Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cbd8546d-0b75-3ab3-8b8a-32f1d856e7f0.roa
File:                     cbd8546d-0b75-3ab3-8b8a-32f1d856e7f0.roa (raw, json)
Hash identifier:          WpNAWyB10u4Gx8N9MQ++hQ89Zbc3pbsgVWOaCZXHG/c=
Subject key identifier:   9D:43:3F:31:1B:BC:33:D7:6F:96:A4:84:87:0D:1B:35:B9:77:7D:F1
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D300A8325CF767FA62ADAFA00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cbd8546d-0b75-3ab3-8b8a-32f1d856e7f0.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     20431
IP address blocks:        2620:74:2b::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:83:25:cf:76:7f:a6:2a:da:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=cd6bd1f2-159d-4ab6-a065-c3e4a10c7d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6f:99:35:44:46:6d:19:79:15:0f:2a:cd:36:
                    66:f6:94:1e:15:76:03:48:43:9c:4f:10:33:04:2e:
                    37:6b:c9:30:cd:e4:63:7a:fe:9f:d2:64:27:56:da:
                    f3:fc:99:8f:ad:8e:a8:b1:90:c9:82:67:d7:a5:7c:
                    36:f4:22:63:6d:97:11:d4:80:38:9a:c5:66:eb:69:
                    bd:b2:be:c0:62:a8:9c:df:5c:84:73:95:be:25:59:
                    69:fa:06:76:b8:46:09:74:27:31:b2:c8:cd:b6:99:
                    a3:35:e2:ae:d6:2a:f4:b8:66:88:44:f3:28:93:bc:
                    af:08:83:c4:42:b3:95:c1:12:40:58:aa:3f:ed:8f:
                    3e:21:c5:bd:97:b6:91:ad:4b:72:d7:9c:55:98:14:
                    38:36:32:64:eb:00:b4:52:f2:8b:44:73:03:d0:56:
                    76:12:d8:5f:ab:22:99:66:7f:45:e7:60:be:3b:de:
                    0d:61:a1:66:da:22:a7:00:78:a1:36:dc:dc:c6:1f:
                    1a:a2:94:ba:12:4e:f5:f3:2c:73:6f:3a:19:4f:a0:
                    3e:f7:29:2a:45:f8:49:6b:82:9a:2c:4c:9a:99:13:
                    98:06:17:4f:43:48:9a:f7:34:e7:fe:ce:f9:78:4e:
                    a8:44:12:d7:56:9b:7b:c4:fa:1a:58:e2:3c:60:ca:
                    8c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:43:3F:31:1B:BC:33:D7:6F:96:A4:84:87:0D:1B:35:B9:77:7D:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cbd8546d-0b75-3ab3-8b8a-32f1d856e7f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:fb:66:58:34:62:e2:18:f8:ba:92:86:9b:30:22:78:63:7c:
         1f:d2:ce:06:27:cc:f5:92:73:7a:57:b1:26:44:bd:b0:67:15:
         c7:4c:aa:97:0c:b8:46:50:a2:7f:71:8d:51:4a:a7:8a:f3:39:
         f0:62:1b:d9:60:13:35:f8:f4:fb:ea:b5:d5:67:c3:91:ff:de:
         40:f0:fd:0d:1d:a4:ef:39:fd:cc:35:5c:e0:72:12:c0:01:de:
         7d:9b:c5:d3:f4:04:d4:ad:c8:34:67:6c:26:28:3b:aa:1b:a2:
         9e:48:32:77:f4:cb:77:f9:e1:a9:30:2b:22:bf:70:85:27:21:
         bb:66:a9:d5:0c:94:ce:11:7d:ed:96:15:cd:2e:fa:93:0c:af:
         36:f7:d9:b0:88:44:82:99:a9:67:45:bd:ba:46:f6:4d:6f:39:
         1b:c5:5f:8b:22:9c:22:e0:93:0b:89:d4:53:03:6c:56:aa:26:
         f0:a5:71:79:a8:80:42:8b:91:de:71:fd:c2:78:e2:0c:5a:c2:
         d4:ed:88:a2:60:db:c8:8d:ae:79:d4:b9:f0:3b:06:a4:62:f2:
         72:8f:70:84:03:44:cc:83:7e:b6:62:46:28:39:27:ce:f5:08:
         b3:c7:cd:ee:92:1b:91:a7:33:9c:d5:54:bf:98:10:e5:3f:09:
         be:0c:2d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:24:37 2026 by rpki-client