Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ad765078-6afa-3cc9-a363-86ffbc12dd8b.roa
File:                     ad765078-6afa-3cc9-a363-86ffbc12dd8b.roa (raw, json)
Hash identifier:          PbVivtmQJXRaPeZ6zMne5C+JIL/hd1vHgSXUuUIcVcY=
Subject key identifier:   1B:6A:28:7E:F4:F0:13:33:C6:8B:2C:64:27:E3:C4:EE:54:B0:D4:5B
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D91C019BA41144BACCB9ACA80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ad765078-6afa-3cc9-a363-86ffbc12dd8b.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     397210
IP address blocks:        2620:74:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:19:ba:41:14:4b:ac:cb:9a:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=aa3ad38c-23a5-4238-a801-8dd07f975af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:be:9d:13:8e:81:f5:3a:65:8a:09:26:12:c5:
                    7f:94:67:bc:c8:76:92:e8:15:87:6d:2b:26:fc:2d:
                    09:09:ce:30:63:75:80:5e:d0:01:68:89:fa:59:4c:
                    e5:23:e6:b8:ac:1b:70:df:47:69:7e:b6:e1:db:a2:
                    5f:ca:46:32:f0:b4:f2:76:73:d8:e4:86:23:0e:bc:
                    ea:76:44:22:83:77:a6:06:72:54:e1:18:6a:9d:6a:
                    fc:80:5f:30:d5:cd:e1:8c:63:eb:6d:3d:41:b8:b3:
                    1b:f8:b6:f4:b9:97:1d:33:d9:8f:5f:75:f8:18:6e:
                    1c:62:e0:51:82:71:a4:e0:01:d6:60:0e:8e:05:e9:
                    89:e1:ec:5c:a9:b3:1c:5e:f2:54:f9:d6:68:ce:41:
                    1e:08:43:d9:fa:9c:97:f5:5f:3c:37:1b:02:5a:21:
                    e0:7c:b0:2d:52:a2:d5:9c:e6:7f:b8:43:c0:7f:27:
                    04:7a:81:2e:64:17:ea:e1:ee:f7:0d:fc:2a:c5:8a:
                    fb:06:f5:ef:2c:61:62:e0:f0:fb:64:fe:64:46:6a:
                    78:0d:ae:e5:7e:99:19:1a:4a:73:6e:ea:1c:68:68:
                    00:3a:91:22:28:59:b0:1e:b2:95:e7:aa:eb:c4:89:
                    6f:b6:ef:cc:c0:9a:96:85:5d:75:b8:03:6a:8a:78:
                    3e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6A:28:7E:F4:F0:13:33:C6:8B:2C:64:27:E3:C4:EE:54:B0:D4:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ad765078-6afa-3cc9-a363-86ffbc12dd8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:c0:ae:1b:f7:a5:6d:99:b1:d8:6f:8f:72:51:1f:8e:dc:2f:
         f1:fa:f8:81:aa:3c:07:15:30:8a:4f:90:16:a0:38:ab:68:88:
         c6:29:51:91:56:54:68:de:5c:c2:32:6d:29:88:a7:f9:ac:23:
         85:a2:58:34:5e:e8:64:43:95:b4:5a:1c:51:89:61:94:8e:e3:
         f4:e8:cf:66:6f:e6:78:fa:2e:9b:b5:36:db:3f:63:37:69:90:
         06:4f:67:fe:2c:fb:95:9b:be:71:42:22:09:7e:c8:03:47:96:
         bb:0a:94:60:c0:1b:3a:3c:af:d2:41:71:5d:dd:ec:23:f7:f8:
         3e:4f:fd:56:13:98:36:f8:b9:6d:75:be:da:ed:eb:d2:ba:ce:
         2b:f7:3c:1b:eb:7e:76:c3:09:2b:f7:59:10:3c:29:71:50:65:
         6e:07:3f:35:c6:d0:d0:95:69:17:4d:ed:d2:6c:cd:a2:8c:5d:
         0a:cf:bc:1f:6b:91:b2:5c:a6:29:2e:7c:3a:50:ae:c8:97:f4:
         84:b7:40:3c:2b:a6:9e:62:59:6c:07:ac:43:91:c2:34:8c:3f:
         1a:28:22:02:bf:53:96:0b:6e:ba:23:62:36:5c:11:84:e1:92:
         ad:61:ca:4c:67:fc:0d:2d:2a:ee:a3:b9:1a:91:14:a5:2b:3b:
         c3:a6:0c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:39:45 2026 by rpki-client