Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5b3f3b74-52cc-388e-985b-78ed55f76062.roa
File:                     5b3f3b74-52cc-388e-985b-78ed55f76062.roa (raw, json)
Hash identifier:          MEu4xdXQLgTzNiWhPYtk7wFI8mkY+m2DKyAxhEHgp9o=
Subject key identifier:   A4:9B:C8:1D:27:70:9A:82:E3:23:AE:09:0C:EA:80:72:BF:1C:21:4A
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584F549D43D971FAAE16E6E2D780
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5b3f3b74-52cc-388e-985b-78ed55f76062.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     1288
IP address blocks:        2620:171:bf::/48 maxlen: 48
                          2620:171:1fe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:43:d9:71:fa:ae:16:e6:e2:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=d0db164a-08cf-4502-9139-a7eb690c26ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:10:cc:fc:b6:32:48:3d:7e:e8:29:a4:4c:d9:
                    6b:23:6d:ce:b0:c0:c4:cc:c3:34:f5:8a:0b:a0:65:
                    0f:da:5d:92:0b:61:fe:0a:83:c8:a7:e2:bc:9f:13:
                    11:fa:fc:68:ac:fc:8b:13:f1:2e:95:b8:5d:82:d6:
                    9a:f0:fc:44:d9:cf:90:c9:e1:5d:79:af:29:69:d8:
                    3a:e8:7e:3a:78:44:37:a2:36:07:f8:4d:38:d3:91:
                    41:9f:50:0f:4a:cd:63:08:81:38:fe:bb:aa:f3:29:
                    86:bd:ca:11:f8:09:3a:3e:e9:3d:63:e1:b4:43:30:
                    77:0d:c6:2c:83:63:4b:4c:00:54:e8:11:9a:69:0e:
                    dc:94:23:d0:81:ad:68:5b:2e:9a:f4:ab:f1:a1:1d:
                    54:08:6e:08:cd:f7:09:6b:8d:79:a0:40:8b:83:f4:
                    73:84:05:1e:90:28:31:cd:88:38:fd:88:e7:62:fe:
                    b2:9c:dd:28:a4:9e:07:21:60:b3:c6:0f:3d:17:ee:
                    ab:78:c0:0a:03:23:fa:f8:44:b0:34:28:58:94:64:
                    53:5a:01:e8:9d:c8:3e:00:99:85:d1:12:4d:47:2c:
                    a2:a1:62:3c:19:40:7d:8d:3d:d5:bd:ac:3b:3c:fc:
                    33:58:8a:51:b2:56:87:82:84:bc:e9:37:e3:81:26:
                    2a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9B:C8:1D:27:70:9A:82:E3:23:AE:09:0C:EA:80:72:BF:1C:21:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5b3f3b74-52cc-388e-985b-78ed55f76062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:171:bf::/48
                  2620:171:1fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:d4:be:7c:fd:bc:e2:31:af:a4:57:88:ac:8f:27:ac:d6:29:
         ec:07:1d:35:ff:50:4a:96:25:ad:6a:27:ca:26:09:4b:eb:83:
         6f:0b:ac:2f:0c:d3:78:19:1c:95:46:b6:af:d7:54:58:be:5d:
         43:9c:56:cd:54:39:e2:24:fe:d7:1b:71:24:05:cb:37:36:a9:
         19:6a:2b:4d:e1:89:1c:89:26:93:82:dd:94:c6:5a:95:5c:ec:
         f6:21:8e:9e:4f:92:d7:f7:39:35:53:14:24:37:6c:22:77:42:
         1d:68:14:21:fb:fd:9f:1c:fc:bb:63:f8:05:da:dc:6a:bc:2d:
         c5:e0:17:f0:93:1a:22:3b:f7:d2:e4:6f:4a:73:ea:2e:82:af:
         6d:04:d5:5d:41:d4:59:09:af:7f:07:80:10:61:94:09:28:5f:
         1d:0b:16:78:03:25:1c:0c:d6:82:12:1d:9e:d4:83:11:2b:72:
         8d:ff:32:0c:4c:78:6e:80:34:08:f6:8c:5f:c3:40:e2:e5:e5:
         e3:c6:ee:34:71:37:54:97:56:f3:83:81:a7:1c:60:4c:ba:69:
         2a:fe:ab:a4:47:95:93:12:3e:32:a2:c2:0a:71:67:1d:aa:68:
         cb:1f:26:21:bc:af:fb:79:bf:82:44:c1:de:99:1c:a6:46:cc:
         bf:05:96:be
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE9UnUPZcfquFubi14AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3
MTAzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
ZDBkYjE2NGEtMDhjZi00NTAyLTkxMzktYTdlYjY5MGMyNmVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRDM/LYySD1+6CmkTNlrI23OsMDEzMM09YoL
oGUP2l2SC2H+CoPIp+K8nxMR+vxorPyLE/Eulbhdgtaa8PxE2c+QyeFdea8padg6
6H46eEQ3ojYH+E0405FBn1APSs1jCIE4/ruq8ymGvcoR+Ak6Puk9Y+G0QzB3DcYs
g2NLTABU6BGaaQ7clCPQga1oWy6a9KvxoR1UCG4IzfcJa415oECLg/RzhAUekCgx
zYg4/YjnYv6ynN0opJ4HIWCzxg89F+6reMAKAyP6+ESwNChYlGRTWgHoncg+AJmF
0RJNRyyioWI8GUB9jT3Vvaw7PPwzWIpRslaHgoS86TfjgSYqTQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFKSbyB0ncJqC4yOuCQzqgHK/HCFKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy
NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvNWIzZjNiNzQtNTJjYy0z
ODhlLTk4NWItNzhlZDU1Zjc2MDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4
ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj
NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2
MGRlYzcxMDMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAJiABcQC/
AwcAJiABcQH+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAJjUvnz9vOIxr6RXiKyPJ6zWKewHHTX/UEqWJa1q
J8omCUvrg28LrC8M03gZHJVGtq/XVFi+XUOcVs1UOeIk/tcbcSQFyzc2qRlqK03h
iRyJJpOC3ZTGWpVc7PYhjp5Pktf3OTVTFCQ3bCJ3Qh1oFCH7/Z8c/Ltj+AXa3Gq8
LcXgF/CTGiI799Lkb0pz6i6Cr20E1V1B1FkJr38HgBBhlAkoXx0LFngDJRwM1oIS
HZ7UgxErco3/MgxMeG6ANAj2jF/DQOLl5ePG7jRxN1SXVvODgaccYEy6aSr+q6RH
lZMSPjKiwgpxZx2qaMsfJiG8r/t5v4JEwd6ZHKZGzL8Flr4=
-----END CERTIFICATE-----
Generated at Mon Oct 5 05:19:59 2026 by rpki-client