Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ee7d711-b1e6-33df-b9ff-8495a6b78d8a.roa
File:                     9ee7d711-b1e6-33df-b9ff-8495a6b78d8a.roa (raw, json)
Hash identifier:          HHsIXvzm027NM34RqAtk6QE6LnaaEH8lZon5L6/CMF4=
Subject key identifier:   EF:7C:1B:93:4E:A9:83:07:4D:45:05:61:A7:26:2A:75:F4:BE:68:08
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D91C01A448161274B39A25600
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ee7d711-b1e6-33df-b9ff-8495a6b78d8a.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     397198
IP address blocks:        2620:74:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:1a:44:81:61:27:4b:39:a2:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=9cf9a334-9b18-42c7-9158-f49ab0d7d581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fd:f2:61:a0:a3:9a:3b:30:d0:bc:39:89:39:
                    30:3f:ae:5b:f3:a8:ab:18:33:f1:73:37:a5:f7:a7:
                    13:88:44:47:01:24:19:a9:c9:f9:fc:28:78:09:09:
                    70:52:d6:23:42:1e:eb:3d:98:be:3e:de:f7:0b:61:
                    6b:8f:40:60:c1:cb:40:d8:4a:05:9c:da:8a:4e:52:
                    89:6e:4a:d7:1c:2f:31:72:af:2a:ac:7d:3e:ec:2b:
                    c0:df:e9:da:d1:db:04:9e:9e:16:38:c8:d2:f0:95:
                    59:7e:9a:da:a6:05:03:d6:58:e1:f6:3b:d4:96:1f:
                    61:8a:92:f7:27:18:d8:f1:c3:fc:fe:cd:be:c2:9e:
                    f9:37:90:92:3f:18:08:aa:9c:2f:f8:a7:33:a1:d1:
                    82:61:f0:91:84:cb:52:bf:7e:95:8c:8b:0b:89:8a:
                    16:06:43:e3:24:4e:25:75:09:0d:1b:9e:13:c8:34:
                    0b:67:2d:00:f3:28:8f:d9:13:43:a0:f9:dc:16:dc:
                    56:b8:1f:8c:2e:38:3d:f5:43:ea:46:cc:8b:c9:0c:
                    0b:fc:9c:b4:6e:57:27:f2:c9:50:d5:7b:d0:97:43:
                    6a:d1:d6:67:56:5d:fa:41:6b:9e:28:d0:4f:54:b6:
                    96:74:83:e8:64:da:13:c6:05:b8:ea:26:22:fa:69:
                    41:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7C:1B:93:4E:A9:83:07:4D:45:05:61:A7:26:2A:75:F4:BE:68:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ee7d711-b1e6-33df-b9ff-8495a6b78d8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:29:90:84:92:36:16:a1:33:bb:c3:4b:4a:9d:17:78:f9:dd:
         06:81:15:96:bd:64:29:94:32:92:c8:8c:9b:db:a6:5e:61:a2:
         72:7b:44:75:28:9b:a9:b2:9e:4c:c2:ce:16:c3:f8:86:be:c3:
         2b:2a:81:29:78:ec:38:43:ea:57:a8:6b:37:04:08:a0:da:1c:
         52:a8:c8:2f:3a:23:46:09:76:8e:a6:d9:21:ea:3f:9b:cf:06:
         50:9a:be:a2:9a:91:65:04:6a:be:65:86:c3:9d:f1:7b:d1:02:
         b0:1e:ef:5e:b7:4e:80:1e:41:85:4e:85:24:c1:28:d1:32:90:
         5b:dd:cd:04:63:6d:0e:fb:48:ee:ad:de:15:df:9b:07:b7:78:
         4f:13:4e:34:3c:30:87:87:48:32:7f:dd:01:62:84:26:04:b6:
         dc:72:58:f6:42:3a:4c:e9:32:45:d0:ba:d1:ec:58:96:28:88:
         6b:01:a3:55:67:e1:6f:75:6c:81:86:ad:0e:1f:df:f2:1f:d9:
         90:83:0f:eb:9c:18:91:a8:22:f1:2c:13:89:65:25:9e:30:b7:
         66:e4:d1:bf:ea:34:27:c7:43:7c:29:4b:07:d0:1c:e2:48:a8:
         2c:61:79:ae:09:5e:7a:6e:54:d1:db:94:34:2a:b9:7b:7c:0b:
         b6:e6:0c:f8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2RwBpEgWEnSzmiVgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk
OWNmOWEzMzQtOWIxOC00MmM3LTkxNTgtZjQ5YWIwZDdkNTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof3yYaCjmjsw0Lw5iTkwP65b86irGDPxczel
96cTiERHASQZqcn5/Ch4CQlwUtYjQh7rPZi+Pt73C2Frj0BgwctA2EoFnNqKTlKJ
bkrXHC8xcq8qrH0+7CvA3+na0dsEnp4WOMjS8JVZfprapgUD1ljh9jvUlh9hipL3
JxjY8cP8/s2+wp75N5CSPxgIqpwv+KczodGCYfCRhMtSv36VjIsLiYoWBkPjJE4l
dQkNG54TyDQLZy0A8yiP2RNDoPncFtxWuB+MLjg99UPqRsyLyQwL/Jy0blcn8slQ
1XvQl0Nq0dZnVl36QWueKNBPVLaWdIPoZNoTxgW46iYi+mlBZwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO98G5NOqYMHTUUFYacmKnX0vmgIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWVlN2Q3MTEtYjFlNi0z
M2RmLWI5ZmYtODQ5NWE2Yjc4ZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAgpkISSNhahM7vDS0qdF3j53QaBFZa9ZCmUMpLIjJvbpl5honJ7
RHUom6mynkzCzhbD+Ia+wysqgSl47DhD6leoazcECKDaHFKoyC86I0YJdo6m2SHq
P5vPBlCavqKakWUEar5lhsOd8XvRArAe7163ToAeQYVOhSTBKNEykFvdzQRjbQ77
SO6t3hXfmwe3eE8TTjQ8MIeHSDJ/3QFihCYEttxyWPZCOkzpMkXQutHsWJYoiGsB
o1Vn4W91bIGGrQ4f3/If2ZCDD+ucGJGoIvEsE4llJZ4wt2bk0b/qNCfHQ3wpSwfQ
HOJIqCxhea4JXnpuVNHblDQquXt8C7bmDPg=
-----END CERTIFICATE-----
Generated at Wed May 13 03:19:25 2026 by rpki-client