5be99436fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7b:ee:d9:87:66:36:75:c2:55:66:7a:82:d4:
                    ba:66:aa:ce:db:a8:b3:b9:68:cb:97:2b:4c:5e:13:
                    80:f1:c5:35:ad:f4:0b:ad:e7:7a:79:ea:d8:f1:e4:
                    c1:00:68:fa:d3:48:6e:84:ed:a4:2f:bc:91:13:aa:
                    6c:14:19:d2:9c:fc:18:24:c0:cd:c0:06:6c:78:28:
                    43:1e:c5:c5:36:b3:36:05:8c:9c:85:12:52:a1:e3:
                    cb:f1:54:21:c0:d6:a6:36:0e:0a:c6:36:01:5f:0d:
                    13:8b:75:ec:de:bd:4a:6c:a5:23:b8:94:a6:fa:d6:
                    4e:52:30:43:d9:2a:1e:2a:36:95:9a:13:c2:43:8d:
                    de:35:b5:93:29:72:d6:8a:0a:e6:d4:4c:20:af:23:
                    f7:25:fc:8f:2f:72:60:1d:de:9a:f8:51:99:aa:aa:
                    28:d8:ba:32:84:d3:f2:86:f5:59:03:c3:42:f4:f7:
                    da:52:8e:a5:61:a0:cc:f2:2d:5e:50:c0:81:13:2f:
                    6d:09:d4:88:d9:e4:c8:c6:40:e1:e9:9c:62:d7:23:
                    96:03:51:39:a9:46:c1:c2:14:d9:78:f7:30:8a:09:
                    f5:29:46:2b:6c:21:79:53:c6:16:de:d4:e1:77:a7:
                    44:f3:ed:1e:6d:f0:c1:e1:fd:54:2c:54:ea:f0:47:
                    4a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:32:72:1E:C0:E3:AB:D0:99:41:FA:71:F6:C5:6B:4D:20:05:0D:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29d3f06c-490b-3100-8cb2-1f58adaa91a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:17:11:0e:a6:13:05:62:97:c0:6d:38:7f:3a:c9:54:69:8e:
         e6:31:83:6d:09:0b:23:11:3c:e1:71:c3:87:32:48:0e:02:df:
         ac:a9:6a:f3:6c:77:b8:17:71:54:99:0c:85:f4:81:28:65:59:
         06:74:28:ce:74:2c:c6:b5:db:d4:17:7c:55:c1:f7:8a:20:d6:
         fa:a4:58:10:bd:70:a2:6f:ff:bb:a7:4c:1d:b8:60:21:8d:94:
         66:22:92:7f:82:fe:09:d8:1a:4e:0b:98:d8:0e:03:91:ab:5b:
         3c:74:5e:4c:23:e3:07:86:a1:71:f5:b3:6a:f7:58:62:89:0d:
         3a:73:b1:18:62:e8:b6:1c:3c:d4:9b:da:7c:ab:c0:79:5f:09:
         0d:32:3d:a6:bb:d8:f3:77:ab:c2:c9:b0:e7:8a:d0:32:9b:99:
         ed:45:9e:63:d4:5a:4e:d7:bc:c8:f1:8d:d7:5f:81:56:ef:26:
         eb:20:b0:ca:89:fd:91:98:68:25:63:6d:b8:89:5b:22:93:d3:
         d9:3f:24:61:0e:84:92:df:57:6e:94:11:c8:ae:08:21:e9:ce:
         d4:ad:a0:4e:db:70:12:ab:7f:cc:78:1c:07:01:d6:43:3b:fa:
         39:a7:d7:61:e1:cb:00:14:d1:cc:3a:dc:90:03:61:f0:ba:75:
         26:78:50:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:52:10 2026 by rpki-client