Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd2209f3-37ce-32d6-97ec-3d99ffc6dc3b.roa
File:                     dd2209f3-37ce-32d6-97ec-3d99ffc6dc3b.roa (raw, json)
Hash identifier:          1purY/4Mcg6uDgJcwF6egiHs5LgE9knlwMwJeFYx08s=
Subject key identifier:   77:F3:AF:33:4F:58:C3:1E:3B:D8:55:F8:07:EA:CB:FB:1E:76:D8:C6
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E640F83284E8F3C634EAF6880
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd2209f3-37ce-32d6-97ec-3d99ffc6dc3b.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     7342
IP address blocks:        2620:74:6a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:83:28:4e:8f:3c:63:4e:af:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=4af1f319-f8a2-43b1-8055-5705bbf846d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4f:aa:52:5a:aa:93:85:92:1d:7e:77:d4:74:
                    1e:55:52:a7:3f:58:a8:e5:80:46:79:a0:be:f4:23:
                    76:38:d5:3e:f4:18:80:c0:4d:eb:9f:5e:45:57:6f:
                    2d:b6:f8:31:5e:9c:40:d8:71:3f:dc:1d:23:84:54:
                    f2:82:fd:db:ea:39:1d:c1:aa:66:32:71:51:4d:8f:
                    7f:45:10:fb:5d:d1:4c:0e:80:aa:96:d2:7e:36:61:
                    69:0e:7e:50:b7:1a:b9:42:8b:55:0d:72:71:b4:b3:
                    c1:60:e7:b4:b9:d4:76:44:fd:f9:ae:f2:8f:4d:90:
                    64:5a:ac:b0:83:a5:a9:46:ea:c0:0a:27:e9:68:7c:
                    b6:cc:f9:33:3a:c4:1d:ad:26:8d:f5:b6:b0:09:90:
                    47:d8:bb:e6:28:16:33:e6:4f:67:32:ca:ab:b7:59:
                    55:e8:81:ea:6e:09:25:59:8b:a3:45:e3:3a:8e:29:
                    1d:59:22:c1:2d:c4:84:3a:bf:6b:0b:5d:af:df:f0:
                    09:27:c9:84:a3:fd:09:4f:ae:7e:6d:d0:42:f4:0d:
                    34:42:6b:90:aa:69:fb:e7:4b:81:85:1a:ac:6e:23:
                    60:54:08:0f:6d:cc:0d:be:bd:2a:5b:1f:31:d6:d2:
                    81:ed:e4:90:04:b6:3d:ab:6a:1b:df:af:ef:75:fc:
                    19:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F3:AF:33:4F:58:C3:1E:3B:D8:55:F8:07:EA:CB:FB:1E:76:D8:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd2209f3-37ce-32d6-97ec-3d99ffc6dc3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:6a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:d2:dd:ef:a3:bf:a7:77:9f:12:59:15:dd:f8:54:fd:86:99:
         c4:3a:b4:8f:90:53:5f:9b:af:4f:23:f3:52:e1:29:36:9b:ff:
         2f:b4:90:94:a3:2d:b7:b4:16:78:8a:4f:f6:17:95:04:be:e9:
         d7:08:a8:96:3e:50:58:46:cb:0a:f4:e5:48:47:1b:d6:91:01:
         14:7c:13:e3:fc:b6:f4:46:ae:46:a6:b7:8f:1e:a7:4f:a4:a0:
         b9:6b:46:c6:2b:be:b1:69:76:72:c7:2d:ef:0e:db:b2:69:1a:
         53:36:b3:cf:25:57:a2:5f:6e:85:85:dd:2e:d7:99:ff:22:b3:
         65:54:d1:1a:8f:e8:3b:eb:9f:ab:72:dc:5d:9d:8c:8e:32:0e:
         19:e6:9e:4c:9e:d4:54:bb:79:2d:b4:1f:ef:84:41:e2:02:0c:
         02:9b:d7:92:eb:64:3b:46:70:14:33:50:bc:9d:5f:cc:10:44:
         4f:ac:11:8b:06:50:c0:ea:25:12:0e:3f:63:8f:b4:0f:42:c0:
         b3:3a:20:1b:a8:23:7a:05:50:4d:cf:28:48:f1:64:23:19:23:
         eb:58:33:ba:bf:7f:33:fe:8f:8d:79:fb:0e:45:7f:7e:3a:97:
         a2:5b:cf:2e:54:3a:d4:f0:89:b5:80:50:cc:f6:df:9c:dd:f3:
         21:7d:c6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:50:53 2026 by rpki-client