Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dc7fb0d9-5156-38a1-a545-728baab0d293.roa
File:                     dc7fb0d9-5156-38a1-a545-728baab0d293.roa (raw, json)
Hash identifier:          D1WSOqvVkpxQchE/wZXXayhYdGHOoYGf4SvAF+hLG/w=
Subject key identifier:   42:CD:0A:94:9E:8C:B9:98:1F:6C:37:A3:6A:E7:8C:A4:85:B0:E3:8C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E5BAF5C446E8EDD006115F560
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dc7fb0d9-5156-38a1-a545-728baab0d293.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     397206
IP address blocks:        2620:74:20::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:5c:44:6e:8e:dd:00:61:15:f5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=292cee8b-3762-41cf-882b-7268b6414927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:27:c4:35:48:3e:61:c9:f8:9f:fd:92:60:2a:
                    05:c5:e5:58:7e:ee:0c:2c:ae:02:8f:0d:b7:27:57:
                    3a:61:db:44:d2:8f:31:c2:ea:26:6e:9e:3b:b9:f6:
                    f5:ba:06:1e:92:86:60:01:86:18:7f:81:ab:20:17:
                    3e:7b:b2:9c:b5:7d:3b:03:7f:55:62:33:6b:81:59:
                    b4:a5:cd:31:88:53:01:84:9f:30:3b:5f:31:ea:48:
                    f5:ab:da:db:2c:89:ac:24:8a:ec:be:48:33:6d:54:
                    d8:d1:6f:87:f4:8a:a6:9b:30:ee:59:20:c4:cf:65:
                    79:88:9a:43:1d:3c:80:f8:60:3c:ab:7f:81:fe:85:
                    39:de:f3:29:1c:98:22:e1:35:3f:f3:ed:80:f0:f3:
                    9f:c4:fb:cc:7c:55:25:69:6a:2c:2f:0e:ac:4b:3a:
                    8f:fc:ad:45:a4:25:f2:45:4f:98:01:8b:1e:86:e9:
                    06:ae:02:46:ad:9b:26:0a:97:96:2e:96:1c:16:3c:
                    df:a7:ba:50:63:b4:50:b7:b4:e4:a0:4a:8c:a2:8a:
                    1f:5f:f8:d0:bf:c5:4b:26:cc:49:50:f4:5f:09:bc:
                    9c:35:65:48:50:39:ff:6e:95:58:b1:13:fe:6b:19:
                    2a:0d:76:dc:43:1a:7c:c5:c6:3f:d0:a4:25:6b:ba:
                    be:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CD:0A:94:9E:8C:B9:98:1F:6C:37:A3:6A:E7:8C:A4:85:B0:E3:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dc7fb0d9-5156-38a1-a545-728baab0d293.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:32:eb:28:57:60:b0:92:64:09:a4:de:3b:24:8b:a5:77:09:
         e3:83:fe:05:ec:af:e6:c9:ae:9f:d4:b5:98:6a:d3:b6:e8:1a:
         c1:d3:ae:cf:99:0b:1b:78:70:cb:ba:dd:ba:45:eb:56:8d:91:
         d9:00:2e:4b:3d:3e:bf:2b:83:23:c1:da:d5:96:45:f5:0e:aa:
         63:b7:60:03:77:e8:30:52:08:33:9c:43:d0:da:5b:ee:02:f2:
         6f:df:75:50:1f:12:a6:10:b3:94:c3:9e:b6:0e:6e:84:6d:1c:
         ab:cb:8b:ed:2b:c6:76:4a:93:7c:8e:da:26:90:a0:11:5e:e9:
         72:5c:96:a9:93:5e:fa:b6:55:9c:d2:29:36:a9:82:84:ba:e7:
         d3:0b:13:41:df:be:10:40:0c:a8:a5:ae:fd:d5:4d:eb:ec:31:
         fb:9c:9f:3c:8d:cb:1f:0b:9d:9a:d1:9b:d4:f2:c1:aa:22:a2:
         a0:b8:a6:06:f9:cf:37:28:18:7e:e6:9d:94:a9:43:e3:38:7c:
         2e:2f:ed:9b:ff:58:6f:27:5b:ea:f8:ce:e5:05:3d:41:6d:a5:
         77:4f:60:45:3f:37:09:90:d8:c7:71:55:86:47:df:3c:a3:62:
         9f:74:39:47:29:70:b6:1d:b6:fb:be:ea:68:9a:e9:58:18:21:
         4c:61:a1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:10:55 2026 by rpki-client