Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b50c4ed4-cfe0-3337-90b8-faeae6c840b1.roa
File:                     b50c4ed4-cfe0-3337-90b8-faeae6c840b1.roa (raw, json)
Hash identifier:          5biX7xtERpqUp5qmXaBuQ7yocXOqIY4v3ZnZKqW+Duo=
Subject key identifier:   83:C2:59:5D:11:CB:DF:63:31:8A:A3:FE:B6:CF:25:17:0C:28:A7:BF
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D237A1E6122C2460D4593CF40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b50c4ed4-cfe0-3337-90b8-faeae6c840b1.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     396606
IP address blocks:        2620:74:2b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:1e:61:22:c2:46:0d:45:93:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=a8946053-0914-47e6-b8b6-b280f0c41587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:72:f1:1a:1a:d5:02:28:b7:2c:86:47:25:88:
                    d4:1c:1d:ee:41:4b:57:21:5f:2a:67:54:77:71:f5:
                    10:b5:82:aa:d4:ae:c4:2d:e8:57:ab:a6:c4:6a:77:
                    b9:f3:a8:f5:d1:fe:d9:73:69:fa:5e:19:23:ba:ef:
                    9e:48:ac:28:9b:8b:8a:b5:9b:3e:b9:0b:36:64:70:
                    28:2a:6c:a0:e8:82:ea:c9:c0:e2:a4:2b:1b:3d:7c:
                    b1:bc:27:15:2e:db:93:72:ed:3b:68:2b:10:e1:5e:
                    97:9e:1e:af:d4:64:93:c1:73:26:80:3f:0f:8f:5f:
                    59:81:0f:5e:f8:1e:82:d9:64:02:e2:5d:82:f9:1c:
                    1e:90:35:85:9a:46:f9:1c:7a:7d:98:8e:46:66:c2:
                    18:23:73:8d:43:f8:c3:53:b6:7d:d0:6e:3b:eb:68:
                    f6:e9:b4:e8:65:82:27:5e:0e:04:86:9b:60:00:8e:
                    92:ee:db:c2:b4:47:11:16:9a:57:d3:61:ea:c6:a4:
                    28:ac:17:5d:ed:7e:a1:60:1a:da:78:6a:83:78:9d:
                    52:0b:83:00:93:1a:97:ad:aa:24:94:51:0a:b0:31:
                    a0:78:fc:17:7f:0c:70:6a:87:a8:b3:6b:7b:7f:2c:
                    28:ff:26:88:59:01:ac:a9:53:1d:23:08:d2:21:69:
                    53:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C2:59:5D:11:CB:DF:63:31:8A:A3:FE:B6:CF:25:17:0C:28:A7:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b50c4ed4-cfe0-3337-90b8-faeae6c840b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:4b:ec:d1:03:98:21:53:3d:3a:96:8c:4a:4c:69:1c:3f:cf:
         e1:4f:d2:bf:c8:8a:25:2f:69:28:0d:da:d1:a8:a5:67:93:3c:
         24:c7:3c:49:ba:dd:59:06:e1:0f:20:c1:e9:25:10:5f:79:0a:
         cc:9e:a9:94:f8:86:3d:f7:80:c0:22:38:67:74:2f:78:94:08:
         67:64:cb:7c:db:86:18:bb:4c:78:14:14:92:cd:e0:79:1e:34:
         7e:62:55:6e:ee:61:be:8a:6e:74:34:19:c3:1a:d0:0a:71:42:
         6a:00:48:88:ff:f5:8d:53:7c:b7:cb:b8:0d:2d:b2:7c:3a:c4:
         c3:d7:c0:c8:90:3a:27:32:ef:bc:88:96:a3:c3:88:9d:87:84:
         1b:8c:23:1f:62:a5:c3:de:68:d9:50:f4:8c:fd:b1:06:56:f9:
         eb:13:83:d7:5d:70:8e:29:c3:87:d2:0a:07:2b:90:53:c2:5a:
         11:2a:84:07:48:0c:a2:4b:2e:bc:e5:3b:7a:21:71:27:92:07:
         79:69:8f:0a:79:38:64:75:52:a2:cf:8b:4a:b9:ce:87:2c:9f:
         ce:5c:3c:b9:71:73:fb:9f:a1:de:9c:04:9f:6a:49:99:6e:38:
         0b:12:05:5c:99:05:18:3f:58:b0:a4:20:ef:ac:88:67:70:55:
         15:f8:15:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:46:48 2026 by rpki-client