Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1f73d68f-03a9-3341-bc02-2297a41ae5bb.roa
File:                     1f73d68f-03a9-3341-bc02-2297a41ae5bb.roa (raw, json)
Hash identifier:          4ur3ZBLvN2SuMd+/EqRKaDpwaIWsKiWcJWcFAQtDoRk=
Subject key identifier:   ED:45:7D:49:49:53:CE:19:C8:46:28:35:B2:BF:6D:2C:57:3F:9E:81
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EA2DFCDC884EB009C2F58AA80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1f73d68f-03a9-3341-bc02-2297a41ae5bb.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     36626
IP address blocks:        2620:74:2c::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:cd:c8:84:eb:00:9c:2f:58:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=a19f2f44-23d1-4318-9fac-1cb3c4788c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:37:a4:ad:a4:b3:c2:15:24:85:d1:40:78:f3:
                    de:b2:6a:8f:54:17:b9:96:f9:9f:dd:5b:9d:b9:98:
                    24:6c:11:23:0d:3a:0a:ff:5a:81:df:ae:1d:59:fd:
                    b2:28:1d:ec:17:dd:13:b3:f9:2d:a7:02:eb:5b:37:
                    1d:c4:da:b5:52:42:54:e5:20:f4:d7:ba:af:e0:32:
                    07:3c:3f:8d:43:2e:ab:bd:cd:6c:b1:d9:e0:99:36:
                    a6:a1:1a:7c:d7:9a:ac:20:bc:43:4d:48:79:ea:cc:
                    53:8d:4b:89:a8:e1:4e:60:4c:0f:08:2a:23:ec:bd:
                    96:a1:a9:f0:7d:b0:7f:2e:67:34:19:cc:3a:3d:f1:
                    eb:f1:fc:24:b7:84:b9:d2:81:ea:d1:2d:c5:51:5c:
                    ab:1e:2b:e4:b2:70:29:5d:3c:03:11:cd:54:47:e4:
                    e4:50:c5:f4:34:cc:ba:90:3a:d3:6f:c3:0c:74:51:
                    a1:9c:9f:ab:3e:5d:31:55:fc:2d:00:23:f2:d1:00:
                    6a:59:ac:91:4e:e0:7e:2c:38:76:55:ea:3b:ca:5e:
                    cf:82:a9:00:0b:a9:66:8b:f8:8f:8b:87:29:52:84:
                    78:24:3c:5b:89:86:79:98:ce:6c:fe:ce:b9:7f:f9:
                    53:29:c3:d1:6a:14:9d:3e:87:4c:bc:92:9c:7b:0f:
                    17:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:45:7D:49:49:53:CE:19:C8:46:28:35:B2:BF:6D:2C:57:3F:9E:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1f73d68f-03a9-3341-bc02-2297a41ae5bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:96:c9:0e:c5:41:16:93:59:b0:fc:32:9c:aa:5a:f4:5f:37:
         3c:85:dd:6c:58:6a:49:67:44:5e:94:12:7e:9b:44:70:d0:c9:
         ef:8c:3b:5c:df:6e:47:3e:8e:d3:65:0e:87:2a:43:ff:9a:16:
         72:48:b1:54:f5:ca:69:11:46:4d:4c:5e:61:55:a3:21:1e:13:
         2d:63:f8:6a:d3:98:29:bf:3f:3e:e3:0d:96:81:5e:1a:31:b9:
         35:9b:d5:57:d6:e6:7c:f4:d5:a4:76:d4:8b:de:d3:2d:e3:05:
         dc:db:af:89:54:79:02:27:d0:b5:3e:7c:3e:2b:e2:50:0c:67:
         d3:fa:aa:db:8a:4e:7b:f3:68:3e:c8:04:c4:1d:30:17:b1:fb:
         93:e1:4d:e7:a1:ef:8f:a2:b5:53:14:37:f5:00:75:6d:38:2b:
         e9:2c:33:3f:95:3a:ae:04:88:52:ff:d5:06:ba:93:55:f6:90:
         a1:78:f1:23:f2:84:ac:29:60:98:3c:e3:c2:1d:d6:85:cb:c6:
         b2:f9:4f:9e:ac:32:27:6e:b2:91:08:9c:4a:67:30:38:2c:92:
         b7:37:b3:6c:ce:73:b2:ac:34:46:6b:9f:6e:8e:17:ca:d5:5c:
         5c:b5:d3:06:6d:24:42:7b:d0:d3:a6:d7:a8:03:14:ad:a7:0a:
         b6:af:6e:83
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6i383IhOsAnC9YqoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDcyNzA5MDAxMloXDTI2MTAyNTA5MDAxMlowLzEtMCsGA1UEAxMk
YTE5ZjJmNDQtMjNkMS00MzE4LTlmYWMtMWNiM2M0Nzg4Yzg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8jekraSzwhUkhdFAePPesmqPVBe5lvmf3Vud
uZgkbBEjDToK/1qB364dWf2yKB3sF90Ts/ktpwLrWzcdxNq1UkJU5SD017qv4DIH
PD+NQy6rvc1ssdngmTamoRp815qsILxDTUh56sxTjUuJqOFOYEwPCCoj7L2Woanw
fbB/Lmc0Gcw6PfHr8fwkt4S50oHq0S3FUVyrHivksnApXTwDEc1UR+TkUMX0NMy6
kDrTb8MMdFGhnJ+rPl0xVfwtACPy0QBqWayRTuB+LDh2Veo7yl7PgqkAC6lmi/iP
i4cpUoR4JDxbiYZ5mM5s/s65f/lTKcPRahSdPodMvJKcew8XVwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFO1FfUlJU84ZyEYoNbK/bSxXP56BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWY3M2Q2OGYtMDNhOS0z
MzQxLWJjMDItMjI5N2E0MWFlNWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBalskOxUEWk1mw/DKcqlr0Xzc8hd1sWGpJZ0Re
lBJ+m0Rw0MnvjDtc325HPo7TZQ6HKkP/mhZySLFU9cppEUZNTF5hVaMhHhMtY/hq
05gpvz8+4w2WgV4aMbk1m9VX1uZ89NWkdtSL3tMt4wXc26+JVHkCJ9C1Pnw+K+JQ
DGfT+qrbik5782g+yATEHTAXsfuT4U3noe+PorVTFDf1AHVtOCvpLDM/lTquBIhS
/9UGupNV9pChePEj8oSsKWCYPOPCHdaFy8ay+U+erDInbrKRCJxKZzA4LJK3N7Ns
znOyrDRGa59ujhfK1VxctdMGbSRCe9DTpteoAxStpwq2r26D
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:13:19 2026 by rpki-client