Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9a2f116-0c12-314a-b5f7-cef03a98dfa3.roa
File:                     d9a2f116-0c12-314a-b5f7-cef03a98dfa3.roa (raw, json)
Hash identifier:          g0OlxRYTiRl0hheIXgG1FuZs/VTRvjNI50w7wlPK90I=
Subject key identifier:   40:FE:82:A3:C9:B7:B6:FE:6B:DD:35:66:3F:B3:E4:4E:56:86:59:15
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E104F0C8644C7091F1386FD30
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9a2f116-0c12-314a-b5f7-cef03a98dfa3.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     22547
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:0c:86:44:c7:09:1f:13:86:fd:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=51397b06-c67f-4fe2-b400-26fae894a5a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9b:30:29:ae:80:e9:6b:0e:14:1a:83:dc:d5:
                    c7:0b:76:8e:ad:0d:b5:c5:e4:3f:b1:d2:ee:4f:5e:
                    e5:01:43:78:51:f8:55:4e:97:3e:cd:c5:4f:1f:84:
                    5c:f5:3e:ef:73:32:de:bd:0c:31:43:77:d5:14:a4:
                    a3:1b:7c:2f:f5:b6:4f:d9:51:4d:b3:12:3a:9e:6f:
                    c7:5e:14:3a:92:e3:e4:6a:4c:db:21:92:2f:20:88:
                    a2:3e:91:ed:c1:90:47:e2:38:88:f5:95:3a:8a:b8:
                    9c:90:d0:d2:b6:67:89:82:b9:8c:75:d9:63:40:b3:
                    ac:23:5f:17:36:01:02:03:43:4f:54:26:18:41:e5:
                    57:6a:56:63:40:9d:d5:8d:fe:8d:e6:e6:9f:3f:0e:
                    12:86:9d:35:a3:07:4b:54:1c:eb:ef:52:c5:fc:5f:
                    da:91:ab:cb:e4:a7:74:9c:5c:6a:1c:c5:8b:e5:87:
                    d0:2e:40:5e:cd:c0:91:7e:0a:de:56:07:ee:34:47:
                    e5:bd:df:7a:ca:ff:8f:c4:b9:29:42:f4:f6:d1:72:
                    0e:08:32:4e:0b:fd:81:7a:af:51:76:e7:b1:f1:ef:
                    7d:8d:68:67:45:03:ed:91:4b:f7:34:c4:68:57:c2:
                    4a:65:a1:16:a8:52:df:21:70:3c:cb:66:67:8d:24:
                    d5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FE:82:A3:C9:B7:B6:FE:6B:DD:35:66:3F:B3:E4:4E:56:86:59:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9a2f116-0c12-314a-b5f7-cef03a98dfa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:ab:f3:c8:27:fb:19:10:ff:43:91:e4:d1:e6:fb:0a:31:c8:
         cd:9c:03:9a:b5:8b:5e:0c:18:89:68:64:d6:ee:95:51:b8:01:
         2c:6d:de:d7:0e:d3:5e:f6:4d:fb:73:fb:58:bd:e3:83:14:78:
         b9:bd:84:bb:fc:3d:f2:6d:68:91:b8:82:a0:23:c6:48:9a:9f:
         99:d0:04:38:7d:18:86:af:01:34:22:7b:d5:82:7c:a7:a5:58:
         f9:1f:f3:ac:61:4a:c5:4e:00:87:1a:08:1e:ff:9a:a3:30:a3:
         f2:6b:c9:85:e7:3d:91:03:07:44:cd:ce:33:be:4d:93:6e:df:
         15:d0:79:70:31:e9:ac:29:90:9a:9d:8c:1a:2d:b9:05:bc:76:
         56:4d:2a:9a:fe:7e:a1:cb:5d:57:f7:64:3d:66:3a:96:11:f2:
         dd:6d:61:73:1c:7d:b2:f3:0a:00:50:c2:3e:15:e2:74:ac:23:
         9a:94:cb:a8:06:c4:2a:a0:3e:8d:e4:40:f4:5b:1b:c2:a9:83:
         86:25:dd:a9:c6:4b:7a:1f:c0:28:6b:ab:b6:c0:b0:7d:22:22:
         84:81:ba:45:2a:31:4b:ed:3e:2b:e8:29:19:fc:e9:eb:6b:3e:
         7e:ab:b7:1e:b5:7e:72:87:4b:a5:58:d8:81:67:87:6b:ab:ec:
         49:3d:e5:c6
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE4QTwyGRMcJHxOG/TAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk
NTEzOTdiMDYtYzY3Zi00ZmUyLWI0MDAtMjZmYWU4OTRhNWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5swKa6A6WsOFBqD3NXHC3aOrQ21xeQ/sdLu
T17lAUN4UfhVTpc+zcVPH4Rc9T7vczLevQwxQ3fVFKSjG3wv9bZP2VFNsxI6nm/H
XhQ6kuPkakzbIZIvIIiiPpHtwZBH4jiI9ZU6irickNDStmeJgrmMddljQLOsI18X
NgECA0NPVCYYQeVXalZjQJ3Vjf6N5uafPw4Shp01owdLVBzr71LF/F/akavL5Kd0
nFxqHMWL5YfQLkBezcCRfgreVgfuNEflvd96yv+PxLkpQvT20XIOCDJOC/2Beq9R
duex8e99jWhnRQPtkUv3NMRoV8JKZaEWqFLfIXA8y2ZnjSTVMQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFED+gqPJt7b+a901Zj+z5E5WhlkVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDlhMmYxMTYtMGMxMi0z
MTRhLWI1ZjctY2VmMDNhOThkZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCFq/PIJ/sZEP9DkeTR5vsKMcjNnAOatYteDBiJ
aGTW7pVRuAEsbd7XDtNe9k37c/tYveODFHi5vYS7/D3ybWiRuIKgI8ZImp+Z0AQ4
fRiGrwE0InvVgnynpVj5H/OsYUrFTgCHGgge/5qjMKPya8mF5z2RAwdEzc4zvk2T
bt8V0HlwMemsKZCanYwaLbkFvHZWTSqa/n6hy11X92Q9ZjqWEfLdbWFzHH2y8woA
UMI+FeJ0rCOalMuoBsQqoD6N5ED0WxvCqYOGJd2pxkt6H8Aoa6u2wLB9IiKEgbpF
KjFL7T4r6CkZ/Onraz5+q7cetX5yh0ulWNiBZ4drq+xJPeXG
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:19:49 2026 by rpki-client