Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1d4c686c-b92d-3a73-a4cf-3d8883bf5631.roa
File:                     1d4c686c-b92d-3a73-a4cf-3d8883bf5631.roa (raw, json)
Hash identifier:          fGBu6dCGVkpdJsJgYkjoXIUTvGHCuCBGiaMn8cplkWo=
Subject key identifier:   21:01:04:36:83:C0:A4:69:27:98:41:21:9C:94:E2:09:CF:22:A5:E5
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E253F1629BCEF178695631A7C
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1d4c686c-b92d-3a73-a4cf-3d8883bf5631.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     396586
IP address blocks:        2620:74:2a::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:16:29:bc:ef:17:86:95:63:1a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=ac0c3767-6e04-4f3f-9f71-4e886dffb6c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b1:6a:8e:ca:8b:fd:88:ad:d8:25:9c:b4:7b:
                    a9:1a:35:32:f6:a6:7a:05:e3:61:3c:57:2f:3e:65:
                    7b:a4:29:1d:b1:bd:f6:2d:71:dd:bf:99:26:bf:08:
                    bb:85:a2:fd:2c:07:db:25:51:ac:e5:90:0c:c0:3b:
                    b8:4a:d2:3a:b2:9a:6c:50:6e:12:a9:54:33:ee:cc:
                    f8:29:ac:07:76:63:09:da:4d:7d:53:e2:05:ce:87:
                    2e:5a:49:2b:8e:da:72:c1:a7:61:3d:b3:5c:69:3a:
                    5e:42:0b:c5:32:74:4e:2a:c8:29:7d:65:9e:69:06:
                    9c:ce:68:00:9c:30:64:a8:08:54:7e:22:cc:ca:74:
                    81:7b:e8:48:22:fa:93:3e:0c:20:4e:ba:f5:cb:b6:
                    59:2c:9a:ad:53:77:5c:3a:a7:e0:4a:44:30:55:86:
                    63:f3:84:aa:6c:ae:24:5e:50:69:f3:d8:19:2c:f9:
                    0e:e1:47:98:17:75:d1:40:43:1e:2c:e8:82:4b:e9:
                    9e:00:3d:51:b2:8f:e4:61:ad:c0:88:2e:ab:df:0e:
                    f8:1f:99:1e:06:35:17:3f:e3:be:63:f0:21:2b:e3:
                    0a:f8:1f:02:e5:90:fc:8c:23:59:66:6a:e9:1e:1f:
                    b5:54:ea:56:dc:ee:04:7b:8f:e0:7f:84:33:df:27:
                    3c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:01:04:36:83:C0:A4:69:27:98:41:21:9C:94:E2:09:CF:22:A5:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1d4c686c-b92d-3a73-a4cf-3d8883bf5631.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:bc:fc:22:3e:68:b2:07:28:4f:a3:31:cf:9f:a0:12:2a:69:
         c5:29:ab:c6:7e:d8:e6:8b:27:97:64:4f:8a:d1:f6:bd:9b:a4:
         a1:a4:73:f1:07:78:d9:a5:fa:22:9e:00:bd:ce:06:ba:44:5d:
         1c:83:81:9e:71:54:a3:27:1a:88:b1:0a:1d:33:38:e4:a3:88:
         b6:96:20:39:67:af:7c:ba:8b:f6:ca:3d:fc:df:a0:a1:54:bc:
         df:2b:13:35:1b:de:57:ab:b4:3d:4b:76:0c:30:78:cb:c2:76:
         4a:ff:9b:e8:c4:bc:63:18:73:62:4b:2b:74:75:20:9f:35:60:
         67:01:ce:4d:57:f4:41:32:5b:fe:76:1d:59:a9:df:bb:46:23:
         99:d7:20:92:86:24:14:67:f0:82:05:6f:c8:7e:a9:69:b2:e1:
         3c:61:bc:68:8b:3a:8b:19:e3:e0:d3:21:a0:2f:9b:b2:e0:5d:
         59:74:ee:b0:96:e8:21:b8:21:e8:40:69:b6:06:1e:c6:0f:9b:
         38:ef:49:5c:bb:0d:4f:9c:68:91:4a:30:89:90:dc:cc:9d:96:
         f9:d4:0d:54:a3:14:69:a8:dd:3e:a3:5c:21:e3:62:e7:e9:92:
         48:c4:d7:d2:5f:5b:68:ff:fa:c0:0d:c0:57:02:18:01:d3:f9:
         5e:83:5f:85
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE4lPxYpvO8XhpVjGnwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk
YWMwYzM3NjctNmUwNC00ZjNmLTlmNzEtNGU4ODZkZmZiNmMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7FqjsqL/Yit2CWctHupGjUy9qZ6BeNhPFcv
PmV7pCkdsb32LXHdv5kmvwi7haL9LAfbJVGs5ZAMwDu4StI6sppsUG4SqVQz7sz4
KawHdmMJ2k19U+IFzocuWkkrjtpywadhPbNcaTpeQgvFMnROKsgpfWWeaQaczmgA
nDBkqAhUfiLMynSBe+hIIvqTPgwgTrr1y7ZZLJqtU3dcOqfgSkQwVYZj84SqbK4k
XlBp89gZLPkO4UeYF3XRQEMeLOiCS+meAD1Rso/kYa3AiC6r3w74H5keBjUXP+O+
Y/AhK+MK+B8C5ZD8jCNZZmrpHh+1VOpW3O4Ee4/gf4Qz3yc8sQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCEBBDaDwKRpJ5hBIZyU4gnPIqXlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWQ0YzY4NmMtYjkyZC0z
YTczLWE0Y2YtM2Q4ODgzYmY1NjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAPvPwiPmiyByhPozHPn6ASKmnFKavGftjmiyeX
ZE+K0fa9m6ShpHPxB3jZpfoingC9zga6RF0cg4GecVSjJxqIsQodMzjko4i2liA5
Z698uov2yj3836ChVLzfKxM1G95Xq7Q9S3YMMHjLwnZK/5voxLxjGHNiSyt0dSCf
NWBnAc5NV/RBMlv+dh1Zqd+7RiOZ1yCShiQUZ/CCBW/IfqlpsuE8YbxoizqLGePg
0yGgL5uy4F1ZdO6wlughuCHoQGm2Bh7GD5s470lcuw1PnGiRSjCJkNzMnZb51A1U
oxRpqN0+o1wh42Ln6ZJIxNfSX1to//rADcBXAhgB0/leg1+F
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:46:32 2026 by rpki-client