Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1be57edc-2cf4-3216-88f6-99ecb7694bf9.roa
File:                     1be57edc-2cf4-3216-88f6-99ecb7694bf9.roa (raw, json)
Hash identifier:          AlbquSHjlS6fH+OS5KBNXzlgcH48hT2BFB55eOfcYDg=
Subject key identifier:   4B:D0:3A:F1:FB:03:47:28:8C:91:95:30:2C:97:8A:EE:B0:F5:32:73
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B84E78E2898A97DF40BD8BF80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1be57edc-2cf4-3216-88f6-99ecb7694bf9.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     396553
IP address blocks:        2620:74:2a::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:8e:28:98:a9:7d:f4:0b:d8:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=a89467b9-f182-49db-8b92-5e703b266fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2f:60:92:de:8f:22:03:e4:74:b2:87:71:e0:
                    f1:c0:60:5c:56:f1:45:a1:f2:b8:3f:b1:40:31:41:
                    9d:31:7d:14:26:f1:0d:c9:c1:f9:81:eb:76:1d:df:
                    01:a8:5c:86:2d:df:07:3e:50:6c:0f:22:74:17:2b:
                    a9:a4:7c:90:e8:c7:be:1d:92:6b:fe:13:af:d8:ae:
                    1d:fa:3d:f9:f8:de:d9:c0:bc:4a:ab:b0:c5:17:51:
                    ea:fd:f6:48:f1:b4:d4:bb:aa:79:4e:55:69:95:9b:
                    d1:25:dd:7b:2c:dd:79:94:49:8f:d6:8e:c8:7d:e2:
                    c8:0c:e3:20:28:23:7e:47:44:c6:e9:33:ab:c5:26:
                    71:83:a5:ee:e0:21:9a:fe:e8:d3:91:3c:2b:a9:40:
                    47:dc:77:36:85:c3:1d:b4:5d:66:2b:86:94:07:bc:
                    a6:59:5f:93:59:7a:3c:5d:b5:3d:99:5d:f5:5a:cf:
                    9d:cc:98:aa:e6:68:37:94:45:35:df:a4:ff:98:54:
                    9a:19:67:27:c5:b4:bd:3c:85:04:4b:a1:a7:a7:fc:
                    ca:e8:9a:f3:da:80:06:1b:d8:36:ec:e8:87:29:97:
                    43:a6:3a:35:eb:31:8e:ec:19:23:fc:74:a6:1e:b2:
                    20:13:15:eb:58:48:3a:49:91:5a:84:bf:27:7a:97:
                    be:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D0:3A:F1:FB:03:47:28:8C:91:95:30:2C:97:8A:EE:B0:F5:32:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1be57edc-2cf4-3216-88f6-99ecb7694bf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:4d:37:04:ad:34:99:2d:ae:9b:0f:ff:94:b1:68:26:f2:42:
         fc:a9:50:a4:fb:41:57:7b:64:d1:58:42:8d:8e:e7:1b:03:ca:
         db:0b:d5:27:8a:a9:3b:16:33:c9:12:5c:57:c3:cf:33:b6:dd:
         07:9e:70:b0:65:d3:f9:33:fc:7c:99:43:dc:12:14:08:51:9a:
         2a:c1:63:fc:2f:ec:1c:ec:67:b9:0d:4b:95:fc:07:74:40:54:
         3c:7b:50:33:01:f1:f0:c1:1a:25:f6:ce:7a:6c:b2:04:cf:7b:
         c8:70:ba:a8:33:33:bf:27:d5:3b:d4:b1:cf:00:12:bf:c5:fd:
         fa:23:ce:3a:61:b7:f6:7e:87:e5:8c:4d:50:45:fd:d8:fa:17:
         21:66:d8:26:0d:e1:c4:e1:15:da:3c:31:3f:07:cb:a7:e3:9d:
         66:16:8e:1c:78:5f:ff:ec:99:c8:80:89:96:a2:fc:39:2a:72:
         34:09:77:bd:f1:9c:35:5c:e9:32:3a:57:44:1c:fa:a8:02:8d:
         23:d9:dd:3f:59:c6:37:f7:e3:3c:f3:79:88:8e:2f:ca:74:5d:
         18:a6:d3:b8:08:e5:72:e3:dd:fa:20:12:e0:d3:f9:65:4e:9a:
         92:97:49:d0:f2:c5:6b:47:c8:c7:11:91:63:48:52:a6:5f:31:
         79:f5:3c:48
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuE544omKl99AvYv4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk
YTg5NDY3YjktZjE4Mi00OWRiLThiOTItNWU3MDNiMjY2ZmRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki9gkt6PIgPkdLKHceDxwGBcVvFFofK4P7FA
MUGdMX0UJvENycH5get2Hd8BqFyGLd8HPlBsDyJ0FyuppHyQ6Me+HZJr/hOv2K4d
+j35+N7ZwLxKq7DFF1Hq/fZI8bTUu6p5TlVplZvRJd17LN15lEmP1o7IfeLIDOMg
KCN+R0TG6TOrxSZxg6Xu4CGa/ujTkTwrqUBH3Hc2hcMdtF1mK4aUB7ymWV+TWXo8
XbU9mV31Ws+dzJiq5mg3lEU136T/mFSaGWcnxbS9PIUES6Gnp/zK6Jrz2oAGG9g2
7OiHKZdDpjo16zGO7Bkj/HSmHrIgExXrWEg6SZFahL8nepe+GQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFEvQOvH7A0cojJGVMCyXiu6w9TJzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWJlNTdlZGMtMmNmNC0z
MjE2LTg4ZjYtOTllY2I3Njk0YmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQASTTcErTSZLa6bD/+UsWgm8kL8qVCk+0FXe2TR
WEKNjucbA8rbC9Uniqk7FjPJElxXw88ztt0HnnCwZdP5M/x8mUPcEhQIUZoqwWP8
L+wc7Ge5DUuV/Ad0QFQ8e1AzAfHwwRol9s56bLIEz3vIcLqoMzO/J9U71LHPABK/
xf36I846Ybf2fofljE1QRf3Y+hchZtgmDeHE4RXaPDE/B8un451mFo4ceF//7JnI
gImWovw5KnI0CXe98Zw1XOkyOldEHPqoAo0j2d0/WcY39+M883mIji/KdF0YptO4
COVy4936IBLg0/llTpqSl0nQ8sVrR8jHEZFjSFKmXzF59TxI
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:20:56 2025 by rpki-client