Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d8023cb-a721-307f-8149-84f0dc3ada11.roa
File:                     4d8023cb-a721-307f-8149-84f0dc3ada11.roa (raw, json)
Hash identifier:          +IGBuL04704l50I0bZ+mCJbCbPSqKG76YarQtsUJAzw=
Subject key identifier:   07:0F:2D:69:11:BA:42:40:2F:3A:2B:21:FD:18:56:98:FB:31:D6:70
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584DE2D88C631EBC48FDE8783B40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d8023cb-a721-307f-8149-84f0dc3ada11.roa
Signing time:             Tue 19 May 2026 14:10:35 +0000
ROA not before:           Tue 19 May 2026 14:10:35 +0000
ROA not after:            Mon 17 Aug 2026 14:10:35 +0000
asID:                     397199
IP address blocks:        2620:74:20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:d8:8c:63:1e:bc:48:fd:e8:78:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May 19 14:10:35 2026 GMT
            Not After : Aug 17 14:10:35 2026 GMT
        Subject: CN=7ab2db9c-396f-4dbf-8528-07ef5f632466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:33:85:3b:54:48:9f:2c:9a:17:4b:ce:10:3c:
                    5f:d2:89:95:6e:d6:7d:73:ca:e8:41:65:5d:34:cc:
                    5e:30:8f:e5:54:b9:ef:cf:d1:b7:7b:62:1b:b7:f9:
                    23:71:e0:55:a4:b4:12:67:a2:95:ea:a8:db:e4:be:
                    1e:72:63:71:e1:d9:bc:7a:20:98:ce:12:02:8e:89:
                    4e:d0:9a:a6:7d:93:7c:a3:43:c1:e8:17:c2:5e:1d:
                    ec:41:c5:cf:fb:d8:87:32:5c:56:d0:78:63:2b:e3:
                    84:b4:61:dd:d0:d4:6e:bf:4d:62:0b:a7:74:01:53:
                    3e:0a:e7:57:94:40:0a:ec:04:fa:2f:8f:62:6a:9f:
                    bd:72:a8:a1:aa:b1:3f:de:3a:1d:05:9d:ce:59:55:
                    6b:78:64:35:cd:8b:1b:48:30:5a:e2:a7:b5:d1:8b:
                    02:c3:4a:12:fc:35:65:e4:54:b2:4d:56:e6:35:fe:
                    e9:1a:99:4c:c1:25:16:c9:ed:f4:2c:e6:fe:e5:2f:
                    a5:b7:a5:46:e7:c2:06:49:94:fd:c1:45:d1:3f:03:
                    20:fe:5c:7d:f3:47:4b:25:d2:53:ec:e3:30:5d:4c:
                    3d:2c:97:2f:dd:0c:52:10:3c:b4:3b:67:9f:c2:24:
                    29:ca:99:bb:37:37:fb:36:eb:ce:9b:93:f7:af:5a:
                    a1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0F:2D:69:11:BA:42:40:2F:3A:2B:21:FD:18:56:98:FB:31:D6:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d8023cb-a721-307f-8149-84f0dc3ada11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:13:ce:be:b7:18:f3:35:f5:63:3d:f3:b0:1e:c9:ed:91:3e:
         86:44:5c:4d:3e:aa:e4:14:91:02:33:73:81:a2:f2:77:bb:8c:
         41:b3:43:dc:a1:7b:c7:10:ff:88:d1:33:8c:d3:c4:f8:9c:08:
         4a:6f:73:ab:fd:ed:c0:7f:4a:b4:9c:7e:3c:5b:7c:a1:13:5f:
         4a:26:1f:1e:02:a9:f5:d6:b3:76:1f:b8:c4:5c:52:d2:91:84:
         c5:57:51:e6:dc:82:88:4e:bf:24:93:68:56:c8:90:e6:01:47:
         71:19:97:1f:9c:b6:9b:48:8f:90:d5:46:2d:7b:8b:f7:df:29:
         24:69:28:c2:9c:5f:b2:81:c0:66:8c:f1:18:26:31:9c:a1:8f:
         9d:3a:ea:34:f0:11:42:24:24:11:7f:ab:9d:3d:b2:bd:72:02:
         04:2f:7e:4d:c4:0b:27:86:43:ca:26:6d:be:f7:73:1c:94:99:
         3c:2a:3a:ee:4d:39:d1:41:9e:44:76:53:d4:74:32:8f:dc:39:
         65:16:db:45:f9:d8:c7:aa:09:bc:f1:bb:6f:08:23:48:ea:b7:
         0c:a9:4e:f1:1b:75:79:41:df:00:33:94:85:f9:40:ba:ea:83:
         8b:cc:f7:ad:50:de:2f:9e:8f:e6:fa:27:ab:32:d8:4f:8c:1c:
         37:18:13:6e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3i2IxjHrxI/eh4O0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDUxOTE0MTAzNVoXDTI2MDgxNzE0MTAzNVowLzEtMCsGA1UEAxMk
N2FiMmRiOWMtMzk2Zi00ZGJmLTg1MjgtMDdlZjVmNjMyNDY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzOFO1RInyyaF0vOEDxf0omVbtZ9c8roQWVd
NMxeMI/lVLnvz9G3e2Ibt/kjceBVpLQSZ6KV6qjb5L4ecmNx4dm8eiCYzhICjolO
0JqmfZN8o0PB6BfCXh3sQcXP+9iHMlxW0HhjK+OEtGHd0NRuv01iC6d0AVM+CudX
lEAK7AT6L49iap+9cqihqrE/3jodBZ3OWVVreGQ1zYsbSDBa4qe10YsCw0oS/DVl
5FSyTVbmNf7pGplMwSUWye30LOb+5S+lt6VG58IGSZT9wUXRPwMg/lx980dLJdJT
7OMwXUw9LJcv3QxSEDy0O2efwiQpypm7Nzf7NuvOm5P3r1qhRQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAcPLWkRukJALzorIf0YVpj7MdZwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGQ4MDIzY2ItYTcyMS0z
MDdmLTgxNDktODRmMGRjM2FkYTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHMTzr63GPM19WM987Aeye2RPoZEXE0+quQUkQIzc4Gi8ne7jEGz
Q9yhe8cQ/4jRM4zTxPicCEpvc6v97cB/SrScfjxbfKETX0omHx4CqfXWs3YfuMRc
UtKRhMVXUebcgohOvySTaFbIkOYBR3EZlx+ctptIj5DVRi17i/ffKSRpKMKcX7KB
wGaM8RgmMZyhj5066jTwEUIkJBF/q509sr1yAgQvfk3ECyeGQ8ombb73cxyUmTwq
Ou5NOdFBnkR2U9R0Mo/cOWUW20X52MeqCbzxu28II0jqtwypTvEbdXlB3wAzlIX5
QLrqg4vM961Q3i+ej+b6J6sy2E+MHDcYE24=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:24:03 2026 by rpki-client