Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8f836bb-29ac-3284-978c-e634cfcb8096.roa
File:                     c8f836bb-29ac-3284-978c-e634cfcb8096.roa (raw, json)
Hash identifier:          lQvkqCIjo7daOdGRjJws01tJoOf1bv6cTpbARf5FTTo=
Subject key identifier:   B9:72:98:01:D9:D2:25:B8:EC:2E:33:06:2F:17:56:39:E1:A4:20:76
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584DC29AF9FE9282270885E52800
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8f836bb-29ac-3284-978c-e634cfcb8096.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     20172
IP address blocks:        2620:74:2c::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:f9:fe:92:82:27:08:85:e5:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=fc28bfcd-cffd-4407-a4cd-69046e8d8623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:85:b6:d4:81:fc:46:fa:bb:6b:5a:12:22:55:
                    f8:e8:3b:95:ab:d1:51:d7:86:3a:6a:7f:e3:90:49:
                    87:bd:1d:02:d3:62:d9:15:a6:55:fc:7c:87:f9:16:
                    46:17:43:f2:2b:a2:c1:64:78:c8:16:16:54:00:f9:
                    57:82:05:b0:62:5b:2e:61:bb:e3:91:55:06:6b:03:
                    92:36:70:f7:84:02:21:fc:ad:cd:3f:8e:61:67:dc:
                    b6:a6:96:9c:56:46:0a:d4:c7:6f:3d:1f:3e:c6:1d:
                    5c:bd:2b:bb:c3:d9:be:b2:30:fd:c2:9a:6c:58:4c:
                    6d:8d:b6:43:8c:2b:e0:10:ef:9c:d2:ea:69:cc:0d:
                    73:9d:6c:90:e9:20:97:2f:61:0f:9f:b8:16:91:68:
                    1c:dc:71:bf:70:72:c6:e4:27:0c:6f:86:19:08:cd:
                    b4:8f:e2:53:90:a5:c5:33:98:a2:6e:ec:47:0f:5f:
                    99:3b:c3:fe:c9:37:e6:b8:0b:69:ba:3d:00:d9:55:
                    85:58:0d:17:ed:3c:0d:17:04:a2:a0:ad:6e:81:d8:
                    1e:7c:e5:3f:6a:e8:84:00:e0:4a:87:0a:6d:be:30:
                    5c:17:d2:fc:da:e3:1e:96:1e:ac:6b:70:87:4c:00:
                    a8:d7:4e:02:06:14:52:94:41:cc:7e:18:07:fb:88:
                    f1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:72:98:01:D9:D2:25:B8:EC:2E:33:06:2F:17:56:39:E1:A4:20:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8f836bb-29ac-3284-978c-e634cfcb8096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:b6:7b:7d:e5:20:71:bd:97:48:f6:1b:7d:d3:cc:ab:fa:62:
         12:f7:03:bc:44:68:f9:10:f2:60:c5:55:42:96:d0:c1:ee:a0:
         de:d6:39:84:64:51:2a:88:73:7f:8d:b4:b8:19:83:56:42:0e:
         40:d0:df:45:0b:d0:f4:e3:72:c0:36:6a:eb:fa:89:f6:1a:6f:
         fb:2e:c3:a0:67:ef:69:4e:be:46:41:6c:11:07:1f:70:7c:94:
         ea:c6:15:e0:73:55:59:7f:61:83:2d:67:26:6b:a2:97:16:72:
         18:4f:40:31:7d:b3:01:95:df:85:d0:1c:89:73:22:66:33:2d:
         da:44:f1:3d:2a:0f:9c:bb:c3:e7:ca:9c:a4:e3:44:dc:d4:d8:
         b1:4a:5c:4f:60:a5:d6:59:56:d0:94:d6:3c:99:88:90:04:10:
         92:d3:e1:0d:bc:07:9a:7c:11:31:76:b0:78:ef:9d:55:e9:40:
         dc:bb:e6:17:af:36:1c:cd:a5:28:e6:0f:42:fd:66:45:fa:e8:
         a2:ac:7a:0b:84:d4:2b:e3:20:61:e6:ac:b2:b8:4e:34:24:19:
         9e:68:78:8a:61:6c:dd:23:38:a8:8e:30:6d:11:85:8e:7a:3b:
         8c:73:f4:72:6f:0f:1a:ca:6d:5f:db:88:70:88:21:8d:f9:4a:
         82:2f:90:2a
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE3Cmvn+koInCIXlKAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDUwODAxMDAyNFoXDTI2MDgwNjAxMDAyNFowLzEtMCsGA1UEAxMk
ZmMyOGJmY2QtY2ZmZC00NDA3LWE0Y2QtNjkwNDZlOGQ4NjIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYW21IH8Rvq7a1oSIlX46DuVq9FR14Y6an/j
kEmHvR0C02LZFaZV/HyH+RZGF0PyK6LBZHjIFhZUAPlXggWwYlsuYbvjkVUGawOS
NnD3hAIh/K3NP45hZ9y2ppacVkYK1MdvPR8+xh1cvSu7w9m+sjD9wppsWExtjbZD
jCvgEO+c0uppzA1znWyQ6SCXL2EPn7gWkWgc3HG/cHLG5CcMb4YZCM20j+JTkKXF
M5iibuxHD1+ZO8P+yTfmuAtpuj0A2VWFWA0X7TwNFwSioK1ugdgefOU/auiEAOBK
hwptvjBcF9L82uMelh6sa3CHTACo104CBhRSlEHMfhgH+4jxjwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFLlymAHZ0iW47C4zBi8XVjnhpCB2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzhmODM2YmItMjlhYy0z
Mjg0LTk3OGMtZTYzNGNmY2I4MDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBftnt95SBxvZdI9ht908yr+mIS9wO8RGj5EPJg
xVVCltDB7qDe1jmEZFEqiHN/jbS4GYNWQg5A0N9FC9D043LANmrr+on2Gm/7LsOg
Z+9pTr5GQWwRBx9wfJTqxhXgc1VZf2GDLWcma6KXFnIYT0AxfbMBld+F0ByJcyJm
My3aRPE9Kg+cu8Pnypyk40Tc1NixSlxPYKXWWVbQlNY8mYiQBBCS0+ENvAeafBEx
drB4751V6UDcu+YXrzYczaUo5g9C/WZF+uiirHoLhNQr4yBh5qyyuE40JBmeaHiK
YWzdIziojjBtEYWOejuMc/Rybw8aym1f24hwiCGN+UqCL5Aq
-----END CERTIFICATE-----
Generated at Wed May 13 02:36:11 2026 by rpki-client