Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/03e5ec40-eccd-3089-a8b9-dd6189f99b1d.roa
File:                     03e5ec40-eccd-3089-a8b9-dd6189f99b1d.roa (raw, json)
Hash identifier:          X8CfpbsLlh4zWJSa+8lVzci1sa2dkd7GJtL3SoQZy60=
Subject key identifier:   01:63:C2:36:09:3A:46:F1:BE:84:C0:6F:58:B3:80:87:3E:A1:1E:37
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E5BAF585DE027A1CB1D857150
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/03e5ec40-eccd-3089-a8b9-dd6189f99b1d.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     396611
IP address blocks:        2620:74:20::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:58:5d:e0:27:a1:cb:1d:85:71:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=bb48cc1c-6cfa-4ae9-80c6-03dc7c128cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f8:66:6d:3f:87:b6:87:98:f2:0f:c0:02:b5:
                    ca:85:8b:79:80:0a:80:06:54:e2:33:a6:94:ec:e4:
                    ee:30:a8:40:b5:95:e4:03:50:31:c2:18:74:50:d8:
                    ed:fc:7a:a5:97:d2:7e:ac:eb:4c:9c:6a:67:a8:3b:
                    32:ad:27:0b:df:93:45:63:95:ae:b8:b6:2f:20:e1:
                    d2:f5:53:e5:08:6f:10:7f:54:34:75:f6:43:49:fc:
                    41:71:56:45:ba:6a:2c:e5:f4:0a:f0:00:c8:32:01:
                    1d:a1:f0:83:b0:b9:9c:b3:cf:89:40:9b:bd:c5:23:
                    c3:cd:ea:58:80:37:b1:b9:5a:98:c3:a5:98:27:ae:
                    fb:d7:ed:b4:2f:a6:f8:33:c2:88:e2:90:b2:65:4c:
                    4f:07:b3:f1:12:2f:33:ac:e5:65:b5:b2:2c:73:13:
                    c1:6b:6f:fa:46:cf:74:71:70:03:83:8a:f8:10:2d:
                    ae:e6:76:d7:79:15:5d:5e:69:ed:3d:ff:d2:b1:cb:
                    59:90:67:89:9d:29:fd:40:15:81:01:5f:e0:49:47:
                    f3:ec:6b:a8:0d:37:19:93:6c:da:e0:dc:44:5e:fe:
                    dc:0f:2b:ab:d1:98:5e:7d:b4:31:e4:76:4c:13:81:
                    62:c2:cd:9e:43:ea:b8:42:8c:01:37:67:a7:b0:ca:
                    25:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:63:C2:36:09:3A:46:F1:BE:84:C0:6F:58:B3:80:87:3E:A1:1E:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/03e5ec40-eccd-3089-a8b9-dd6189f99b1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:cf:f9:11:83:71:60:55:46:e5:01:b2:e1:76:29:83:c6:95:
         94:56:5c:a4:bf:21:b6:fe:b5:f6:62:aa:98:56:07:a5:fc:10:
         c6:aa:9d:be:d7:d0:71:73:2e:53:8c:73:aa:b2:fc:21:30:95:
         78:ad:71:15:b2:e8:84:c2:5c:75:ff:67:8c:41:f2:3f:af:5d:
         47:c1:37:0d:f8:5a:e3:e2:11:c7:64:78:57:25:40:eb:3c:df:
         15:78:7b:44:b3:cb:f2:5c:11:0d:e8:f6:bc:bb:f9:ee:86:d2:
         e0:b1:b7:99:f9:94:7b:5a:fe:37:b7:3a:b2:4b:17:9d:3f:c7:
         b1:a5:9c:d4:e9:df:55:0f:fc:22:52:ec:4f:5d:ec:14:1e:55:
         8c:3e:fb:f5:3e:fe:3d:93:a9:32:af:6e:50:88:c7:f7:33:15:
         66:52:a9:e4:50:fd:97:01:fc:39:99:ae:bf:6d:64:de:2b:c3:
         ce:00:a5:ad:09:36:64:af:11:7a:20:fb:be:30:0c:ce:e8:5d:
         a5:c5:34:e9:f8:12:32:d1:49:e5:ce:be:cb:75:c8:41:f8:bf:
         ee:00:3c:89:34:08:ed:ce:fa:01:0e:d5:d9:a4:a1:70:34:51:
         af:de:1e:5b:15:d7:61:99:99:b4:73:47:65:38:1a:44:f0:dc:
         55:d6:b0:66
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5br1hd4Cehyx2FcVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDcwMTIxMDAxMloXDTI2MDkyOTIxMDAxMlowLzEtMCsGA1UEAxMk
YmI0OGNjMWMtNmNmYS00YWU5LTgwYzYtMDNkYzdjMTI4Y2MwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vhmbT+HtoeY8g/AArXKhYt5gAqABlTiM6aU
7OTuMKhAtZXkA1Axwhh0UNjt/Hqll9J+rOtMnGpnqDsyrScL35NFY5WuuLYvIOHS
9VPlCG8Qf1Q0dfZDSfxBcVZFumos5fQK8ADIMgEdofCDsLmcs8+JQJu9xSPDzepY
gDexuVqYw6WYJ6771+20L6b4M8KI4pCyZUxPB7PxEi8zrOVltbIscxPBa2/6Rs90
cXADg4r4EC2u5nbXeRVdXmntPf/SsctZkGeJnSn9QBWBAV/gSUfz7GuoDTcZk2za
4NxEXv7cDyur0ZhefbQx5HZME4Fiws2eQ+q4QowBN2ensMolGQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFAFjwjYJOkbxvoTAb1izgIc+oR43MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDNlNWVjNDAtZWNjZC0z
MDg5LWE4YjktZGQ2MTg5Zjk5YjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAjz/kRg3FgVUblAbLhdimDxpWUVlykvyG2/rX2
YqqYVgel/BDGqp2+19Bxcy5TjHOqsvwhMJV4rXEVsuiEwlx1/2eMQfI/r11HwTcN
+Frj4hHHZHhXJUDrPN8VeHtEs8vyXBEN6Pa8u/nuhtLgsbeZ+ZR7Wv43tzqySxed
P8expZzU6d9VD/wiUuxPXewUHlWMPvv1Pv49k6kyr25QiMf3MxVmUqnkUP2XAfw5
ma6/bWTeK8POAKWtCTZkrxF6IPu+MAzO6F2lxTTp+BIy0Unlzr7LdchB+L/uADyJ
NAjtzvoBDtXZpKFwNFGv3h5bFddhmZm0c0dlOBpE8NxV1rBm
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:04 2026 by rpki-client