Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47f04689-68f6-3769-82f6-758b4d20d4e3.roa
File:                     47f04689-68f6-3769-82f6-758b4d20d4e3.roa (raw, json)
Hash identifier:          FoSkTAYUGK94NRWmjU07awt2VmijC2+25yMhzPhakyk=
Subject key identifier:   E7:03:CC:92:72:A0:BD:6A:6F:FE:9A:C6:A3:34:39:13:6A:F3:0D:31
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D32F5B018027BFE6056B479B0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47f04689-68f6-3769-82f6-758b4d20d4e3.roa
Signing time:             Tue 17 Mar 2026 14:07:01 +0000
ROA not before:           Tue 17 Mar 2026 14:07:01 +0000
ROA not after:            Mon 15 Jun 2026 14:07:01 +0000
asID:                     397199
IP address blocks:        2620:74:2a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:32:f5:b0:18:02:7b:fe:60:56:b4:79:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 17 14:07:01 2026 GMT
            Not After : Jun 15 14:07:01 2026 GMT
        Subject: CN=e700ba69-18ff-412d-aebf-98ed18bdbb9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b1:43:54:aa:ec:cf:f6:bc:59:a0:53:a0:90:
                    28:13:82:b6:66:98:76:7e:2e:5f:d3:cd:30:30:94:
                    66:03:ab:84:ca:d9:2a:33:6a:15:1b:3f:94:d5:6a:
                    2e:11:ed:3b:1f:03:a3:59:73:be:ce:5d:c7:2a:1f:
                    4a:41:3a:b8:ab:e6:0d:70:76:50:b2:5f:f5:c2:5e:
                    38:fb:37:90:eb:35:44:c5:e3:00:86:62:1c:72:a6:
                    8d:c3:9f:0c:6f:28:36:1f:35:d6:72:c7:74:8d:80:
                    81:bb:74:d4:2c:56:14:66:9a:ec:35:8b:fc:b5:51:
                    34:25:44:ec:91:a9:98:e0:64:5c:b6:d1:90:ad:22:
                    7e:b2:7a:8b:cb:00:29:1b:12:24:2e:0e:12:2f:06:
                    2d:a1:da:d1:4c:d1:ed:04:ed:fe:7d:52:27:06:61:
                    94:07:f8:8c:62:1e:a8:69:4e:e1:ac:26:28:ff:ec:
                    a0:0b:b3:9d:a0:bc:83:2f:2b:c5:69:3b:66:99:68:
                    6a:2b:7b:de:a3:1e:8b:29:c4:60:e4:8e:86:7b:9b:
                    4d:b2:63:85:e5:59:9b:8b:6a:a3:56:c6:d7:da:d0:
                    8c:ea:df:3b:ad:e9:7a:ff:d0:5a:54:19:72:da:98:
                    ea:f0:f1:c6:46:c8:ac:76:24:0d:55:26:b4:51:9f:
                    83:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:03:CC:92:72:A0:BD:6A:6F:FE:9A:C6:A3:34:39:13:6A:F3:0D:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47f04689-68f6-3769-82f6-758b4d20d4e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:77:4c:35:85:e0:b5:26:3d:8a:9f:00:4c:44:e8:96:b2:4f:
         94:e5:7d:31:a6:16:1c:47:fc:33:85:5e:eb:53:15:c1:b5:93:
         e8:44:75:c9:61:18:89:3f:dc:e5:ad:b1:c1:4a:1f:f0:c1:ef:
         a2:2e:85:ea:e1:13:db:a1:5b:ab:a6:b1:01:4c:3f:5b:a4:42:
         52:a4:1d:88:ab:00:89:d1:99:81:25:f5:b9:3f:1a:b1:62:79:
         fd:2b:b5:f4:42:c0:49:e8:45:e7:46:27:46:ab:a3:20:81:c7:
         47:4d:4b:0f:19:8a:ec:83:04:ee:18:0c:3a:dd:c9:c2:65:c5:
         10:fc:02:32:55:b1:be:8e:1a:6e:b3:c1:85:50:74:61:e5:b9:
         ed:2b:22:f0:99:75:64:17:b5:77:bf:6b:d6:ac:b7:7a:a4:bc:
         60:b2:0b:d4:08:66:bb:f1:2e:91:c5:04:7f:86:f6:f8:51:d6:
         5a:37:15:5b:d6:d9:55:e0:51:e7:e4:4f:d6:49:f6:3d:e9:7a:
         29:59:90:e2:52:07:5a:30:7d:a7:df:0b:1d:d2:a1:e4:1c:d7:
         c6:25:ec:ab:cc:87:a3:ca:a7:d2:ff:c2:22:88:82:e8:f0:39:
         cd:a3:ed:bf:67:a7:fc:5f:15:a9:4f:f3:29:3b:56:dc:c2:c9:
         fc:ab:a6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:15:59 2026 by rpki-client