Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/99cb8fe7-e52a-32f7-94d5-61f95870046d.roa
File:                     99cb8fe7-e52a-32f7-94d5-61f95870046d.roa (raw, json)
Hash identifier:          RDxZwSWU+GMLyXZvf6av37B/eQyiky2LVocGJ895NPM=
Subject key identifier:   98:94:A7:C6:73:B0:90:26:2D:15:C5:52:7F:FA:DD:2A:AB:8E:52:77
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B715CDDD829B3F0228DAE2D00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/99cb8fe7-e52a-32f7-94d5-61f95870046d.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     396577
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:dd:d8:29:b3:f0:22:8d:ae:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=a8ded0ac-e4dc-46e7-a39b-6fdc5e05f99b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:10:5f:d1:c5:24:d9:4e:36:85:e6:63:0f:e1:
                    4f:93:23:1e:e5:f0:f0:c7:a5:c2:f8:aa:76:8c:f8:
                    a4:37:ed:47:ca:25:90:91:35:18:3a:27:d5:4f:a1:
                    a8:f6:ba:c8:a1:36:a2:4d:6e:84:e7:17:c3:16:09:
                    6d:7f:8f:22:2a:9e:59:ef:42:7a:46:b4:98:e7:ab:
                    e2:e3:49:25:4d:71:bb:d5:1b:d4:d4:4f:bc:2c:03:
                    b2:bc:56:f6:67:e5:e0:c6:50:74:0a:dc:50:6c:ed:
                    af:44:18:ef:0e:f2:fd:3b:cd:f4:7d:99:f1:66:0e:
                    00:a2:c6:a0:7d:9c:ed:82:a6:61:bd:21:e2:b8:a4:
                    80:da:94:37:47:01:10:36:ba:ef:fc:42:a1:30:aa:
                    8a:da:f4:69:a6:81:93:6c:bc:82:50:6b:3b:c1:c8:
                    be:ed:f4:45:73:f5:f0:19:29:65:ca:b5:6b:dd:3d:
                    e7:25:72:f8:6a:ea:4f:b6:a1:7f:c0:0f:83:ea:53:
                    f0:ec:63:3b:e0:72:92:c6:69:bb:7a:b0:8f:a0:5e:
                    a1:91:8b:aa:d7:71:95:2a:a7:d2:03:df:0a:3c:01:
                    7e:30:85:d9:ec:2b:c0:f1:b0:9a:cc:ee:a8:9b:b6:
                    d9:41:af:0c:eb:e6:12:11:b4:e0:84:f4:8c:4a:bd:
                    49:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:94:A7:C6:73:B0:90:26:2D:15:C5:52:7F:FA:DD:2A:AB:8E:52:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/99cb8fe7-e52a-32f7-94d5-61f95870046d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:1b:4c:fa:48:0d:15:8f:c2:60:23:46:a7:19:bb:13:71:82:
         fa:be:42:8b:de:c4:6d:24:ca:31:c7:9a:c2:03:e9:f5:58:46:
         27:25:d7:0a:ca:40:93:01:ae:b1:1e:bd:41:71:ec:e4:85:08:
         05:b2:53:ff:50:08:e4:e6:31:77:b8:2d:08:c3:8c:a4:d6:9a:
         39:9f:e4:17:ee:25:f6:21:70:85:e0:09:fc:b3:ac:cf:57:c4:
         7a:54:88:5a:a1:0e:1e:04:79:72:a8:85:50:5b:bb:b2:93:95:
         58:94:1f:0f:2b:97:26:58:d5:f5:56:fb:01:99:6d:b3:99:8d:
         08:28:e5:02:11:e9:dc:e7:ad:b7:86:2b:ec:64:90:3d:69:b9:
         3a:4a:5a:6c:cf:38:e3:17:5f:6e:c2:eb:41:b0:19:3f:3a:d1:
         e7:76:92:7f:32:28:bf:35:a7:b8:f6:15:60:5b:e3:4f:a2:f6:
         b0:0d:3e:4b:f5:85:5c:92:ba:9a:91:cd:54:9b:5f:c5:2a:5a:
         f1:9b:01:73:91:78:0a:c7:d0:7d:2c:32:b6:ba:17:66:fe:8b:
         31:51:ca:45:ce:ab:aa:75:ec:35:90:24:f2:69:fc:b7:ae:d9:
         4f:34:f6:2c:9d:51:27:b2:17:de:70:33:f2:71:5d:4d:70:7a:
         25:65:45:36
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtxXN3YKbPwIo2uLQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk
YThkZWQwYWMtZTRkYy00NmU3LWEzOWItNmZkYzVlMDVmOTliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhBf0cUk2U42heZjD+FPkyMe5fDwx6XC+Kp2
jPikN+1HyiWQkTUYOifVT6Go9rrIoTaiTW6E5xfDFgltf48iKp5Z70J6RrSY56vi
40klTXG71RvU1E+8LAOyvFb2Z+XgxlB0CtxQbO2vRBjvDvL9O830fZnxZg4Aosag
fZztgqZhvSHiuKSA2pQ3RwEQNrrv/EKhMKqK2vRppoGTbLyCUGs7wci+7fRFc/Xw
GSllyrVr3T3nJXL4aupPtqF/wA+D6lPw7GM74HKSxmm7erCPoF6hkYuq13GVKqfS
A98KPAF+MIXZ7CvA8bCazO6om7bZQa8M6+YSEbTghPSMSr1J8QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFJiUp8ZzsJAmLRXFUn/63SqrjlJ3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTljYjhmZTctZTUyYS0z
MmY3LTk0ZDUtNjFmOTU4NzAwNDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQABG0z6SA0Vj8JgI0anGbsTcYL6vkKL3sRtJMox
x5rCA+n1WEYnJdcKykCTAa6xHr1BcezkhQgFslP/UAjk5jF3uC0Iw4yk1po5n+QX
7iX2IXCF4An8s6zPV8R6VIhaoQ4eBHlyqIVQW7uyk5VYlB8PK5cmWNX1VvsBmW2z
mY0IKOUCEenc5623hivsZJA9abk6SlpszzjjF19uwutBsBk/OtHndpJ/Mii/Nae4
9hVgW+NPovawDT5L9YVckrqakc1Um1/FKlrxmwFzkXgKx9B9LDK2uhdm/osxUcpF
zquqdew1kCTyafy3rtlPNPYsnVEnshfecDPycV1NcHolZUU2
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:24:46 2025 by rpki-client