Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4857446-b975-344a-92ee-72145ac9e316.roa
File:                     c4857446-b975-344a-92ee-72145ac9e316.roa (raw, json)
Hash identifier:          nyHtuHbJd8cITbJypwR7A+45T6mvWt/tNgoJ0NBhY/w=
Subject key identifier:   DE:22:83:A1:5B:45:89:B6:5B:A9:3E:75:C3:F7:CC:88:0F:B7:D9:C6
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E815FBC0E8449D7781F110440
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4857446-b975-344a-92ee-72145ac9e316.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     7342
IP address blocks:        2620:74:83:101::7/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:bc:0e:84:49:d7:78:1f:11:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=90a4cebd-803a-462b-bd6f-01c1cb2e02f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4a:5e:9f:b1:8f:1d:a5:0d:4b:e7:68:db:b1:
                    da:36:5d:63:71:61:f2:73:0d:22:1f:75:57:d1:cd:
                    a9:97:8f:97:c8:79:18:ab:61:ca:64:ff:df:10:0a:
                    3c:91:57:33:c6:5a:c5:62:38:c6:d8:b4:63:90:24:
                    2c:8e:56:b3:02:a1:6c:5d:d5:12:c8:a7:30:1f:d0:
                    bb:64:29:0a:63:48:01:7d:dc:86:4a:7f:74:55:32:
                    61:95:42:c5:b4:71:52:1e:ac:2e:4d:a0:8e:93:43:
                    02:c5:63:98:74:2a:25:42:85:08:a4:6c:5c:0c:6d:
                    79:2a:41:c1:b0:9a:6b:41:2e:e7:f5:15:50:62:c1:
                    4f:65:e3:17:48:9f:2a:33:f2:e4:77:10:2d:76:f2:
                    08:1b:75:4c:52:bd:90:7e:c7:1c:a5:0d:cb:83:63:
                    d5:6f:76:ec:29:dc:8a:6e:5e:89:d8:0e:ac:de:aa:
                    4f:b3:33:5c:93:a1:4f:e9:88:2a:2c:92:52:05:46:
                    73:15:4f:42:79:f9:5c:f6:07:11:69:fa:93:cf:77:
                    cc:b9:c0:13:3b:1a:93:b1:cf:63:48:34:f2:1c:ff:
                    0d:54:aa:d5:47:cf:dc:17:a2:96:c3:5f:4e:51:1a:
                    7e:d0:7f:b7:d8:ef:a2:c3:ec:a4:fc:cb:ce:af:41:
                    52:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:22:83:A1:5B:45:89:B6:5B:A9:3E:75:C3:F7:CC:88:0F:B7:D9:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4857446-b975-344a-92ee-72145ac9e316.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:83:101:0:0:0:7/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:04:12:ba:2b:65:46:b1:f3:d6:71:0e:4a:3a:3f:4d:f1:0a:
         a8:d5:86:11:ec:f9:8d:7b:58:8e:72:f4:f5:d9:d6:f7:5a:17:
         9b:7d:15:20:de:c0:8f:ee:05:a2:6b:7b:8f:e1:27:be:65:9c:
         4e:b3:58:17:30:17:9b:7a:68:97:7c:eb:61:30:ba:cb:1f:db:
         5a:c3:ab:fc:77:ce:a2:b9:7e:49:de:5a:07:9a:ba:5e:83:e5:
         70:8c:ed:42:e9:0e:47:7f:4a:5d:85:e8:07:5a:bd:16:31:80:
         bc:95:9e:2c:76:f7:58:e8:1c:8c:7d:9d:21:f1:85:19:ec:4d:
         dc:a5:7e:35:c2:5c:d9:80:81:89:cc:66:36:47:65:f1:f3:13:
         c0:8a:ca:f3:20:02:dc:ba:af:8c:17:fb:f4:80:51:d3:90:d1:
         36:8d:56:fe:03:35:5c:ac:a1:42:b8:c8:89:63:e8:6b:25:74:
         c9:ca:22:c2:dd:b9:ef:71:e7:63:8f:8c:e4:a9:85:54:06:f8:
         66:d8:a5:80:00:b7:47:f2:e1:89:5b:5a:34:ae:c9:2e:16:8e:
         53:51:a2:52:21:b8:55:e5:21:2a:e9:6a:a3:89:2b:d4:ea:63:
         b2:bd:be:a3:2e:b6:d4:3a:e5:d3:a0:e7:b4:53:da:ae:2f:91:
         2e:bb:38:31
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6BX7wOhEnXeB8RBEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk
OTBhNGNlYmQtODAzYS00NjJiLWJkNmYtMDFjMWNiMmUwMmYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkpen7GPHaUNS+do27HaNl1jcWHycw0iH3VX
0c2pl4+XyHkYq2HKZP/fEAo8kVczxlrFYjjG2LRjkCQsjlazAqFsXdUSyKcwH9C7
ZCkKY0gBfdyGSn90VTJhlULFtHFSHqwuTaCOk0MCxWOYdColQoUIpGxcDG15KkHB
sJprQS7n9RVQYsFPZeMXSJ8qM/LkdxAtdvIIG3VMUr2QfsccpQ3Lg2PVb3bsKdyK
bl6J2A6s3qpPszNck6FP6YgqLJJSBUZzFU9Ceflc9gcRafqTz3fMucATOxqTsc9j
SDTyHP8NVKrVR8/cF6KWw19OURp+0H+32O+iw+yk/MvOr0FS4QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFN4ig6FbRYm2W6k+dcP3zIgPt9nGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzQ4NTc0NDYtYjk3NS0z
NDRhLTkyZWUtNzIxNDVhYzllMzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdACD
AQEAAAAAAAAABzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBOBBK6K2VGsfPWcQ5KOj9N8Qqo1YYR7PmNe1iO
cvT12db3WhebfRUg3sCP7gWia3uP4Se+ZZxOs1gXMBebemiXfOthMLrLH9taw6v8
d86iuX5J3loHmrpeg+VwjO1C6Q5Hf0pdhegHWr0WMYC8lZ4sdvdY6ByMfZ0h8YUZ
7E3cpX41wlzZgIGJzGY2R2Xx8xPAisrzIALcuq+MF/v0gFHTkNE2jVb+AzVcrKFC
uMiJY+hrJXTJyiLC3bnvcedjj4zkqYVUBvhm2KWAALdH8uGJW1o0rskuFo5TUaJS
IbhV5SEq6WqjiSvU6mOyvb6jLrbUOuXToOe0U9quL5Euuzgx
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:58:51 2026 by rpki-client