Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5deceed-f0e2-3522-9119-669b797859a6.roa
File:                     e5deceed-f0e2-3522-9119-669b797859a6.roa (raw, json)
Hash identifier:          Jtfs06TaWgpqx8wxW6Pn+p+81oQUEM1dP+rONyOqVy8=
Subject key identifier:   78:4F:06:2F:4B:CB:1C:04:30:57:8E:FC:C4:D9:DA:3A:C3:68:B1:C6
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D0912B3E92140E698CC15E900
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5deceed-f0e2-3522-9119-669b797859a6.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     396594
IP address blocks:        2620:74:2c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:b3:e9:21:40:e6:98:cc:15:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=2b9e6214-4475-4121-8637-b5d7ea33eaab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b3:98:1c:ff:1b:82:61:d5:4c:b0:5a:97:90:
                    41:eb:9f:98:fa:ba:b1:21:b4:a0:ac:19:fd:ee:e5:
                    78:83:a0:30:d3:b3:70:34:b1:c9:04:38:4b:08:82:
                    4a:a8:4f:07:9a:c5:7d:97:56:fe:36:43:81:a0:73:
                    ca:e2:e3:71:ab:49:28:4f:05:fc:11:3f:84:1c:36:
                    74:9a:18:01:4d:cb:83:b1:e0:06:e2:80:bc:43:33:
                    ff:7e:cc:b1:44:00:d6:58:91:f7:56:90:64:bc:8d:
                    70:8f:45:75:69:05:0c:d2:00:02:a9:b5:4f:0a:a9:
                    50:a4:73:8d:f5:be:65:79:4d:2a:41:4d:68:4a:88:
                    b5:b9:af:6b:2e:4a:79:b2:b1:e9:a9:98:81:70:1c:
                    6d:cf:3c:16:6d:25:fa:d9:53:15:44:2a:79:32:dd:
                    b3:5e:95:e3:bb:af:29:f8:f7:47:bb:5b:b1:1a:b4:
                    56:f9:59:0d:33:ef:b4:09:08:5e:7a:a4:cb:c2:95:
                    68:dd:75:4e:c9:ac:57:7b:d0:2f:31:23:8d:b8:40:
                    c2:da:12:ef:6a:4a:3f:35:55:ee:db:39:db:31:35:
                    92:a5:48:c9:2c:ac:7a:2f:04:c6:64:16:79:96:32:
                    6b:d6:1c:d5:df:6a:61:a7:2f:95:59:7c:93:ad:31:
                    f1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4F:06:2F:4B:CB:1C:04:30:57:8E:FC:C4:D9:DA:3A:C3:68:B1:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5deceed-f0e2-3522-9119-669b797859a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:e6:c7:04:f5:23:2c:56:01:5e:83:79:2f:09:b3:ad:e5:80:
         c5:ef:c3:92:21:1e:85:4b:d3:dd:1e:18:3f:21:ea:8d:3c:db:
         88:63:cc:6c:10:fa:b7:65:95:48:aa:8c:32:72:bf:58:91:39:
         9e:eb:83:43:3a:cb:2b:f1:48:18:7f:49:85:fc:c2:63:5f:73:
         97:cb:3b:93:1c:65:c0:43:46:49:b4:a9:c2:ea:04:d2:3f:2a:
         8e:3b:08:c2:4b:44:e6:3c:a9:d4:18:db:3d:ae:11:a7:f6:05:
         40:99:29:e2:8f:aa:4f:c1:9b:4e:96:26:3a:a0:de:37:1d:31:
         7b:94:a7:36:81:9c:df:53:c3:d9:db:e0:d8:a4:c8:21:b7:59:
         84:ad:ce:2e:91:1d:72:b1:15:49:51:14:74:1e:bc:57:e9:b1:
         be:5f:2e:49:df:aa:26:6c:6a:b5:9d:1b:e9:20:f0:9c:e4:7d:
         f3:b7:db:12:60:11:2f:7b:6a:3c:1e:27:36:69:53:e2:22:26:
         21:47:19:2b:35:ac:c9:52:8d:2b:53:1d:47:ec:65:90:1f:60:
         9d:55:61:a2:0e:9a:1a:54:e4:2f:30:7f:62:8b:da:b3:5f:c5:
         8d:60:da:23:c7:22:d4:f4:b6:14:ab:35:79:05:14:f2:fa:38:
         91:b6:e9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:57:49 2026 by rpki-client