Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e8305b95-975c-38ea-a00d-aeeaf3a324ed.roa
File:                     e8305b95-975c-38ea-a00d-aeeaf3a324ed.roa (raw, json)
Hash identifier:          rVFH9CSfkQFc0PtMFBDD5YUmTG1hsN7JYxVsG8NQAJI=
Subject key identifier:   16:96:94:5F:8D:46:E3:ED:67:CA:44:8E:9C:41:4C:76:5A:F7:53:12
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EA2DFCA2A0577E80E39EC5F44
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e8305b95-975c-38ea-a00d-aeeaf3a324ed.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     397197
IP address blocks:        2620:74:2c::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:ca:2a:05:77:e8:0e:39:ec:5f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=fc82c3e0-a846-4006-a809-6a276a38f0fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:46:ce:96:a9:43:8b:fd:c9:f0:88:6c:db:e4:
                    86:d5:7f:fc:9c:7f:b0:3f:04:da:fd:6d:77:6a:dd:
                    54:00:c0:c4:dc:ba:48:0a:a9:c7:48:72:92:bd:a1:
                    49:24:cd:02:53:ef:b7:79:f3:b1:66:7d:a8:ae:4d:
                    93:98:b1:53:36:94:4d:09:6f:1f:1a:c9:35:83:a0:
                    0d:d6:b8:d3:0b:39:39:27:30:4b:e2:af:82:32:23:
                    75:7a:99:70:10:5c:02:d6:7e:17:1d:2e:aa:02:7e:
                    72:87:9e:a5:17:70:52:fd:c3:24:56:4c:7d:f6:1a:
                    a9:b9:b9:98:56:b9:e3:28:d3:65:04:ae:f2:48:c3:
                    b9:c2:54:1e:ad:38:9c:08:1d:3e:c4:d0:b6:06:31:
                    06:18:c0:70:d6:82:06:2b:51:76:90:d1:0d:44:d5:
                    9e:72:8f:3b:6e:9d:fd:74:26:b3:15:dc:2c:37:d4:
                    ff:74:96:65:fa:40:57:29:4f:dd:f3:e1:7f:0d:ad:
                    17:54:52:f3:8a:73:31:26:aa:4e:c7:b8:28:53:64:
                    76:59:03:c1:e0:7e:d9:13:3a:c3:e4:e7:fa:f6:e2:
                    a2:40:3a:07:53:5e:08:bd:20:d5:0a:6e:b5:c7:82:
                    7b:c7:0d:53:f4:4a:c8:ed:3e:a0:9f:aa:3b:db:24:
                    5a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:96:94:5F:8D:46:E3:ED:67:CA:44:8E:9C:41:4C:76:5A:F7:53:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e8305b95-975c-38ea-a00d-aeeaf3a324ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:44:be:06:89:e7:3e:95:dc:02:f5:59:b8:a6:6e:be:0c:56:
         7f:a3:70:04:ee:0b:37:ca:70:ae:e1:0c:16:4b:97:d3:83:c8:
         fd:56:f6:98:25:11:57:79:38:70:ab:97:0b:97:ed:82:f0:49:
         88:c1:3a:21:ae:9b:f0:f2:0c:3f:07:ee:e3:bf:00:3f:22:78:
         fd:da:2e:8c:9a:0e:02:03:60:76:9f:1e:20:ca:3d:93:63:a5:
         ae:11:31:80:ef:19:a0:4f:79:b3:2c:a7:a9:bc:a6:d2:7d:5f:
         68:79:25:92:d8:0b:82:9f:84:78:15:46:ca:ac:4e:77:e1:c1:
         72:1c:ea:48:11:a2:1b:11:e4:ad:68:e8:a0:2f:c0:28:c7:f1:
         f0:79:18:3d:10:bf:18:ad:5b:c8:6d:cb:1a:84:3b:56:83:19:
         b5:20:b6:bb:7b:82:0e:17:f7:c1:a1:ea:19:c0:0f:05:ff:90:
         10:a0:00:9d:82:14:14:d7:27:00:01:5e:fd:51:9f:8f:da:30:
         30:09:74:e2:2f:5f:bb:3c:29:f7:4c:5a:43:1c:71:45:6a:ae:
         a3:fd:07:18:c2:10:fd:c3:74:a1:ff:ab:e7:a0:fe:14:36:0e:
         a8:22:88:f9:a5:20:71:c2:f0:8d:fd:7c:ad:11:13:91:3f:ba:
         b5:8b:b3:48
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6i38oqBXfoDjnsX0QwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDcyNzA5MDAxMloXDTI2MTAyNTA5MDAxMlowLzEtMCsGA1UEAxMk
ZmM4MmMzZTAtYTg0Ni00MDA2LWE4MDktNmEyNzZhMzhmMGZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEbOlqlDi/3J8Ihs2+SG1X/8nH+wPwTa/W13
at1UAMDE3LpICqnHSHKSvaFJJM0CU++3efOxZn2ork2TmLFTNpRNCW8fGsk1g6AN
1rjTCzk5JzBL4q+CMiN1eplwEFwC1n4XHS6qAn5yh56lF3BS/cMkVkx99hqpubmY
VrnjKNNlBK7ySMO5wlQerTicCB0+xNC2BjEGGMBw1oIGK1F2kNENRNWeco87bp39
dCazFdwsN9T/dJZl+kBXKU/d8+F/Da0XVFLzinMxJqpOx7goU2R2WQPB4H7ZEzrD
5Of69uKiQDoHU14IvSDVCm61x4J7xw1T9ErI7T6gn6o72yRa3wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFBaWlF+NRuPtZ8pEjpxBTHZa91MSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTgzMDViOTUtOTc1Yy0z
OGVhLWEwMGQtYWVlYWYzYTMyNGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBNRL4Giec+ldwC9Vm4pm6+DFZ/o3AE7gs3ynCu
4QwWS5fTg8j9VvaYJRFXeThwq5cLl+2C8EmIwTohrpvw8gw/B+7jvwA/Inj92i6M
mg4CA2B2nx4gyj2TY6WuETGA7xmgT3mzLKepvKbSfV9oeSWS2AuCn4R4FUbKrE53
4cFyHOpIEaIbEeStaOigL8Aox/HweRg9EL8YrVvIbcsahDtWgxm1ILa7e4IOF/fB
oeoZwA8F/5AQoACdghQU1ycAAV79UZ+P2jAwCXTiL1+7PCn3TFpDHHFFaq6j/QcY
whD9w3Sh/6vnoP4UNg6oIoj5pSBxwvCN/XytERORP7q1i7NI
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:03:33 2026 by rpki-client