Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5ea5cfdb-7060-3339-825d-ede4424cb519.roa
File:                     5ea5cfdb-7060-3339-825d-ede4424cb519.roa (raw, json)
Hash identifier:          hRWb6pqJ8w9Am67DXgiwCoGmZU0xEt7dSW0WsAWH+iQ=
Subject key identifier:   8D:6B:AE:9C:8A:C9:04:CA:E6:69:6D:4B:15:75:41:7A:E9:9E:FC:9A
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F454296294AACED9CFE293D00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5ea5cfdb-7060-3339-825d-ede4424cb519.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     396606
IP address blocks:        2620:74:2c::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:96:29:4a:ac:ed:9c:fe:29:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=8b327a26-c837-45c3-babe-6b281a4e6389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3f:95:ff:6d:ee:9b:56:3a:99:ff:95:53:a0:
                    1d:1d:3c:5a:d1:d4:7a:60:ae:33:d6:dd:50:4a:f3:
                    55:aa:da:8a:82:ba:45:12:5f:8c:fa:8d:fe:7e:6e:
                    58:b6:85:c7:70:27:df:01:9c:2d:9d:c2:68:b6:b2:
                    5f:a0:c8:8e:13:22:79:41:4b:ac:01:3b:9b:10:fb:
                    4b:f7:ef:d4:fb:f9:36:bf:5c:88:32:ec:c4:d7:7d:
                    81:03:7d:33:a2:ce:98:e2:2e:77:fe:d3:f7:49:72:
                    73:9e:ca:92:31:65:a6:88:dd:bd:36:e9:e3:b8:63:
                    22:d7:6d:79:fa:5a:dc:3f:3e:e0:35:e1:1b:f5:2c:
                    5b:1d:40:22:64:4b:c2:e8:72:e6:f7:e1:96:7e:f1:
                    c3:38:d7:da:88:3d:f7:59:e4:80:13:e7:91:7b:9e:
                    af:43:02:34:a2:9a:da:41:e7:0d:d9:c4:ad:9f:21:
                    56:7b:47:3f:cc:66:f2:76:d3:72:4f:cc:14:df:cb:
                    98:a6:7e:2f:5e:87:e6:08:8f:12:e2:e1:f3:6b:26:
                    82:0d:d9:ca:0b:58:56:28:c9:dc:67:81:be:61:7c:
                    f3:02:20:e1:68:36:26:5e:19:48:99:e6:7a:39:d4:
                    c0:a6:0e:62:4c:12:3d:da:bd:31:43:45:1b:a1:00:
                    9a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6B:AE:9C:8A:C9:04:CA:E6:69:6D:4B:15:75:41:7A:E9:9E:FC:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5ea5cfdb-7060-3339-825d-ede4424cb519.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:9c:5e:6c:8d:bb:35:7a:53:bd:f3:83:1e:45:5d:1f:79:da:
         f5:96:ee:d5:a1:e7:96:62:07:03:fa:3c:bc:0a:10:33:07:e3:
         bf:a5:33:9a:f3:c4:d9:40:34:4a:45:43:bd:ea:8d:61:c8:0f:
         eb:a6:ec:53:29:25:e3:cf:e4:4f:1b:eb:76:c4:47:d6:c6:94:
         d7:c8:c9:3e:06:f7:fa:51:8c:1d:94:81:10:39:ac:b0:54:27:
         84:f2:f0:cc:27:e0:89:15:68:3f:d0:64:e6:74:cf:66:bf:b5:
         d5:10:ec:7e:54:fb:74:38:ac:91:5d:60:9a:36:6b:c6:c0:69:
         ff:e3:7e:c2:f9:8b:59:e1:b1:5c:e0:2c:33:d8:34:6b:c3:f1:
         3f:1d:d1:da:53:90:9b:90:da:16:64:47:a1:88:e7:3c:d5:a6:
         b3:29:91:c5:0a:42:83:99:c1:fb:69:ff:3b:71:f4:4d:95:7f:
         11:d2:5c:14:2e:4c:f4:5e:a3:19:1a:7f:d5:b5:ac:74:00:65:
         c8:43:ee:a9:0b:17:81:38:f6:08:09:f3:ea:dd:c8:b8:03:f2:
         b2:16:45:dc:d7:0e:ac:5e:be:13:2a:cb:43:40:8f:a9:89:5d:
         be:be:69:6d:d5:8f:1a:8d:9c:2a:12:0c:60:02:48:5f:d9:28:
         3b:10:fa:0f
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9FQpYpSqztnP4pPQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk
OGIzMjdhMjYtYzgzNy00NWMzLWJhYmUtNmIyODFhNGU2Mzg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD+V/23um1Y6mf+VU6AdHTxa0dR6YK4z1t1Q
SvNVqtqKgrpFEl+M+o3+fm5YtoXHcCffAZwtncJotrJfoMiOEyJ5QUusATubEPtL
9+/U+/k2v1yIMuzE132BA30zos6Y4i53/tP3SXJznsqSMWWmiN29NunjuGMi1215
+lrcPz7gNeEb9SxbHUAiZEvC6HLm9+GWfvHDONfaiD33WeSAE+eRe56vQwI0opra
QecN2cStnyFWe0c/zGbydtNyT8wU38uYpn4vXofmCI8S4uHzayaCDdnKC1hWKMnc
Z4G+YXzzAiDhaDYmXhlImeZ6OdTApg5iTBI92r0xQ0UboQCalQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFI1rrpyKyQTK5mltSxV1QXrpnvyaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWVhNWNmZGItNzA2MC0z
MzM5LTgyNWQtZWRlNDQyNGNiNTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAknF5sjbs1elO984MeRV0fedr1lu7VoeeWYgcD
+jy8ChAzB+O/pTOa88TZQDRKRUO96o1hyA/rpuxTKSXjz+RPG+t2xEfWxpTXyMk+
Bvf6UYwdlIEQOaywVCeE8vDMJ+CJFWg/0GTmdM9mv7XVEOx+VPt0OKyRXWCaNmvG
wGn/437C+YtZ4bFc4Cwz2DRrw/E/HdHaU5CbkNoWZEehiOc81aazKZHFCkKDmcH7
af87cfRNlX8R0lwULkz0XqMZGn/Vtax0AGXIQ+6pCxeBOPYICfPq3ci4A/KyFkXc
1w6sXr4TKstDQI+piV2+vmlt1Y8ajZwqEgxgAkhf2Sg7EPoP
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:56:49 2026 by rpki-client