Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c0a8a47e-5fee-3b96-bca8-72cb3594ca04.roa
File:                     c0a8a47e-5fee-3b96-bca8-72cb3594ca04.roa (raw, json)
Hash identifier:          q6+b84wgAPT2z9rT7HGy+7ahrEm8VUJI+fF635Im6eo=
Subject key identifier:   C3:23:69:F0:94:58:7A:36:8A:AE:69:84:79:B6:65:40:E3:B2:70:81
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F7E7DF00A965408C48C133D00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c0a8a47e-5fee-3b96-bca8-72cb3594ca04.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     396555
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:f0:0a:96:54:08:c4:8c:13:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=e0c8840d-bbf9-46f7-a6e9-427a780d63cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2d:de:9a:6c:89:67:f6:92:07:c3:d0:7e:f5:
                    24:7a:4f:be:31:ab:67:85:f9:26:4e:3b:05:5c:70:
                    ab:d1:6d:70:17:16:d1:d5:47:68:eb:db:f5:7e:b4:
                    fb:d9:1b:15:8f:93:47:d6:23:94:26:f2:d6:7f:77:
                    2d:44:8c:2f:cd:79:c6:e6:aa:71:59:26:7a:e8:a3:
                    15:13:2a:b3:e9:fa:af:05:40:92:28:f5:df:99:67:
                    e8:a1:5a:ec:fa:57:48:64:4b:f7:e0:48:e2:9b:92:
                    c9:45:9c:fe:3e:b1:d2:3b:67:3e:cb:05:c4:1c:12:
                    51:0e:93:a8:ab:1c:4d:07:ba:7d:25:bd:b1:c6:d1:
                    89:72:a1:98:a4:b3:cf:dd:60:72:c6:f1:ef:85:58:
                    d6:29:f1:cb:56:88:ae:e5:b7:d8:ff:72:aa:84:1f:
                    8a:b2:39:a0:21:f7:73:cb:9b:e8:e4:b9:51:04:39:
                    63:70:ae:62:0a:59:11:a7:d8:3e:e4:dd:5c:67:a1:
                    ea:b6:dd:bb:a9:43:ed:a9:9a:2b:6b:48:79:2f:26:
                    dd:69:af:cf:53:e8:dd:79:35:36:c5:2c:55:60:42:
                    81:c2:dd:fd:eb:d9:6d:d8:f3:41:d9:48:6b:90:61:
                    81:4a:fe:d8:3a:5c:95:9c:66:45:e0:0f:7e:53:45:
                    3a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:23:69:F0:94:58:7A:36:8A:AE:69:84:79:B6:65:40:E3:B2:70:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c0a8a47e-5fee-3b96-bca8-72cb3594ca04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:88:c2:9a:5c:94:51:5e:8e:03:b9:67:2f:8b:01:02:68:67:
         2a:f5:ad:9b:ee:47:d6:5c:5b:90:c2:e0:38:bc:97:68:b3:ea:
         ec:b1:f7:9b:71:aa:36:64:e3:37:09:c4:9a:91:c0:68:78:10:
         5c:fa:9a:4a:db:2f:df:6c:55:a3:76:60:26:cd:cf:2d:b4:49:
         e0:99:31:94:bb:7c:2f:bf:d2:5c:91:71:35:39:a6:8e:58:e9:
         a2:17:82:35:81:1e:b6:40:4e:ce:32:af:85:cd:1c:79:02:85:
         00:e8:d4:d4:a7:35:29:58:7a:f9:4b:76:c8:54:6e:af:2e:b0:
         3b:ca:df:46:06:31:93:91:e6:e5:c2:7a:db:51:50:0f:ac:ab:
         55:5a:45:1a:1b:69:25:00:2d:ea:8e:ba:19:2a:53:a4:19:76:
         aa:6c:4c:eb:82:6b:af:39:1d:a2:8f:2a:c9:aa:71:9f:2d:a0:
         66:0e:de:81:40:62:b8:99:3c:62:4f:89:5c:09:20:1f:2c:1f:
         13:53:57:d4:e0:7e:00:14:58:98:6b:fd:ad:4e:3a:c5:3e:46:
         b0:3b:a1:a4:19:62:4b:d2:d5:d4:3e:8a:1a:13:53:81:84:89:
         c5:1e:95:8d:a3:42:db:49:a7:e9:ec:a0:e2:6e:0e:43:2b:79:
         73:eb:10:bd
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9+ffAKllQIxIwTPQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk
ZTBjODg0MGQtYmJmOS00NmY3LWE2ZTktNDI3YTc4MGQ2M2NiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki3emmyJZ/aSB8PQfvUkek++MatnhfkmTjsF
XHCr0W1wFxbR1Udo69v1frT72RsVj5NH1iOUJvLWf3ctRIwvzXnG5qpxWSZ66KMV
Eyqz6fqvBUCSKPXfmWfooVrs+ldIZEv34Ejim5LJRZz+PrHSO2c+ywXEHBJRDpOo
qxxNB7p9Jb2xxtGJcqGYpLPP3WByxvHvhVjWKfHLVoiu5bfY/3KqhB+KsjmgIfdz
y5vo5LlRBDljcK5iClkRp9g+5N1cZ6Hqtt27qUPtqZora0h5Lybdaa/PU+jdeTU2
xSxVYEKBwt3969lt2PNB2UhrkGGBSv7YOlyVnGZF4A9+U0U6CQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFMMjafCUWHo2iq5phHm2ZUDjsnCBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzBhOGE0N2UtNWZlZS0z
Yjk2LWJjYTgtNzJjYjM1OTRjYTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAHiMKaXJRRXo4DuWcviwECaGcq9a2b7kfWXFuQ
wuA4vJdos+rssfebcao2ZOM3CcSakcBoeBBc+ppK2y/fbFWjdmAmzc8ttEngmTGU
u3wvv9JckXE1OaaOWOmiF4I1gR62QE7OMq+FzRx5AoUA6NTUpzUpWHr5S3bIVG6v
LrA7yt9GBjGTkeblwnrbUVAPrKtVWkUaG2klAC3qjroZKlOkGXaqbEzrgmuvOR2i
jyrJqnGfLaBmDt6BQGK4mTxiT4lcCSAfLB8TU1fU4H4AFFiYa/2tTjrFPkawO6Gk
GWJL0tXUPooaE1OBhInFHpWNo0LbSafp7KDibg5DK3lz6xC9
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:56:59 2026 by rpki-client