Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9045ee7b-046a-3637-9570-cb98d0c5a80b.roa
File:                     9045ee7b-046a-3637-9570-cb98d0c5a80b.roa (raw, json)
Hash identifier:          IJH6S0zkguP6yCV1BjkfmyE/L3d9Z8+jyfpQ0ZC0Fds=
Subject key identifier:   A5:07:80:66:9B:2D:11:89:BA:04:08:74:42:D9:BF:C1:DB:5F:D2:50
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EA2DFCC9D4334309C6DF95100
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9045ee7b-046a-3637-9570-cb98d0c5a80b.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     396580
IP address blocks:        2620:74:2c::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:cc:9d:43:34:30:9c:6d:f9:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=921bf7a7-a704-44f9-a596-ae7d0d222bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:55:ff:92:3a:0d:26:94:79:a5:88:0e:5f:aa:
                    64:b8:91:bf:00:37:28:49:b8:f2:ff:6b:36:0f:c9:
                    37:69:6c:14:e3:4b:6c:bd:d4:01:9f:42:30:01:e8:
                    62:69:6c:8f:47:d9:d5:84:9a:79:a1:b9:63:76:08:
                    1b:5d:e2:ee:3e:5f:7e:68:bd:94:29:1d:fc:02:fa:
                    5d:2b:03:b7:e8:5b:5c:8a:37:8a:f5:2a:6f:42:90:
                    45:cf:69:f7:9d:bf:5e:16:66:a6:80:9a:ea:f7:63:
                    d6:f0:1c:b8:5d:06:ff:7c:9d:00:94:c4:5a:ae:7a:
                    1d:f2:46:af:04:70:d2:44:22:9e:9d:87:58:2a:c7:
                    93:6b:1c:03:b7:11:0e:a7:33:82:c8:25:b2:a6:aa:
                    2c:27:3e:63:5a:f0:95:82:28:7f:18:d3:3f:fb:92:
                    b5:d8:3f:9c:8c:68:eb:94:d2:06:f2:ed:2e:c3:9b:
                    ef:93:1c:78:24:68:74:5b:74:5b:b9:1a:36:74:04:
                    00:df:f2:4b:8f:6b:27:50:97:24:4c:4a:e3:7c:ea:
                    bd:e1:4a:79:f7:33:81:e5:49:a5:40:4f:9b:78:00:
                    8b:b5:e9:bd:6f:b3:eb:23:a6:a2:f0:32:3a:99:af:
                    22:63:e1:fb:c7:35:a4:36:0a:e7:a2:09:7c:7d:1d:
                    f1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:07:80:66:9B:2D:11:89:BA:04:08:74:42:D9:BF:C1:DB:5F:D2:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9045ee7b-046a-3637-9570-cb98d0c5a80b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:f7:fe:e7:c0:19:56:aa:1e:bd:58:d4:c3:38:d7:32:bd:60:
         cd:40:62:9b:a0:97:ea:0b:12:0e:5d:e0:8e:c2:6f:6a:53:e3:
         75:05:d8:53:7b:c8:48:e3:4b:8a:f9:ba:55:c9:75:4b:8b:cc:
         77:fb:0e:3b:b6:03:11:1a:26:6f:2b:5c:16:76:93:56:dd:26:
         d7:40:f2:31:6e:64:89:0a:b7:a7:5a:d3:ac:f0:0c:90:f9:ba:
         63:99:5e:ad:97:15:ae:3d:69:08:57:19:72:4a:fc:44:f1:e4:
         a7:4b:87:83:37:78:c0:f9:af:c8:10:b4:02:c9:50:c9:a0:2c:
         ac:dd:5a:6d:a3:74:97:63:dc:13:5b:a4:18:5d:e2:fd:aa:b4:
         a9:f2:09:d0:b9:f0:85:fb:e0:ea:0c:53:a2:f4:a2:ad:7c:f4:
         70:8d:c0:d2:bd:44:0f:4c:ef:1c:35:95:e9:8f:c7:2a:70:8c:
         7b:b5:bf:66:d5:33:0e:96:4a:df:79:17:1e:6e:6a:5f:89:4d:
         b7:6e:01:6c:48:d7:da:fa:b2:ee:98:e2:04:36:38:31:01:6b:
         3b:2a:9d:71:52:7e:95:29:59:c2:0a:00:d7:7b:65:71:0f:26:
         60:a0:5a:a4:c8:b9:94:25:0b:59:5a:0c:5b:ca:64:31:cb:39:
         ed:ec:5b:46
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6i38ydQzQwnG35UQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDcyNzA5MDAxMloXDTI2MTAyNTA5MDAxMlowLzEtMCsGA1UEAxMk
OTIxYmY3YTctYTcwNC00NGY5LWE1OTYtYWU3ZDBkMjIyYmJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFX/kjoNJpR5pYgOX6pkuJG/ADcoSbjy/2s2
D8k3aWwU40tsvdQBn0IwAehiaWyPR9nVhJp5obljdggbXeLuPl9+aL2UKR38Avpd
KwO36FtcijeK9SpvQpBFz2n3nb9eFmamgJrq92PW8By4XQb/fJ0AlMRarnod8kav
BHDSRCKenYdYKseTaxwDtxEOpzOCyCWypqosJz5jWvCVgih/GNM/+5K12D+cjGjr
lNIG8u0uw5vvkxx4JGh0W3RbuRo2dAQA3/JLj2snUJckTErjfOq94Up59zOB5Uml
QE+beACLtem9b7PrI6ai8DI6ma8iY+H7xzWkNgrnogl8fR3xFwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFKUHgGabLRGJugQIdELZv8HbX9JQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTA0NWVlN2ItMDQ2YS0z
NjM3LTk1NzAtY2I5OGQwYzVhODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBv9/7nwBlWqh69WNTDONcyvWDNQGKboJfqCxIO
XeCOwm9qU+N1BdhTe8hI40uK+bpVyXVLi8x3+w47tgMRGiZvK1wWdpNW3SbXQPIx
bmSJCrenWtOs8AyQ+bpjmV6tlxWuPWkIVxlySvxE8eSnS4eDN3jA+a/IELQCyVDJ
oCys3Vpto3SXY9wTW6QYXeL9qrSp8gnQufCF++DqDFOi9KKtfPRwjcDSvUQPTO8c
NZXpj8cqcIx7tb9m1TMOlkrfeRcebmpfiU23bgFsSNfa+rLumOIENjgxAWs7Kp1x
Un6VKVnCCgDXe2VxDyZgoFqkyLmUJQtZWgxbymQxyznt7FtG
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:55:13 2026 by rpki-client