Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/192eaff7-97f0-3a92-8759-3880ed2af9b3.roa
File:                     192eaff7-97f0-3a92-8759-3880ed2af9b3.roa (raw, json)
Hash identifier:          DsYo0Vm1puQBlaFMxG18XdutIO2XbXLyo70EEeHR4aU=
Subject key identifier:   FD:BD:32:0F:A2:18:D9:EB:E2:DF:85:5B:DB:07:22:38:D7:AC:C1:2B
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B8EAD06B8462815325AA8CA80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/192eaff7-97f0-3a92-8759-3880ed2af9b3.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     7342
IP address blocks:        2620:74:5b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ad:06:b8:46:28:15:32:5a:a8:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=af83d320-4e6e-4847-a293-e4330b979d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:77:6f:07:31:6c:2a:74:7b:af:e4:fb:c8:d3:
                    fd:53:3e:b8:4a:3e:ed:f5:50:dc:37:4c:f0:a2:8e:
                    44:52:e4:72:b3:c1:60:7f:9f:7b:29:92:a7:4e:af:
                    a7:e1:d2:0d:64:d4:3c:d5:19:de:37:c7:ad:f3:ad:
                    26:fd:eb:b4:8a:22:df:7c:4e:40:f1:5f:7c:05:a1:
                    bd:4d:23:3c:72:0a:9a:f8:41:8e:1c:28:76:74:80:
                    6e:71:50:07:73:32:d7:e0:10:e0:21:95:0a:f1:7a:
                    e5:dc:c8:4b:a7:48:ee:35:90:9d:54:3c:f9:c6:9e:
                    16:b2:5c:8b:7e:53:0e:cf:68:52:46:70:b9:1b:d9:
                    3a:d5:dd:7d:6c:52:0a:a8:5f:d7:c4:06:66:de:41:
                    bb:4a:95:cc:7c:a6:2f:cf:74:d7:9a:1c:31:c7:90:
                    d2:14:f5:a0:87:68:05:8f:d0:e7:aa:b8:39:9f:54:
                    50:ca:e0:e3:82:f1:c6:94:38:bf:4f:41:54:45:fd:
                    a5:ef:51:2c:9c:e9:61:60:f7:9a:be:4d:cf:84:f5:
                    92:62:eb:b6:47:d8:64:e0:0e:50:5b:61:fc:5a:f3:
                    2a:ec:45:d4:e8:9c:6d:d8:57:52:84:10:4e:c3:1b:
                    2b:c2:ed:53:c7:7e:4c:69:ba:48:08:cd:b3:74:37:
                    4e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BD:32:0F:A2:18:D9:EB:E2:DF:85:5B:DB:07:22:38:D7:AC:C1:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/192eaff7-97f0-3a92-8759-3880ed2af9b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:5b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:02:6f:10:80:c4:92:a7:8d:1a:40:0b:53:64:50:09:1b:c7:
         d5:69:29:3b:61:29:98:04:50:82:b8:d6:d9:70:34:b6:ce:f9:
         d4:39:09:a1:20:42:4c:24:d4:ab:a4:9a:35:5b:6a:2c:13:82:
         1d:4f:a3:d9:d5:ef:95:73:dd:85:39:49:1b:2f:c9:73:a8:f5:
         d5:49:81:f3:52:c4:8c:31:85:64:5c:b7:0f:7d:7c:ed:f7:93:
         29:26:af:9e:dc:6c:40:20:1c:04:36:07:85:26:d4:bf:16:05:
         bb:23:9e:4c:aa:7f:6b:bf:74:01:22:54:3a:b1:30:3e:d2:82:
         e5:52:c0:6d:51:96:e4:82:c8:56:c4:c1:a6:53:64:b0:25:17:
         2c:e4:48:2a:21:17:0e:9c:25:a0:c8:82:d6:5d:2d:18:62:b1:
         d5:cb:82:8b:72:a2:e5:79:3a:c8:8e:c5:f2:ca:93:df:ab:8d:
         c0:eb:8b:3e:e5:ef:4e:04:bc:67:eb:93:79:65:b9:cd:fa:11:
         3b:e1:96:10:f2:79:23:a1:d7:9c:cc:29:2f:48:18:c9:29:3f:
         6d:b5:49:d9:80:44:5a:ae:c7:d8:ab:4b:c0:1e:bf:47:16:cd:
         2c:69:09:7f:ac:55:84:79:f6:f0:6c:d5:dd:26:d2:77:57:38:
         e1:c0:a7:4b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuOrQa4RigVMlqoyoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk
YWY4M2QzMjAtNGU2ZS00ODQ3LWEyOTMtZTQzMzBiOTc5ZDE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhndvBzFsKnR7r+T7yNP9Uz64Sj7t9VDcN0zw
oo5EUuRys8Fgf597KZKnTq+n4dINZNQ81RneN8et860m/eu0iiLffE5A8V98BaG9
TSM8cgqa+EGOHCh2dIBucVAHczLX4BDgIZUK8Xrl3MhLp0juNZCdVDz5xp4WslyL
flMOz2hSRnC5G9k61d19bFIKqF/XxAZm3kG7SpXMfKYvz3TXmhwxx5DSFPWgh2gF
j9Dnqrg5n1RQyuDjgvHGlDi/T0FURf2l71EsnOlhYPeavk3PhPWSYuu2R9hk4A5Q
W2H8WvMq7EXU6Jxt2FdShBBOwxsrwu1Tx35MabpICM2zdDdOtQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP29Mg+iGNnr4t+FW9sHIjjXrMErMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTkyZWFmZjctOTdmMC0z
YTkyLTg3NTktMzg4MGVkMmFmOWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABb
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFkCbxCAxJKnjRpAC1NkUAkbx9VpKTthKZgEUIK41tlwNLbO+dQ5
CaEgQkwk1KukmjVbaiwTgh1Po9nV75Vz3YU5SRsvyXOo9dVJgfNSxIwxhWRctw99
fO33kykmr57cbEAgHAQ2B4Um1L8WBbsjnkyqf2u/dAEiVDqxMD7SguVSwG1RluSC
yFbEwaZTZLAlFyzkSCohFw6cJaDIgtZdLRhisdXLgotyouV5OsiOxfLKk9+rjcDr
iz7l704EvGfrk3lluc36ETvhlhDyeSOh15zMKS9IGMkpP221SdmARFqux9irS8Ae
v0cWzSxpCX+sVYR59vBs1d0m0ndXOOHAp0s=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:53:42 2025 by rpki-client