Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/52f61cea-059a-3b97-8b1a-e4b9bcc7703b.roa
File:                     52f61cea-059a-3b97-8b1a-e4b9bcc7703b.roa (raw, json)
Hash identifier:          Z6befzS95lMBcLVVy23OQY3HaOyP6XOphv6rNEf/N4Q=
Subject key identifier:   D4:68:3C:16:5C:81:C1:BC:72:CF:36:EB:84:D4:9C:92:C5:A5:A0:2B
Certificate issuer:       /CN=c634bf2d-3875-4079-9788-431e36d8743a
Certificate serial:       010D0C9F4328584E4AEF4C8FF3EE6B15F2FC0500
Authority key identifier: 8F:39:E7:00:D8:69:92:10:87:82:FF:BB:46:16:9E:64:9A:86:D5:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/52f61cea-059a-3b97-8b1a-e4b9bcc7703b.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     400718
IP address blocks:        2620:73:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/c634bf2d-3875-4079-9788-431e36d8743a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/c634bf2d-3875-4079-9788-431e36d8743a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:4c:8f:f3:ee:6b:15:f2:fc:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c634bf2d-3875-4079-9788-431e36d8743a
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=8ba50d6e-7862-4f7e-918b-ba6571b65a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7f:0c:68:d9:06:30:07:7c:10:78:36:d0:36:
                    72:43:b0:ef:5f:45:7d:15:78:eb:ae:f6:7c:db:5d:
                    c3:18:49:f3:e0:95:96:0a:5c:8d:e3:71:fe:9f:48:
                    7b:49:7b:7a:17:9f:20:57:bf:db:9d:d1:0f:08:8f:
                    f6:a4:2c:9e:e8:83:69:1f:07:19:45:09:6b:a9:b7:
                    9e:48:36:41:cc:fb:b3:81:49:84:d5:41:73:08:33:
                    28:19:5f:b7:8c:1c:97:7b:00:04:8c:5f:63:91:6b:
                    bc:6a:6a:e3:ba:12:e3:3f:78:74:38:78:ae:63:51:
                    ca:b1:64:d6:cb:eb:15:27:19:97:f2:a7:cf:75:4a:
                    5e:f4:7d:eb:30:4b:23:33:cd:df:9c:f8:96:f7:f4:
                    9a:ba:89:a3:69:53:44:63:19:cd:37:5e:57:a8:9b:
                    e4:2a:f3:e0:a4:13:d4:ed:36:30:19:d5:d9:96:f7:
                    c1:7e:7d:5a:77:2f:57:97:84:fb:3f:79:8e:5e:91:
                    35:be:f2:86:dd:69:71:5b:b8:cc:99:d9:b0:c8:94:
                    5a:b6:4e:00:ac:1e:a8:a5:60:f2:88:28:99:0a:b1:
                    42:eb:4f:e0:fb:59:4a:01:c6:df:fa:6e:1e:41:9a:
                    bd:2e:e7:15:14:d9:c5:0b:2b:6b:fd:4c:73:b3:2d:
                    20:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:68:3C:16:5C:81:C1:BC:72:CF:36:EB:84:D4:9C:92:C5:A5:A0:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/52f61cea-059a-3b97-8b1a-e4b9bcc7703b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/c634bf2d-3875-4079-9788-431e36d8743a.crl

            X509v3 Authority Key Identifier:
                keyid:8F:39:E7:00:D8:69:92:10:87:82:FF:BB:46:16:9E:64:9A:86:D5:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:73:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:c6:cf:5e:64:f9:25:e5:44:a8:98:b4:df:b8:3f:77:c8:ce:
         e4:90:47:a6:28:c5:0a:7b:e4:55:04:68:da:21:01:dc:28:0d:
         1b:29:e7:e6:80:ee:f4:d9:f7:e7:eb:aa:e1:35:a0:10:a9:45:
         1e:df:9e:43:ca:27:b9:ba:ac:ab:ee:21:c7:7b:06:11:11:77:
         78:f6:60:b8:fa:82:b6:f4:62:0a:77:16:63:92:ce:74:90:f0:
         79:95:30:5e:a6:ff:55:a9:0e:92:7e:ae:06:5f:4c:41:f4:ab:
         74:5b:32:35:1f:1d:5e:41:96:73:47:b2:a3:20:9a:5c:bd:b4:
         b0:b4:26:6a:ed:f5:40:bb:c2:57:6f:e4:06:6b:cd:f1:99:46:
         69:2b:76:3c:0c:ce:1f:08:20:a3:93:a4:68:fa:92:54:2d:1f:
         d3:ac:b4:b1:37:a1:ec:db:9f:7e:fb:ac:01:eb:0b:60:3a:0f:
         c1:37:ee:aa:ee:90:29:bf:34:eb:1b:f1:27:f1:55:3d:4a:55:
         bb:10:96:e8:c3:3a:20:db:5b:8f:d7:1b:13:04:0e:2e:72:b2:
         49:3d:2c:dd:da:27:63:96:fd:cf:6f:90:a3:d0:2e:9d:22:6f:
         d7:e5:d5:71:3e:95:ed:0d:d5:cf:89:77:d1:05:45:69:31:51:
         1f:18:8f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:32:34 2026 by rpki-client