Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a899b4-321a-378a-a29f-36469e6ae33a.roa
File:                     24a899b4-321a-378a-a29f-36469e6ae33a.roa (raw, json)
Hash identifier:          5moY8V0oaplngtLmohmHm/7zDmC4X+mBeWXvNBw8+Zo=
Subject key identifier:   0D:E4:A2:CB:58:CA:E5:3C:69:5E:69:03:AF:54:40:AE:40:EA:C4:67
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E104F077E42A389F9629AB140
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a899b4-321a-378a-a29f-36469e6ae33a.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     396615
IP address blocks:        2620:74:2b::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:07:7e:42:a3:89:f9:62:9a:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=f1a36ec9-d182-4218-9329-99b53b4a9142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:26:99:67:74:7e:85:71:c9:d7:2f:16:29:83:
                    8f:24:6e:44:7c:c2:bc:f7:a2:a7:ce:66:0f:0e:ce:
                    8c:65:ba:74:86:f2:16:43:88:c0:d5:79:4e:8f:d3:
                    b5:cc:8b:ec:7b:60:0c:7b:81:c9:eb:5b:a7:76:24:
                    b5:31:66:8c:da:be:d7:ed:01:4f:1d:e5:33:a5:03:
                    ec:dc:67:67:86:dd:a1:05:c9:e4:2f:8a:e8:7b:fd:
                    7c:c2:fe:9a:7f:0e:8d:6b:97:2a:cf:55:8f:92:d8:
                    ed:d2:b2:86:3b:44:a7:9a:36:18:b9:cc:f1:f7:c1:
                    23:55:fb:28:55:32:7a:2d:b3:3f:48:92:d7:13:dc:
                    63:a4:27:3f:f0:7d:b9:95:ca:86:6c:e3:aa:2b:51:
                    7c:6c:30:6c:8c:a0:bd:eb:7b:ff:ee:ae:d6:2a:67:
                    69:c3:e1:ca:f7:69:1e:53:9e:7a:c0:1e:b2:93:da:
                    e2:41:51:86:89:b8:80:1a:6c:3b:8a:07:b9:53:8a:
                    b4:5c:ec:7c:63:93:d6:ea:d2:df:c9:1b:e7:c0:e9:
                    ab:5d:00:7e:d4:28:45:7b:62:00:62:95:41:23:89:
                    25:ba:cd:55:0b:b1:83:a3:9e:74:ea:80:47:67:c8:
                    9c:f6:6e:3f:6a:77:60:0f:a0:08:54:07:8b:16:44:
                    e8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E4:A2:CB:58:CA:E5:3C:69:5E:69:03:AF:54:40:AE:40:EA:C4:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a899b4-321a-378a-a29f-36469e6ae33a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:84:94:29:39:32:b2:66:68:d1:2f:53:b8:69:95:ff:a6:cf:
         aa:c9:eb:c7:bc:1b:10:2c:26:5f:1e:35:14:87:bb:26:8a:38:
         44:af:46:32:e0:e8:54:f1:ee:cc:09:40:a5:e7:e8:de:a0:0a:
         f1:57:7b:a9:18:dc:fa:13:24:49:67:18:5e:9c:05:68:70:08:
         7e:56:02:0e:2c:fb:db:c2:3a:93:2b:6c:c5:61:87:8b:27:52:
         26:12:2f:49:7f:27:e2:ae:a8:f0:6b:6f:7b:65:63:df:1f:c6:
         c9:cf:21:ff:f5:c7:2b:5c:b6:f7:88:40:dc:fc:f9:02:f3:b2:
         b6:d7:be:cd:11:41:91:f3:20:73:ec:9f:eb:2e:d3:77:49:b0:
         16:dc:d6:b7:af:eb:b8:31:98:7a:4c:ce:92:2a:79:6a:8b:63:
         4d:6e:56:77:77:fb:3f:b3:10:d5:26:ae:9a:6e:98:11:09:da:
         80:34:1a:aa:df:81:75:28:69:49:ba:ca:ba:ca:c0:5d:84:18:
         9e:c6:7d:cf:89:08:54:38:d2:2d:6b:2d:39:c8:67:7c:a2:25:
         c2:82:16:e1:9e:82:ee:6c:38:50:c5:3d:2e:9a:25:fe:70:2b:
         f9:d4:ff:0d:58:52:6a:77:23:97:65:29:da:59:76:2c:6d:c7:
         25:73:ee:1c
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE4QTwd+QqOJ+WKasUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk
ZjFhMzZlYzktZDE4Mi00MjE4LTkzMjktOTliNTNiNGE5MTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiaZZ3R+hXHJ1y8WKYOPJG5EfMK896KnzmYP
Ds6MZbp0hvIWQ4jA1XlOj9O1zIvse2AMe4HJ61undiS1MWaM2r7X7QFPHeUzpQPs
3Gdnht2hBcnkL4roe/18wv6afw6Na5cqz1WPktjt0rKGO0SnmjYYuczx98EjVfso
VTJ6LbM/SJLXE9xjpCc/8H25lcqGbOOqK1F8bDBsjKC963v/7q7WKmdpw+HK92ke
U556wB6yk9riQVGGibiAGmw7ige5U4q0XOx8Y5PW6tLfyRvnwOmrXQB+1ChFe2IA
YpVBI4klus1VC7GDo5506oBHZ8ic9m4/andgD6AIVAeLFkTouQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFA3kostYyuU8aV5pA69UQK5A6sRnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjRhODk5YjQtMzIxYS0z
NzhhLWEyOWYtMzY0NjllNmFlMzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr
AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQArhJQpOTKyZmjRL1O4aZX/ps+qyevHvBsQLCZf
HjUUh7smijhEr0Yy4OhU8e7MCUCl5+jeoArxV3upGNz6EyRJZxhenAVocAh+VgIO
LPvbwjqTK2zFYYeLJ1ImEi9Jfyfirqjwa297ZWPfH8bJzyH/9ccrXLb3iEDc/PkC
87K2177NEUGR8yBz7J/rLtN3SbAW3Na3r+u4MZh6TM6SKnlqi2NNblZ3d/s/sxDV
Jq6abpgRCdqANBqq34F1KGlJusq6ysBdhBiexn3PiQhUONItay05yGd8oiXCghbh
noLubDhQxT0umiX+cCv51P8NWFJqdyOXZSnaWXYsbcclc+4c
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:53:40 2026 by rpki-client