Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b6a982bb-d61e-34f3-bb81-71cc3e5ed574.roa
File:                     b6a982bb-d61e-34f3-bb81-71cc3e5ed574.roa (raw, json)
Hash identifier:          yWHBC5Z85/QXm9bGWC8XFUioAX7Ks3Juacjt27q32Jk=
Subject key identifier:   1A:05:C8:4E:D6:FD:6C:AB:7B:3D:E2:A3:44:A7:6C:59:C4:03:01:87
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D237A55738E90D98845E86860
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b6a982bb-d61e-34f3-bb81-71cc3e5ed574.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     396585
IP address blocks:        2620:74:2b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:55:73:8e:90:d9:88:45:e8:68:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=12aebf9f-6c8d-4a64-b255-c9cdd59edde9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b6:c6:5a:de:51:0c:f7:08:5f:2f:40:ae:74:
                    22:1d:16:47:ca:fa:58:4d:e1:04:41:cb:16:dc:e9:
                    ab:56:40:dd:f7:1f:31:01:93:31:8c:68:c1:42:b4:
                    01:be:fa:bf:7f:2a:5d:a3:3d:bb:08:a4:32:9d:39:
                    8f:d1:e4:8f:d4:81:8a:dc:04:ac:7b:66:4f:d7:6f:
                    9b:b9:46:62:7f:e7:0a:7d:1d:e3:ee:07:75:cc:3a:
                    11:38:a2:1c:1a:8b:f8:66:ee:87:5a:b9:a7:5a:52:
                    d4:cd:5f:61:95:b5:9f:61:69:9d:50:54:79:ff:b6:
                    c1:4b:a6:87:65:7e:35:c5:f5:34:29:44:41:ca:ce:
                    9d:17:20:88:20:2d:2f:dc:b3:a0:4f:b8:cf:49:74:
                    51:94:22:c1:5e:65:5f:e2:c3:60:a4:9f:a9:a7:ae:
                    22:88:5f:8e:12:50:fa:59:6c:58:d5:23:0d:93:0e:
                    6e:34:77:39:63:3f:0c:a7:53:8a:d8:72:54:f9:25:
                    ef:d5:6a:72:ad:c2:c9:eb:4b:2f:73:4c:4d:56:48:
                    2d:09:ed:38:dd:27:e6:ad:2b:c9:e7:13:3a:59:8f:
                    b8:96:aa:66:15:5b:99:8a:51:2c:33:75:ef:52:b2:
                    b9:4a:f3:1e:52:44:79:fd:93:e1:05:9e:98:52:0e:
                    5a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:05:C8:4E:D6:FD:6C:AB:7B:3D:E2:A3:44:A7:6C:59:C4:03:01:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b6a982bb-d61e-34f3-bb81-71cc3e5ed574.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:12:53:5f:d9:db:27:27:d8:84:e1:6b:77:45:ec:5c:49:03:
         ba:2e:cb:d7:ac:7a:e4:50:83:a2:fd:73:9f:e7:63:ef:ac:6f:
         52:cf:3f:1b:0d:62:e7:fc:00:f4:cc:1f:6f:f8:d6:ca:39:69:
         79:21:b2:4b:48:0f:34:77:fc:45:41:a7:70:f0:f2:ee:77:a6:
         bd:59:fd:bd:79:e8:3b:7a:b1:79:dd:f1:e1:4a:dd:5a:c0:c0:
         67:6f:10:ff:04:7d:70:ce:06:1e:4f:97:fd:94:52:c0:51:2f:
         d8:63:75:7e:bd:22:87:7e:13:cd:1b:bf:df:6c:77:48:32:a6:
         e7:f5:9f:a5:d7:10:9f:a6:0d:99:65:9e:9a:5b:5a:79:84:bc:
         d2:e4:9a:20:8d:85:16:21:11:71:d2:be:47:cf:4a:9b:da:20:
         56:86:8a:e0:1b:db:14:f8:a2:a1:c2:1d:21:bc:29:9a:08:76:
         bd:48:07:97:e9:a2:00:27:77:fa:13:00:fa:51:01:5a:9e:97:
         a8:c1:51:01:41:d7:c9:1c:3c:5a:6a:6d:b0:37:7a:1a:07:15:
         4f:2a:f8:95:38:8f:8d:67:87:07:dd:c1:d2:fd:0c:27:23:2b:
         b7:3d:2b:e9:cb:47:84:5e:f1:28:3a:4a:8e:29:37:09:8c:9c:
         0a:2e:b5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:38 2026 by rpki-client