Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ac4ae65-c2c8-3af5-835e-25a5ebf94c32.roa
File:                     1ac4ae65-c2c8-3af5-835e-25a5ebf94c32.roa (raw, json)
Hash identifier:          zTipf7TmyjIC98qGlDLptpvS35PUxATD1M9ECac4Rt8=
Subject key identifier:   2D:46:ED:2E:0D:21:95:BE:47:78:AB:7A:8A:35:22:60:43:95:AF:5C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E986031544A1DCA129B1B4680
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ac4ae65-c2c8-3af5-835e-25a5ebf94c32.roa
Signing time:             Thu 23 Jul 2026 14:45:11 +0000
ROA not before:           Thu 23 Jul 2026 14:45:11 +0000
ROA not after:            Wed 21 Oct 2026 14:45:11 +0000
asID:                     26134
IP address blocks:        2620:74:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:98:60:31:54:4a:1d:ca:12:9b:1b:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 23 14:45:11 2026 GMT
            Not After : Oct 21 14:45:11 2026 GMT
        Subject: CN=7aab3723-22c6-408f-afbc-826619583452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:42:13:b2:52:5f:da:87:98:7b:64:16:79:3c:
                    6c:b9:f8:3c:81:32:8a:7a:7a:9b:bf:cf:db:79:b4:
                    8c:c9:ff:c8:75:c4:0f:28:10:d7:ae:8f:28:f2:47:
                    67:16:b8:0b:bc:17:92:a6:ea:29:45:0e:0a:5f:e9:
                    2b:87:0c:26:af:dd:48:49:60:d5:b3:0e:e8:98:b2:
                    27:f7:b6:f2:74:4f:41:4a:f8:85:53:5d:d3:76:a3:
                    32:a3:b4:82:cc:8a:fe:1c:b6:7e:0b:12:45:dc:5c:
                    7e:9d:51:da:15:57:c9:7b:8a:7e:39:dc:96:f8:ba:
                    cd:e1:d4:a7:8c:85:7f:7b:29:33:56:3e:93:d4:06:
                    04:22:67:b1:af:ff:35:8a:2e:5b:54:a1:d1:5c:cc:
                    bf:38:90:76:f8:ca:12:56:9a:da:f7:bb:d7:c4:29:
                    70:58:f4:63:a5:ac:ec:72:28:11:a4:39:44:a9:67:
                    aa:ee:56:94:e1:71:af:e4:9b:be:11:3a:12:ea:91:
                    4f:6a:0b:34:71:40:b4:6d:86:9f:8c:35:97:00:a3:
                    55:90:72:7d:b5:bb:bb:bb:b8:1f:a0:83:e0:92:1d:
                    6e:02:31:e6:a5:73:a3:58:42:d9:e7:e0:a7:92:7d:
                    0e:4e:8b:ed:99:82:07:8e:59:5f:38:95:5f:cd:88:
                    63:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:46:ED:2E:0D:21:95:BE:47:78:AB:7A:8A:35:22:60:43:95:AF:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ac4ae65-c2c8-3af5-835e-25a5ebf94c32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:4d:31:68:db:1a:ef:a4:60:ef:b0:86:90:e5:d5:e1:8a:77:
         db:b0:5a:55:97:5d:cd:8d:3d:fd:c6:c3:55:72:ab:7c:47:65:
         c9:26:4e:6c:ba:be:3b:57:21:76:b6:3a:00:7e:12:b7:fc:6e:
         ad:fe:d7:d3:2c:4e:4c:08:13:31:c3:db:4f:6f:28:16:13:70:
         52:ce:96:95:05:fc:4b:48:6c:1e:78:f5:fd:b8:6c:e0:b4:29:
         e8:2e:d9:3f:af:bf:72:2e:8d:a9:d2:6e:e3:2b:db:6f:87:78:
         9a:81:90:c9:39:6f:3b:6f:c5:ba:ba:a3:c6:be:ae:ed:29:49:
         8a:49:cc:e7:c7:61:5c:55:02:fb:5c:4d:fb:28:59:16:3d:c6:
         90:e9:fb:2f:e9:81:5c:ef:a3:0e:e5:95:42:3f:b9:e9:bd:40:
         d5:fa:a5:8e:88:66:f8:8a:62:f1:2b:55:d1:e4:bb:f2:71:9e:
         a0:40:ae:db:a4:52:65:4d:cc:54:9a:2f:7a:ec:08:7b:10:79:
         4b:bb:35:61:08:fc:a5:9b:82:25:e5:4d:91:bb:20:ed:a0:9c:
         7a:eb:e6:53:54:61:ac:6e:49:20:65:aa:c4:ec:6a:b8:6a:73:
         25:f4:b9:4f:75:a9:0e:96:3c:e4:98:b2:d4:ad:12:0a:54:62:
         03:f8:be:2d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6YYDFUSh3KEpsbRoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDcyMzE0NDUxMVoXDTI2MTAyMTE0NDUxMVowLzEtMCsGA1UEAxMk
N2FhYjM3MjMtMjJjNi00MDhmLWFmYmMtODI2NjE5NTgzNDUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EITslJf2oeYe2QWeTxsufg8gTKKenqbv8/b
ebSMyf/IdcQPKBDXro8o8kdnFrgLvBeSpuopRQ4KX+krhwwmr91ISWDVsw7omLIn
97bydE9BSviFU13TdqMyo7SCzIr+HLZ+CxJF3Fx+nVHaFVfJe4p+OdyW+LrN4dSn
jIV/eykzVj6T1AYEImexr/81ii5bVKHRXMy/OJB2+MoSVpra97vXxClwWPRjpazs
cigRpDlEqWeq7laU4XGv5Ju+EToS6pFPags0cUC0bYafjDWXAKNVkHJ9tbu7u7gf
oIPgkh1uAjHmpXOjWELZ5+Cnkn0OTovtmYIHjllfOJVfzYhjAwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFC1G7S4NIZW+R3ireoo1ImBDla9cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWFjNGFlNjUtYzJjOC0z
YWY1LTgzNWUtMjVhNWViZjk0YzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAK
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGZNMWjbGu+kYO+whpDl1eGKd9uwWlWXXc2NPf3Gw1Vyq3xHZckm
Tmy6vjtXIXa2OgB+Erf8bq3+19MsTkwIEzHD209vKBYTcFLOlpUF/EtIbB549f24
bOC0Kegu2T+vv3IujanSbuMr22+HeJqBkMk5bztvxbq6o8a+ru0pSYpJzOfHYVxV
AvtcTfsoWRY9xpDp+y/pgVzvow7llUI/uem9QNX6pY6IZviKYvErVdHku/JxnqBA
rtukUmVNzFSaL3rsCHsQeUu7NWEI/KWbgiXlTZG7IO2gnHrr5lNUYaxuSSBlqsTs
arhqcyX0uU91qQ6WPOSYstStEgpUYgP4vi0=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:29:57 2026 by rpki-client