Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6d6829b5-52d8-3365-97cb-7ba26c07cdca.roa
File:                     6d6829b5-52d8-3365-97cb-7ba26c07cdca.roa (raw, json)
Hash identifier:          al8G0KYdPe0INqJxulbF5mtEO5P7YVq8FSQ1bJ3rXwQ=
Subject key identifier:   E8:50:48:CC:06:C1:90:85:A2:BA:83:A2:F4:60:AB:8E:49:E3:00:0E
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584FB67102D0A38BAE04DF0BF300
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6d6829b5-52d8-3365-97cb-7ba26c07cdca.roa
Signing time:             Tue 03 Nov 2026 02:00:13 +0000
ROA not before:           Tue 03 Nov 2026 02:00:13 +0000
ROA not after:            Mon 01 Feb 2027 02:00:13 +0000
asID:                     36629
IP address blocks:        2620:74:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b6:71:02:d0:a3:8b:ae:04:df:0b:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov  3 02:00:13 2026 GMT
            Not After : Feb  1 02:00:13 2027 GMT
        Subject: CN=0377085c-3e4c-4608-8fce-6116f35a299e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e9:af:c7:1c:a7:2c:9c:dd:55:92:c4:a9:81:
                    79:52:bb:15:a7:b8:a8:d5:9a:e1:f4:4a:3b:cd:cc:
                    9c:98:d1:59:81:f9:be:78:f7:aa:fa:4d:7b:56:c1:
                    b6:a3:a1:a2:e8:dc:9a:ed:c2:b8:d1:d3:19:77:1c:
                    53:16:d4:c9:bc:de:c4:f3:7d:90:24:9d:64:a4:85:
                    06:d0:cf:10:07:00:1b:4d:dd:e9:af:2d:72:ff:2b:
                    d2:24:7a:08:ae:57:1d:24:e3:dc:44:bb:7e:e8:c7:
                    6f:4e:d2:66:52:fc:bd:5a:dd:7f:90:cb:10:01:73:
                    e3:a3:1c:72:72:f5:cc:a4:75:3e:37:ae:e4:34:56:
                    96:81:75:b2:2b:98:12:c6:8f:01:44:e3:a8:43:59:
                    1c:c7:e8:41:85:1c:95:c9:0a:3e:2d:14:0a:21:10:
                    e5:b5:48:17:0b:33:d7:d9:22:53:27:9e:19:34:0c:
                    83:b7:fa:96:2e:94:2c:4d:69:8e:9d:e4:7c:bd:1d:
                    12:3c:ce:60:7e:51:61:3e:3d:06:11:07:c0:d9:b2:
                    56:4c:63:37:69:b0:90:37:a4:11:a6:ab:79:d6:f6:
                    9f:85:a2:ef:b5:5a:cb:0c:69:69:8d:9b:ff:1b:48:
                    91:05:05:32:47:db:c1:0b:3d:98:a8:bc:af:c5:ba:
                    8b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:50:48:CC:06:C1:90:85:A2:BA:83:A2:F4:60:AB:8E:49:E3:00:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6d6829b5-52d8-3365-97cb-7ba26c07cdca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:f8:3f:f7:f1:f6:1c:f7:3a:04:9a:c2:0f:e1:97:2e:ca:83:
         d9:fe:3f:35:71:2c:98:b6:f9:4a:9f:04:cc:03:36:1b:18:7b:
         24:98:73:e2:de:01:cd:8b:f5:e4:32:97:b7:fe:72:ad:93:8e:
         e8:97:70:90:99:43:51:77:93:30:ab:65:07:27:e1:f9:78:dd:
         55:f6:57:89:13:16:5e:0b:41:53:ff:0e:22:7e:0b:5f:3b:b1:
         b0:27:72:37:ec:1f:ce:2d:78:18:81:78:ce:43:01:8b:f8:42:
         42:04:b6:0f:c5:ed:b8:f3:fa:04:10:99:a3:11:41:e3:3c:3d:
         eb:e8:8c:1a:39:46:d6:9f:16:24:db:15:a0:a2:8d:7f:1f:d6:
         92:f4:c2:e5:c9:6f:06:3f:bc:f2:29:67:09:dc:b8:03:01:75:
         eb:49:71:40:a9:8f:f1:18:56:fb:f6:31:c8:55:2e:ed:29:c7:
         8c:a9:75:75:e9:aa:40:de:4e:a2:6c:dd:7b:9f:57:e4:98:64:
         9e:7c:f8:89:ac:f9:08:08:b4:02:d8:2b:51:8b:28:c4:36:35:
         f8:22:2e:4b:8a:4c:72:da:94:83:ae:7f:24:fe:79:5b:3f:f9:
         30:51:bb:ae:e5:fd:c2:c7:f6:e3:d4:81:72:3b:63:62:72:80:
         9f:ec:11:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:54:31 2026 by rpki-client