Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec993b21-42a5-3353-bf1b-6fd6bc855add.roa
File:                     ec993b21-42a5-3353-bf1b-6fd6bc855add.roa (raw, json)
Hash identifier:          lzG4MmePKVDssY7aY+w8sRvEvDkeD7aI8utEYLSSqnA=
Subject key identifier:   77:83:75:1B:EF:EB:2C:84:39:68:3B:9E:80:E0:B8:8C:35:2F:48:1B
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D09126484208BCCC2242BE980
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec993b21-42a5-3353-bf1b-6fd6bc855add.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     397206
IP address blocks:        2620:74:2c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:64:84:20:8b:cc:c2:24:2b:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=8ac82d8d-186a-4976-865b-2fdb35d27947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ea:52:00:e8:1f:d6:cd:d9:5a:e8:f3:de:e1:
                    e6:1c:a9:88:0e:13:1c:d7:29:ef:2c:8c:fc:eb:0e:
                    ce:a5:be:f8:14:7c:d8:c9:92:24:d9:03:3f:c6:43:
                    22:38:e3:e2:ad:d8:62:86:88:94:27:1b:23:e3:e5:
                    b5:51:81:a7:23:74:0e:0a:1d:63:4e:77:79:ec:4b:
                    2e:85:46:50:4f:f0:f4:2c:d6:3f:40:1f:93:6a:f2:
                    e5:bf:dd:68:83:9a:da:ea:77:34:b2:f3:f7:d0:61:
                    1e:26:d9:11:99:5c:2d:0e:28:37:54:aa:39:b9:11:
                    a9:e0:99:a6:5a:df:d2:94:50:9d:98:f8:d8:7d:fe:
                    f3:36:8a:54:6b:7a:71:ca:10:58:b8:c1:cb:32:25:
                    e0:40:64:50:89:9e:ab:02:65:61:ca:eb:b6:f2:57:
                    1e:ae:55:87:a0:dd:d0:ff:6e:b8:e3:e3:23:94:d9:
                    bf:91:3f:8c:dd:90:c6:9a:fd:e3:28:da:09:77:20:
                    50:de:b4:33:2b:42:97:7f:4f:b9:02:9a:17:b8:1f:
                    6b:04:b8:ed:60:62:7c:16:62:f2:4a:6e:9c:af:86:
                    da:e9:c1:2b:1d:26:e7:d0:a5:0c:4e:e4:08:fa:0b:
                    53:f0:b3:77:6b:e8:ec:0f:6a:9a:c3:09:52:65:fe:
                    66:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:83:75:1B:EF:EB:2C:84:39:68:3B:9E:80:E0:B8:8C:35:2F:48:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec993b21-42a5-3353-bf1b-6fd6bc855add.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:5c:68:24:2b:80:b1:d2:0e:64:a1:df:94:35:2f:5a:61:e0:
         f7:42:81:fe:07:98:bc:89:80:f6:8e:98:a9:be:fc:57:a8:7a:
         c0:c6:29:b4:cf:7c:ef:4b:16:db:69:54:5f:74:04:a2:f8:a3:
         eb:01:4f:15:5b:c7:3b:9c:7a:cf:a5:a2:52:1d:72:d4:2e:b8:
         80:77:73:87:fa:02:da:b0:29:a7:22:11:43:70:2f:05:09:f2:
         3d:93:8d:3e:4c:a2:bb:ff:99:d0:0e:a4:82:42:df:41:41:5f:
         82:68:05:0a:2b:0f:9b:7e:21:6f:10:7e:a4:72:b0:2c:ba:08:
         48:c0:74:c1:37:8a:62:22:02:31:53:55:d4:6a:14:6b:f6:d9:
         f6:80:96:5f:7d:e4:87:96:50:55:69:e7:44:46:4f:f8:1a:a8:
         64:a9:8e:e9:89:bb:1b:7f:17:e7:af:f9:36:2f:20:6f:75:50:
         57:e5:fa:84:89:00:23:7b:16:9e:97:89:9a:3c:39:42:e7:a5:
         63:18:c0:78:0d:1d:a7:bb:23:fc:b2:fb:4f:9d:30:96:db:60:
         df:37:b5:8e:54:b2:de:54:ae:e5:11:aa:a8:a5:0c:e5:96:1f:
         69:8b:87:75:0d:45:04:46:72:3b:2f:09:88:5a:bf:97:fd:b6:
         73:c0:ae:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:18:18 2026 by rpki-client