Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb2cd4eb-6f17-39ec-9542-3a195e4b7136.roa
File:                     bb2cd4eb-6f17-39ec-9542-3a195e4b7136.roa (raw, json)
Hash identifier:          PuKBHcWBMZ1R67VXtxvz2cEbj8YRwDLPl1wRIAE2h3c=
Subject key identifier:   90:6D:1D:F4:3A:0D:78:10:4F:EE:B6:C1:09:7D:EA:8B:3A:4F:EC:88
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584DBBC1EE95D4A2B00F475EB600
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb2cd4eb-6f17-39ec-9542-3a195e4b7136.roa
Signing time:             Tue 05 May 2026 14:08:29 +0000
ROA not before:           Tue 05 May 2026 14:08:29 +0000
ROA not after:            Mon 03 Aug 2026 14:08:29 +0000
asID:                     16838
IP address blocks:        2620:74:1e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:c1:ee:95:d4:a2:b0:0f:47:5e:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May  5 14:08:29 2026 GMT
            Not After : Aug  3 14:08:29 2026 GMT
        Subject: CN=6b6dae55-a3e6-418f-bfac-77f3cdd3ed72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bf:05:46:d1:75:ad:a7:8f:a8:2d:f9:d6:c7:
                    aa:22:97:ac:67:04:32:33:3d:23:4a:e9:31:29:53:
                    dd:a2:c4:dc:37:bc:e1:4a:0f:b2:a4:fd:47:e8:76:
                    84:60:69:ff:31:d4:da:0e:82:78:b8:4e:88:96:5d:
                    db:89:13:bd:c3:02:0d:0f:01:fe:e9:47:ec:2d:19:
                    4e:5b:cf:f4:7d:74:11:c7:78:05:90:3e:16:03:ff:
                    41:4f:8d:4c:44:da:5b:9a:dc:bd:fb:48:64:14:05:
                    03:7f:af:fc:9b:a7:26:4f:d7:3b:60:7a:fc:8f:90:
                    ef:b0:b7:17:14:4b:55:ce:9d:fc:72:83:21:71:6f:
                    20:fd:17:ae:c0:0d:18:e4:f8:66:10:62:c3:ad:2e:
                    66:b6:0b:d5:15:fa:62:93:36:19:4c:ae:f3:1a:b0:
                    de:d4:1e:72:54:7d:f5:06:d7:df:df:32:61:26:54:
                    de:9b:97:43:23:76:96:df:be:b8:cc:d2:80:b4:7b:
                    c0:c3:b9:03:26:3a:19:9d:32:9a:f2:a3:3c:3e:bc:
                    ef:69:2a:41:ed:54:78:37:27:72:fa:d1:b4:e6:74:
                    3f:d3:a1:49:ab:b2:3b:b1:10:0f:16:3d:c4:01:6c:
                    18:68:25:a1:00:03:c2:3d:f1:79:9e:ce:ac:52:ac:
                    84:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6D:1D:F4:3A:0D:78:10:4F:EE:B6:C1:09:7D:EA:8B:3A:4F:EC:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb2cd4eb-6f17-39ec-9542-3a195e4b7136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:1e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:1a:2b:14:0b:e3:36:22:63:72:74:44:47:4a:8e:5f:cd:e0:
         8c:d0:48:52:58:38:1e:bf:34:d8:14:c7:6c:b6:d0:35:69:3d:
         ca:7d:d3:9a:ea:d8:3c:8a:7f:6b:65:55:dc:8f:b4:ac:4b:37:
         34:4b:20:8b:3a:50:b3:a9:61:6d:c0:00:fd:e9:ff:a1:73:d5:
         ea:22:56:86:f2:fa:c5:14:11:16:67:7b:aa:52:72:0d:b8:fe:
         61:5f:d2:c9:16:ac:22:fb:23:6f:95:da:c7:e8:de:b5:50:e1:
         31:bb:a6:07:4a:1c:3e:11:dc:5b:3d:07:3c:6f:15:de:c4:71:
         f4:9a:51:77:31:09:31:14:b0:66:55:49:01:f2:a7:39:b7:0d:
         c5:a9:d6:8c:9d:3a:eb:93:e5:7d:02:11:cd:51:30:8b:c7:59:
         46:e7:20:41:43:52:56:ef:6c:1c:5b:64:c2:e8:8c:38:b3:92:
         5d:e0:b5:e9:de:87:91:d2:6e:28:41:38:40:25:36:9d:8b:ad:
         de:d4:7d:4f:12:1d:12:63:9f:e5:33:12:65:18:e6:21:04:3e:
         82:2e:db:29:4b:3e:fa:2b:a5:40:a7:57:23:78:27:47:f3:01:
         89:aa:80:27:bf:2a:51:c6:56:b6:e0:10:e4:87:8a:c3:d7:7d:
         36:e6:93:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:20 2026 by rpki-client