Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2732b99-6b89-3690-abb7-d8ebe4b91492.roa
File:                     a2732b99-6b89-3690-abb7-d8ebe4b91492.roa (raw, json)
Hash identifier:          DdScBip0REt4oUkWz0UnZm6mnLmyiqVhajWOiuB2VFo=
Subject key identifier:   14:90:BA:B6:BF:F1:D3:C5:A4:41:8C:13:DE:6A:DB:93:3C:10:DE:38
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584DC29AF8972592BD3E8212D000
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2732b99-6b89-3690-abb7-d8ebe4b91492.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     397207
IP address blocks:        2620:74:2c::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:f8:97:25:92:bd:3e:82:12:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=c09585e9-5459-4e24-a7e1-190e741c3a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:31:67:b6:48:9b:ac:ae:67:5c:ce:ff:46:04:
                    53:4a:30:43:f0:dc:2a:bd:65:32:59:e2:13:7d:1c:
                    34:0d:0b:7a:d9:c1:b1:88:79:16:11:a3:1b:23:dc:
                    17:f1:6e:b1:dc:40:d6:8a:1e:10:e6:49:b8:06:6a:
                    bb:bd:99:a0:fd:0a:94:f8:37:ed:6b:2e:fa:78:d7:
                    86:6e:7d:97:2f:f6:94:78:1a:bd:87:d1:42:a3:33:
                    3d:c5:61:e2:aa:6b:65:8d:59:19:70:dc:a5:5a:2a:
                    cd:e0:fa:97:0c:88:03:e0:57:4c:57:09:b4:c4:a2:
                    2b:16:80:7e:74:48:b6:58:42:68:e3:9f:35:63:72:
                    d9:67:82:22:c5:77:eb:de:ce:bb:ff:09:cc:6e:16:
                    cd:51:b1:ee:9e:4c:21:61:d9:5a:3e:c8:a3:30:87:
                    c9:eb:4e:bd:e4:a9:20:d0:c6:15:1d:c9:5b:a5:53:
                    b5:8f:16:3b:5e:61:2c:9e:1f:17:ad:0f:9b:a1:95:
                    04:84:66:72:56:e4:c5:cb:db:5e:f1:51:b5:94:52:
                    25:12:13:1e:42:02:c6:30:99:b8:97:e8:c6:31:99:
                    95:68:5c:31:f3:5b:f6:fe:0b:c1:70:cd:18:14:95:
                    f7:bc:de:3b:36:a6:e1:96:b0:24:92:69:7c:18:ed:
                    d5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:90:BA:B6:BF:F1:D3:C5:A4:41:8C:13:DE:6A:DB:93:3C:10:DE:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2732b99-6b89-3690-abb7-d8ebe4b91492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:e7:b6:fd:4e:87:f1:63:4a:ea:14:71:08:b8:2d:cc:18:59:
         2b:4a:99:43:ae:4f:87:ad:c9:21:89:97:3f:a7:eb:64:f3:32:
         47:18:3b:ed:5b:4e:7e:09:83:34:a6:43:03:a2:86:46:0b:3c:
         b5:ba:45:cc:46:09:5a:f6:c1:73:cf:46:bf:3c:d2:c4:b1:a0:
         5d:b7:08:f6:17:05:82:e9:9e:6a:b8:c9:a3:72:2c:87:bd:65:
         84:4e:21:03:60:d1:f2:14:7d:f6:59:4a:91:b6:ba:a3:66:d0:
         a3:64:2c:cd:20:3b:34:ee:2b:11:12:9e:4f:56:ae:01:ec:80:
         19:d3:d0:52:ad:5f:b8:b2:77:5c:62:3d:d4:5f:b2:0b:9c:66:
         f7:d3:8b:ef:bc:46:ee:8b:ea:07:9f:37:84:88:3b:96:1a:5e:
         f1:79:46:46:7c:6c:33:94:57:82:48:0a:28:2a:20:d9:84:01:
         83:49:3e:0c:20:24:f8:40:00:03:c1:a7:56:b7:24:cc:ee:49:
         c6:2f:ae:d6:d1:a2:48:40:50:72:60:48:69:21:3f:f0:d2:fd:
         4b:02:96:d9:c5:b0:12:0c:d4:38:ec:0d:64:3a:b1:16:da:07:
         51:fb:3f:ed:bd:42:e8:e7:9d:9c:52:55:be:ef:d2:ec:30:5a:
         db:f9:b9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:51:55 2026 by rpki-client