Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36ab3d37-b07f-33af-a16a-e84078184ce5.roa
File:                     36ab3d37-b07f-33af-a16a-e84078184ce5.roa (raw, json)
Hash identifier:          quDhQmbon3HAkzjSf9daMAQjOxS3mldriui/CwFcaMw=
Subject key identifier:   D7:70:D9:23:DA:9A:4F:67:AC:C6:EA:AB:AD:F1:F6:AD:44:AF:A3:76
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584DC29AF8B1BB9C047FF266B000
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36ab3d37-b07f-33af-a16a-e84078184ce5.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     396827
IP address blocks:        2620:74:2c::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:f8:b1:bb:9c:04:7f:f2:66:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=e927dde6-b94c-4228-b3c9-48fec18b36da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:35:b3:8b:b1:b1:ba:c6:1e:b9:0f:ce:76:4a:
                    71:26:d3:cc:57:d1:14:ac:7d:54:00:59:ee:b4:94:
                    eb:73:ab:51:9c:af:70:53:84:2c:b4:d0:02:6f:e1:
                    69:c9:04:e1:e7:cc:79:4b:c4:42:98:b5:25:a9:88:
                    7e:93:47:3d:22:3f:f6:c6:da:c5:0d:df:2a:30:96:
                    12:05:8d:59:05:13:f1:ff:98:9f:1c:b2:77:cd:67:
                    dd:34:1b:04:41:3d:92:37:86:07:08:08:f6:c8:7f:
                    56:ee:cf:5d:c0:08:64:f8:c0:a4:ba:b6:c5:9b:59:
                    91:73:95:de:57:6c:9e:94:72:44:bf:d2:e4:f6:cb:
                    d4:33:27:70:7f:74:6b:22:d0:cd:a9:c0:bb:93:18:
                    99:5b:28:09:20:98:74:18:26:46:5b:38:11:d5:a8:
                    92:5e:2c:db:33:6d:c3:92:ae:52:b8:d4:3f:b9:1c:
                    8e:bc:53:4d:a1:72:38:92:ef:90:34:c1:7b:c2:56:
                    d0:1f:88:24:2d:ef:e8:c7:82:12:f2:ee:06:fb:2c:
                    70:02:84:89:5b:3a:49:a3:f4:d3:e9:33:84:f9:dc:
                    e2:4a:47:03:bc:16:21:01:b4:0a:19:48:e6:f1:52:
                    2e:16:65:e9:4f:ea:3f:2f:9b:9f:30:d2:f8:25:99:
                    af:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:70:D9:23:DA:9A:4F:67:AC:C6:EA:AB:AD:F1:F6:AD:44:AF:A3:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36ab3d37-b07f-33af-a16a-e84078184ce5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:58:c1:1b:97:87:c0:fe:45:c0:be:a9:f2:58:b3:21:96:b1:
         c1:13:9c:7e:a2:89:e3:6d:42:e2:76:79:7b:8d:14:e0:a1:ad:
         74:90:00:e3:f2:2c:b2:87:a0:e9:28:d3:e6:2e:c7:f7:4a:57:
         80:f2:a3:7e:ac:d1:da:7d:67:a7:a9:c3:5c:1c:b0:d3:63:1e:
         8a:b6:9f:ee:b4:0a:3f:0e:36:d1:0a:f1:a0:ce:d4:54:51:af:
         c5:b5:ef:58:06:67:14:00:12:f6:ae:73:b9:73:69:48:e0:35:
         74:ae:98:19:60:28:5a:5a:3d:ab:f0:da:0a:9a:f8:18:f2:75:
         00:44:21:6a:4a:6c:a5:4b:6a:1d:56:7d:86:df:a3:81:a1:95:
         bf:a7:63:b4:94:ba:49:0a:1c:84:d2:4c:47:37:1c:29:f6:f6:
         09:83:a6:4a:91:5c:e9:06:40:6b:4f:df:ce:f6:61:23:ff:04:
         3b:d4:3b:08:90:76:4a:4a:15:0b:54:76:6c:47:8c:0d:bf:5d:
         93:76:a6:39:61:d6:48:47:51:f8:5c:3a:2d:ad:4b:c9:a7:19:
         f5:d0:52:d8:9c:7a:38:3b:50:59:58:61:39:2e:21:4c:e3:4f:
         a8:52:3d:54:bf:f5:43:cb:11:54:32:bc:1b:6b:7f:d8:70:a9:
         7e:f1:2d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:29:11 2026 by rpki-client