Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/979cbab7-d936-3213-816d-70886ae0c12b.roa
File:                     979cbab7-d936-3213-816d-70886ae0c12b.roa (raw, json)
Hash identifier:          4ZmR078q8g3j/EnYboRFdVSZjjFqcdvBPF02Zf1ioiY=
Subject key identifier:   F2:F6:1E:9B:E3:7B:C9:0D:6C:5D:B5:64:71:19:3D:13:88:1F:18:2D
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D32F5AFF29EDE92DB9B387B80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/979cbab7-d936-3213-816d-70886ae0c12b.roa
Signing time:             Tue 17 Mar 2026 14:07:01 +0000
ROA not before:           Tue 17 Mar 2026 14:07:01 +0000
ROA not after:            Mon 15 Jun 2026 14:07:01 +0000
asID:                     36627
IP address blocks:        2620:74:2a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:32:f5:af:f2:9e:de:92:db:9b:38:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 17 14:07:01 2026 GMT
            Not After : Jun 15 14:07:01 2026 GMT
        Subject: CN=47655d4a-2927-44a8-bf65-0a52ce725b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a8:6e:74:fd:f4:b5:95:ab:27:ae:cd:52:01:
                    e7:1b:6f:f6:e3:19:7c:5b:2d:c1:21:84:6f:06:95:
                    f5:86:e0:ff:dd:58:59:ef:e9:1d:92:24:b5:8e:41:
                    a7:32:c9:ec:a1:61:01:10:f4:76:d3:b8:5f:80:14:
                    df:a8:05:16:3e:67:e6:8d:db:51:b6:56:6d:35:0c:
                    5c:50:c6:a5:79:a3:ba:fe:69:5a:b3:65:1d:74:7e:
                    f8:6b:28:3f:48:f2:d6:65:35:40:8e:c4:05:62:42:
                    be:95:b4:dd:c1:82:a1:60:db:b1:de:e4:14:dd:c6:
                    a4:e1:02:76:f6:f9:5a:7a:d8:77:61:c5:d2:9b:3e:
                    ee:f3:3a:d1:fa:39:f9:1c:14:50:b9:52:42:40:6d:
                    c6:f8:a1:dc:5c:55:9c:04:15:00:e8:ab:f7:1c:c6:
                    86:06:7c:64:48:59:01:f5:ee:c1:27:9b:22:2f:34:
                    30:89:90:bf:f9:1b:06:f1:f4:35:bf:19:15:b6:d3:
                    b5:7f:9a:b1:3d:f3:c4:d5:10:6f:90:a4:8a:2c:5b:
                    e8:cf:0a:a3:58:39:e1:8b:69:27:53:12:b0:e7:1e:
                    cf:db:d6:ab:3e:6b:e7:d4:19:54:7a:60:bf:2d:ca:
                    c9:fc:e0:2c:d2:9e:ec:50:c5:b3:ca:48:4b:20:39:
                    0b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F6:1E:9B:E3:7B:C9:0D:6C:5D:B5:64:71:19:3D:13:88:1F:18:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/979cbab7-d936-3213-816d-70886ae0c12b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:6d:d2:2d:0c:f5:b1:81:c8:20:a1:b2:33:52:41:48:6e:7c:
         97:16:9f:92:f2:ca:4f:25:73:e7:2f:29:5f:3a:88:5a:f3:95:
         e3:91:cd:5f:fc:74:e2:65:38:25:78:4b:c1:c9:a6:de:15:4e:
         dd:3c:12:2b:6f:8a:d6:1a:d8:6e:5b:26:d3:19:35:6a:09:c8:
         00:f0:f1:9b:d0:82:46:d8:a0:b8:9b:fa:83:87:7d:71:a2:15:
         2c:ff:18:ea:aa:01:ea:79:e6:db:f0:06:63:43:83:2c:c9:74:
         6a:03:eb:72:f8:88:98:33:a9:93:67:20:33:b5:e2:17:3a:ab:
         6c:4b:40:4b:96:8d:9f:97:a0:df:47:49:7a:40:22:8a:86:5e:
         07:4b:fb:c6:b9:32:ae:f2:52:58:63:6e:93:b6:f4:27:16:17:
         87:7c:c9:c3:6f:8d:32:3e:5d:b1:14:71:38:5e:b6:11:83:da:
         a3:6f:55:08:de:19:28:ed:dc:f0:3a:9c:b4:16:bf:bc:e0:24:
         37:6c:d2:f0:6b:c5:f2:17:49:21:1e:9a:47:f1:9c:12:d9:3a:
         d6:72:85:6d:58:fa:a9:75:1c:10:d0:31:d8:ba:9f:7a:34:6d:
         f0:73:db:32:25:09:ac:bf:bf:cf:af:57:07:5e:d1:ed:ec:c4:
         f1:8d:1c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:10:15 2026 by rpki-client