Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/008c2874-84a6-3501-9dd8-d25c4da4d0e0.roa
File:                     008c2874-84a6-3501-9dd8-d25c4da4d0e0.roa (raw, json)
Hash identifier:          LmeNN2jclBFFXbfM2NHYkgrgWfhX+Q/BtcfZ9rTmNY4=
Subject key identifier:   B6:BB:45:A8:E9:B4:20:5E:B2:BD:49:F4:0E:F7:4A:83:4A:32:66:6F
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EA7904EFD2545B3A7B7A6B680
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/008c2874-84a6-3501-9dd8-d25c4da4d0e0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36623
IP address blocks:        2620:74:20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:4e:fd:25:45:b3:a7:b7:a6:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5abf3bff-594c-414a-ba83-213ea8504329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a6:92:a2:48:58:a2:6c:a1:04:4e:b5:f5:f3:
                    ae:49:16:29:41:34:e6:a2:5b:14:72:00:25:63:7e:
                    53:1d:7e:3b:4b:04:38:6e:df:bb:09:c0:f8:ce:0c:
                    e0:a1:5f:9e:74:64:a9:8d:91:2e:c7:e8:bf:2e:7f:
                    bd:4d:bf:64:81:03:82:82:3c:d8:b0:60:87:0c:0a:
                    aa:d7:2d:35:6c:a7:70:a6:1d:d8:81:3b:96:c4:41:
                    e7:82:20:c7:6c:0c:df:ec:ed:c8:7e:fa:e2:04:fb:
                    bd:12:68:59:42:56:24:04:04:f5:c1:b4:c4:bd:58:
                    a8:56:18:e2:70:87:65:a2:ae:2f:a1:e8:1a:14:33:
                    19:e1:b3:30:8f:f2:28:e9:1a:71:57:f2:fe:d6:d1:
                    6c:2b:4d:97:66:d9:19:f7:81:78:be:49:1f:07:26:
                    24:fd:0c:9a:e1:ec:46:81:0e:51:08:72:b7:ab:d1:
                    76:1c:55:21:ea:b7:a2:d8:32:ca:ac:35:1c:6b:d8:
                    36:19:1f:72:3f:1e:80:ef:3c:32:84:d0:1a:46:f9:
                    3f:c1:42:72:aa:e3:1a:e9:63:bb:ea:85:7b:fb:e1:
                    43:70:cb:00:c1:dc:db:3d:5c:a6:4c:8a:96:d5:8d:
                    4d:2a:08:cf:7a:8d:63:c3:65:de:9c:aa:3b:2b:2e:
                    1a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BB:45:A8:E9:B4:20:5E:B2:BD:49:F4:0E:F7:4A:83:4A:32:66:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/008c2874-84a6-3501-9dd8-d25c4da4d0e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:2d:28:a6:fe:cf:e3:25:9c:6b:05:e4:18:d6:a1:84:d5:fe:
         c4:1f:2d:80:c8:53:0f:20:05:f5:ac:a4:24:f6:fa:59:60:1c:
         ab:ed:a7:73:5e:20:c2:14:ec:b1:c0:2a:b2:85:1d:4f:bb:b1:
         8e:22:af:c2:82:5c:02:35:ac:d6:ee:aa:37:ee:ea:06:fc:23:
         db:09:aa:93:5f:b6:b9:5d:7b:34:36:ca:bf:71:dc:76:e9:77:
         47:87:3c:f3:0a:9c:36:e4:ff:d0:64:36:d5:40:70:a5:30:79:
         4c:cf:36:b4:32:2e:77:2e:f3:7c:ce:87:62:68:79:e7:e5:65:
         22:dc:cf:38:39:52:35:33:81:af:32:b7:6b:e2:dd:e6:dc:46:
         5e:03:c9:13:ab:59:8a:42:df:ef:db:d5:fe:0a:f6:49:b2:f3:
         44:f7:3c:2f:a6:0d:2b:ca:b8:10:19:d9:61:0d:fa:84:55:4c:
         67:6a:df:b0:b6:fb:6f:6c:e5:6f:0e:8c:a8:53:6a:72:5a:b1:
         3e:34:fb:99:64:fc:48:d1:13:06:0d:f8:82:fe:5d:e7:73:c6:
         68:ac:91:64:fd:54:2f:00:2b:bc:13:6b:1e:79:e3:36:b8:9d:
         09:d2:59:97:30:12:d2:8a:7b:67:fe:70:4c:dd:bb:74:1e:92:
         53:6f:ff:6c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkE79JUWzp7emtoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NWFiZjNiZmYtNTk0Yy00MTRhLWJhODMtMjEzZWE4NTA0MzI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6aSokhYomyhBE619fOuSRYpQTTmolsUcgAl
Y35THX47SwQ4bt+7CcD4zgzgoV+edGSpjZEux+i/Ln+9Tb9kgQOCgjzYsGCHDAqq
1y01bKdwph3YgTuWxEHngiDHbAzf7O3IfvriBPu9EmhZQlYkBAT1wbTEvVioVhji
cIdloq4voegaFDMZ4bMwj/Io6RpxV/L+1tFsK02XZtkZ94F4vkkfByYk/Qya4exG
gQ5RCHK3q9F2HFUh6rei2DLKrDUca9g2GR9yPx6A7zwyhNAaRvk/wUJyquMa6WO7
6oV7++FDcMsAwdzbPVymTIqW1Y1NKgjPeo1jw2XenKo7Ky4aLQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLa7RajptCBesr1J9A73SoNKMmZvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDA4YzI4NzQtODRhNi0z
NTAxLTlkZDgtZDI1YzRkYTRkMGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGQtKKb+z+MlnGsF5BjWoYTV/sQfLYDIUw8gBfWspCT2+llgHKvt
p3NeIMIU7LHAKrKFHU+7sY4ir8KCXAI1rNbuqjfu6gb8I9sJqpNftrldezQ2yr9x
3Hbpd0eHPPMKnDbk/9BkNtVAcKUweUzPNrQyLncu83zOh2JoeeflZSLczzg5UjUz
ga8yt2vi3ebcRl4DyROrWYpC3+/b1f4K9kmy80T3PC+mDSvKuBAZ2WEN+oRVTGdq
37C2+29s5W8OjKhTanJasT40+5lk/EjREwYN+IL+XedzxmiskWT9VC8AK7wTax55
4za4nQnSWZcwEtKKe2f+cEzdu3QeklNv/2w=
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:35:16 2026 by rpki-client