Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/552278d8-2133-3e13-954f-7072392f1f46.roa
File:                     552278d8-2133-3e13-954f-7072392f1f46.roa (raw, json)
Hash identifier:          iBzIt0XLCb+iaPwvXxf8tqyqg/2nac0RlcNodtzwZQc=
Subject key identifier:   A8:FF:BA:21:0F:76:DF:11:9F:2A:07:DC:A4:00:50:EA:95:5D:93:3C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B3F1C648F7EDBD36EB64D1880
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/552278d8-2133-3e13-954f-7072392f1f46.roa
Signing time:             Fri 19 Sep 2025 13:00:41 +0000
ROA not before:           Fri 19 Sep 2025 13:00:41 +0000
ROA not after:            Thu 18 Dec 2025 14:00:41 +0000
asID:                     7342
IP address blocks:        2620:74:6e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3f:1c:64:8f:7e:db:d3:6e:b6:4d:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 19 13:00:41 2025 GMT
            Not After : Dec 18 14:00:41 2025 GMT
        Subject: CN=cb7bb8cd-6163-4d41-8249-8d4aacdd800a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5c:18:61:c5:8d:10:40:ee:fe:bf:12:27:11:
                    47:3a:a8:aa:ff:50:d6:ca:cf:ed:d7:b9:60:bf:36:
                    e9:93:bc:93:f8:3b:2c:11:d4:3c:bb:a2:0b:35:c1:
                    c3:2a:c8:ad:58:d8:a0:43:72:93:7e:c3:c6:5b:20:
                    67:ab:43:6a:79:7b:f5:d6:ba:1d:b1:75:54:f8:9d:
                    68:f1:9a:b0:95:ed:b4:9a:87:a8:2c:f4:37:f8:dc:
                    b9:27:05:49:dd:9a:3a:01:15:41:16:89:1a:50:a5:
                    2c:44:d1:aa:91:b7:5c:86:ac:a1:d0:bf:d6:b9:4b:
                    8e:9a:9b:69:a4:31:e4:19:4d:9d:03:c3:1e:77:11:
                    69:a2:37:c6:1a:21:26:ec:98:1b:ef:fb:a1:33:6a:
                    22:8b:08:52:89:28:ab:be:86:af:94:e2:bd:d5:f2:
                    e2:60:d8:e9:f1:a3:78:4b:f9:7a:1d:66:49:87:85:
                    c9:14:57:f2:43:89:06:4c:eb:f2:fd:a5:e0:0c:9b:
                    0e:9f:48:02:af:39:64:35:92:84:e6:3f:3c:0e:8c:
                    86:41:e3:28:81:56:6f:71:32:8d:8e:8a:fb:f1:ea:
                    de:34:06:7d:99:8e:40:e1:86:a3:ab:5f:4c:8d:97:
                    e6:54:3c:96:97:10:b2:ac:b6:be:2a:68:78:4c:8d:
                    0e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FF:BA:21:0F:76:DF:11:9F:2A:07:DC:A4:00:50:EA:95:5D:93:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/552278d8-2133-3e13-954f-7072392f1f46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:6e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:5b:02:75:b3:96:54:83:b8:ea:a3:e2:68:84:cb:74:c1:72:
         11:a6:22:93:bd:98:fc:ac:73:0c:ca:aa:81:2d:37:46:ed:3d:
         0b:b9:b6:56:7d:52:29:cf:ef:1c:b4:1e:2f:f9:80:37:f8:52:
         43:f9:bc:c1:4c:32:b7:f8:ad:d6:22:a5:bf:2c:c6:73:95:35:
         5e:cc:65:0a:e3:74:01:6d:26:85:4c:d0:14:d3:d6:70:23:65:
         e9:33:71:67:c0:2c:28:fb:77:b6:da:2e:18:35:42:74:5a:03:
         c8:96:73:68:5a:79:05:9d:dc:42:ec:f2:60:d6:4b:f5:5e:9b:
         27:ab:b9:3c:9b:a3:73:6a:57:5a:fb:96:70:b2:1e:24:de:5f:
         75:71:fe:80:e5:ee:39:42:27:09:bb:47:6b:06:64:98:fa:1a:
         4b:0e:c7:0c:ad:3d:8c:49:e6:9a:0d:62:7d:38:df:f0:b2:db:
         12:1e:c0:1f:ac:cd:7e:f4:30:0e:f5:0b:33:5f:11:00:2e:ba:
         03:1e:e3:f6:df:e8:5d:fd:e7:ba:3a:c9:01:82:ab:e1:4b:e8:
         7e:06:25:18:69:2d:4a:01:2b:29:a4:d0:4d:77:2a:21:fb:00:
         7b:43:ae:c4:e5:b9:ef:27:36:81:9c:57:3a:c7:a6:cd:f3:3c:
         97:ee:e6:8b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs/HGSPftvTbrZNGIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk
Y2I3YmI4Y2QtNjE2My00ZDQxLTgyNDktOGQ0YWFjZGQ4MDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFwYYcWNEEDu/r8SJxFHOqiq/1DWys/t17lg
vzbpk7yT+DssEdQ8u6ILNcHDKsitWNigQ3KTfsPGWyBnq0NqeXv11rodsXVU+J1o
8Zqwle20moeoLPQ3+Ny5JwVJ3Zo6ARVBFokaUKUsRNGqkbdchqyh0L/WuUuOmptp
pDHkGU2dA8MedxFpojfGGiEm7Jgb7/uhM2oiiwhSiSirvoavlOK91fLiYNjp8aN4
S/l6HWZJh4XJFFfyQ4kGTOvy/aXgDJsOn0gCrzlkNZKE5j88DoyGQeMogVZvcTKN
jor78ereNAZ9mY5A4Yajq19MjZfmVDyWlxCyrLa+Kmh4TI0OAQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKj/uiEPdt8RnyoH3KQAUOqVXZM8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTUyMjc4ZDgtMjEzMy0z
ZTEzLTk1NGYtNzA3MjM5MmYxZjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABu
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACVbAnWzllSDuOqj4miEy3TBchGmIpO9mPyscwzKqoEtN0btPQu5
tlZ9UinP7xy0Hi/5gDf4UkP5vMFMMrf4rdYipb8sxnOVNV7MZQrjdAFtJoVM0BTT
1nAjZekzcWfALCj7d7baLhg1QnRaA8iWc2haeQWd3ELs8mDWS/VemyeruTybo3Nq
V1r7lnCyHiTeX3Vx/oDl7jlCJwm7R2sGZJj6GksOxwytPYxJ5poNYn043/Cy2xIe
wB+szX70MA71CzNfEQAuugMe4/bf6F3957o6yQGCq+FL6H4GJRhpLUoBKymk0E13
KiH7AHtDrsTlue8nNoGcVzrHps3zPJfu5os=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:13:57 2025 by rpki-client