Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8dd5d61d-9fc3-3c20-9ca0-760e1c327525.roa
File:                     8dd5d61d-9fc3-3c20-9ca0-760e1c327525.roa (raw, json)
Hash identifier:          skXiGTGeL/k0GCCRoAec77vgv/wmCPGz3/++hmwWZdA=
Subject key identifier:   D5:2A:DB:1E:E3:5F:93:AE:35:9A:3C:ED:E6:F5:31:01:A0:33:87:E9
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EA7885746C149F9843BB71500
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8dd5d61d-9fc3-3c20-9ca0-760e1c327525.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     40717
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:57:46:c1:49:f9:84:3b:b7:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f36d0025-c2ba-469e-b74c-4dba30f226c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:aa:5e:8b:d7:34:f2:e9:1a:fe:f5:07:25:8c:
                    a4:47:9e:26:52:25:84:4a:25:25:81:98:7c:26:ff:
                    ae:e8:46:5b:62:04:66:88:ff:07:15:75:4a:38:39:
                    0a:46:77:84:d0:c1:b3:2a:db:15:b7:23:42:d5:dc:
                    06:81:bf:35:d3:fa:38:4d:2a:0e:42:58:95:27:a4:
                    96:14:70:3f:95:16:90:90:e6:6c:5f:88:82:11:56:
                    0a:28:1e:93:b2:58:3b:33:eb:14:b3:35:42:b3:95:
                    e8:ba:13:fe:4f:ca:c3:ef:6d:3f:aa:a5:d7:31:c4:
                    12:77:60:bb:cd:e4:e7:22:bb:c7:43:d0:ed:51:21:
                    ce:72:cc:eb:7f:f2:cf:ed:a0:19:26:95:05:b3:53:
                    76:06:bf:79:e9:cc:cc:f8:96:7a:91:9b:e0:7e:b6:
                    e6:6d:35:e7:43:8e:85:00:ce:05:ae:89:f8:20:76:
                    2e:09:32:9c:5f:e3:66:d2:c9:33:cd:00:95:d1:ef:
                    4e:07:4b:bd:a0:7d:8b:34:d5:cf:60:2a:92:37:a6:
                    5c:b8:a6:f7:42:06:cd:0d:98:82:ae:a4:33:07:8d:
                    67:e0:e0:21:47:29:b4:3e:bb:9c:04:0e:b6:ae:0e:
                    f2:ed:ef:23:d7:cd:b3:7a:f6:3c:75:08:b1:41:5a:
                    fd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2A:DB:1E:E3:5F:93:AE:35:9A:3C:ED:E6:F5:31:01:A0:33:87:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8dd5d61d-9fc3-3c20-9ca0-760e1c327525.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:76:be:c0:8a:dc:c1:29:ee:b9:54:4e:65:72:1f:e8:12:3d:
         14:89:73:f6:39:6c:59:d8:ba:95:62:84:99:e9:36:87:18:65:
         ee:0d:11:8c:9b:b8:ad:21:bb:2a:6e:89:e8:61:bc:a3:74:15:
         38:e8:83:03:05:78:21:d2:c3:99:c2:e7:73:73:b2:30:21:b2:
         cf:19:5b:fb:15:36:c6:15:cc:0b:4e:3c:17:d9:1e:0f:7f:17:
         da:72:ee:47:6d:fa:99:f2:f8:09:70:4c:1e:1b:b8:94:12:d8:
         a1:53:4b:0e:84:23:f5:cf:b8:aa:dd:b4:fd:bf:42:86:90:76:
         ce:cf:19:29:bf:07:eb:3b:a3:56:62:c8:53:ee:99:e1:02:ad:
         82:40:bb:87:3b:65:ca:1e:25:54:e2:86:f3:cc:4f:2d:19:5b:
         6d:00:3a:a5:8c:f9:b3:dd:bc:64:17:fb:db:4a:65:7b:81:af:
         c9:42:37:a3:bd:81:da:14:0d:e5:33:03:b3:3b:22:69:b9:8d:
         d7:1f:db:2c:72:31:cc:db:5d:7f:a4:aa:94:89:f7:b8:bf:86:
         a0:b0:f9:69:46:c9:8a:70:b7:90:ec:1f:0d:47:c7:92:95:07:
         7a:8d:bb:ef:42:ed:6e:0a:ae:63:12:67:eb:cb:08:d8:99:7f:
         7b:c6:aa:aa
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6niFdGwUn5hDu3FQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZjM2ZDAwMjUtYzJiYS00NjllLWI3NGMtNGRiYTMwZjIyNmM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKpei9c08uka/vUHJYykR54mUiWESiUlgZh8
Jv+u6EZbYgRmiP8HFXVKODkKRneE0MGzKtsVtyNC1dwGgb810/o4TSoOQliVJ6SW
FHA/lRaQkOZsX4iCEVYKKB6Tslg7M+sUszVCs5XouhP+T8rD720/qqXXMcQSd2C7
zeTnIrvHQ9DtUSHOcszrf/LP7aAZJpUFs1N2Br956czM+JZ6kZvgfrbmbTXnQ46F
AM4Fron4IHYuCTKcX+Nm0skzzQCV0e9OB0u9oH2LNNXPYCqSN6ZcuKb3QgbNDZiC
rqQzB41n4OAhRym0PrucBA62rg7y7e8j182zevY8dQixQVr9OQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNUq2x7jX5OuNZo87eb1MQGgM4fpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGRkNWQ2MWQtOWZjMy0z
YzIwLTljYTAtNzYwZTFjMzI3NTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs
AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA8dr7AitzBKe65VE5lch/oEj0UiXP2OWxZ2LqV
YoSZ6TaHGGXuDRGMm7itIbsqbonoYbyjdBU46IMDBXgh0sOZwudzc7IwIbLPGVv7
FTbGFcwLTjwX2R4Pfxfacu5HbfqZ8vgJcEweG7iUEtihU0sOhCP1z7iq3bT9v0KG
kHbOzxkpvwfrO6NWYshT7pnhAq2CQLuHO2XKHiVU4obzzE8tGVttADqljPmz3bxk
F/vbSmV7ga/JQjejvYHaFA3lMwOzOyJpuY3XH9sscjHM211/pKqUife4v4agsPlp
RsmKcLeQ7B8NR8eSlQd6jbvvQu1uCq5jEmfrywjYmX97xqqq
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:43:18 2026 by rpki-client