Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/626e1ed9-d4ba-3bf3-bb08-84e104ccd69c.roa
File:                     626e1ed9-d4ba-3bf3-bb08-84e104ccd69c.roa (raw, json)
Hash identifier:          S4tJO0KF8Icn29ZF1xX3r7r8t80lsosx/YjPDj6/lGs=
Subject key identifier:   3F:6D:2A:BB:61:97:BD:9A:72:74:4F:F9:B0:4B:83:5E:A0:FB:FA:C8
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F6F46772D815891954871A380
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/626e1ed9-d4ba-3bf3-bb08-84e104ccd69c.roa
Signing time:             Thu 08 Oct 2026 14:12:09 +0000
ROA not before:           Thu 08 Oct 2026 14:12:09 +0000
ROA not after:            Wed 06 Jan 2027 15:12:09 +0000
asID:                     30060
IP address blocks:        2620:74:ea::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:46:77:2d:81:58:91:95:48:71:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  8 14:12:09 2026 GMT
            Not After : Jan  6 15:12:09 2027 GMT
        Subject: CN=a081957a-d646-4c02-ab1d-3e14cb9c0932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:65:79:95:2f:2b:c5:94:d6:18:5e:fa:4a:dd:
                    c1:64:e3:ac:a2:e3:6c:16:be:95:df:83:96:67:d1:
                    34:e1:68:01:39:1f:46:0c:f5:b0:03:95:22:f6:fd:
                    ba:0d:ff:fa:c2:60:ec:79:c7:2c:83:51:a7:f9:09:
                    43:d4:49:ad:41:84:ec:72:15:cd:c4:18:45:3c:86:
                    2d:cf:53:62:27:b2:8a:1f:33:c5:b9:3d:77:cf:63:
                    b9:e7:c9:01:99:2e:66:18:a2:13:a1:fb:10:5d:26:
                    84:77:7e:fe:c5:77:77:85:09:75:33:c6:00:0c:17:
                    22:3b:4e:ac:d0:0d:38:20:e7:04:36:fc:c5:33:3b:
                    39:d4:9b:4b:06:22:c6:4e:ea:8e:cc:cb:29:13:09:
                    e9:dc:2f:52:81:c1:69:b7:18:03:02:d6:08:eb:6b:
                    d8:40:b4:5c:a4:9a:32:9a:9c:65:30:90:9b:0a:6d:
                    fc:3e:c6:81:0d:de:08:7a:a7:71:66:77:1f:f6:e0:
                    e4:bd:41:c2:62:5c:bd:f9:59:34:b0:55:d1:13:2f:
                    c8:da:a5:22:d8:df:84:0d:37:aa:b5:14:71:a0:dd:
                    1f:96:d7:68:d9:c0:38:cc:82:00:2b:30:fc:b8:94:
                    47:75:3c:f2:28:86:0f:b8:1e:82:a4:56:cf:a2:f1:
                    a1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:6D:2A:BB:61:97:BD:9A:72:74:4F:F9:B0:4B:83:5E:A0:FB:FA:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/626e1ed9-d4ba-3bf3-bb08-84e104ccd69c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:ea::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:65:8f:82:68:56:54:63:fe:4b:07:bd:a6:a7:23:a8:4b:94:
         4e:03:bc:87:e9:70:eb:b3:ad:88:ad:31:f7:c3:5c:93:3a:a5:
         a0:31:07:10:a1:38:66:3f:86:2e:bc:02:33:33:89:fb:ee:c7:
         15:30:60:13:c9:db:2c:c8:3d:3d:92:da:d6:5e:e6:26:46:3b:
         dd:5d:cb:80:29:fd:d5:56:de:6f:e7:f8:0a:f1:c8:c0:0a:e2:
         a4:e2:52:da:68:f9:e8:14:e8:ad:16:c4:ea:da:42:0c:3f:ce:
         e9:39:c3:17:ed:37:9b:6d:e3:85:e4:90:f8:d1:8a:e4:0e:cd:
         01:a8:4d:14:63:e7:f1:d4:d3:a8:46:39:8f:c7:fb:6f:e1:55:
         3b:2a:12:18:67:d7:2d:cc:2f:36:3b:98:10:fa:fd:6c:d7:98:
         95:a1:00:f2:95:01:21:85:54:8b:61:8f:7f:8b:a5:54:8b:43:
         3b:34:93:a3:7e:fa:13:dc:ff:5e:4c:43:e6:03:fc:74:47:95:
         34:54:52:77:b6:de:94:c1:fa:7d:65:97:f2:0f:48:8b:cf:24:
         fa:57:f2:b5:5f:17:a5:8a:d1:fe:f0:c2:ac:13:26:9f:28:81:
         03:6c:91:2e:39:cc:b9:a4:f4:c5:e4:fe:71:a1:19:df:9f:5b:
         d3:d4:9b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:10:09 2026 by rpki-client