Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ee930ebf-de5c-3343-8464-509fa550c8e5.roa
File:                     ee930ebf-de5c-3343-8464-509fa550c8e5.roa (raw, json)
Hash identifier:          sR9X3RQJ5CndrQNxr8N9VkRAZXoNmRxFl1Oe9ymoeOg=
Subject key identifier:   F6:EA:6A:EB:69:06:95:6C:B7:47:53:F3:15:AB:6F:AE:6C:84:9C:94
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584CF587A92F17E8682FA9B9084A
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ee930ebf-de5c-3343-8464-509fa550c8e5.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     36617
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:a9:2f:17:e8:68:2f:a9:b9:08:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=f55957e5-ed7a-417d-be8d-6bf70a4ee402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:78:2d:27:e3:a6:0b:d6:9d:78:c2:e2:5f:19:
                    86:29:33:1f:4d:e3:a8:5a:40:4c:a1:d9:c8:f4:e0:
                    89:8a:4e:92:ed:89:2e:08:f2:a9:29:b4:4f:d3:58:
                    c1:8c:12:ae:fa:07:8e:12:86:43:f0:08:3c:e6:0d:
                    ed:54:05:94:27:68:0a:9d:e7:6c:d5:94:20:5f:cc:
                    fa:24:91:91:f6:1a:8b:00:94:21:89:56:08:7b:6e:
                    44:d6:70:fb:82:0a:0a:b3:2b:c0:99:11:7f:f0:af:
                    ea:41:f6:6d:93:2d:d7:3e:e5:ee:0b:f6:29:f7:a8:
                    52:1f:46:ae:b6:66:df:ba:81:22:8b:22:25:09:08:
                    2e:4f:22:11:b3:88:30:b5:78:62:f9:40:d4:c1:6f:
                    22:4f:9c:ed:79:6b:c7:72:21:4b:07:ec:b3:0a:7d:
                    a6:7a:42:e0:bd:84:0c:bc:10:15:ab:33:12:d0:53:
                    86:1b:05:b4:58:ae:51:b9:cb:c4:60:5e:5a:39:10:
                    a0:c0:02:f2:fd:ca:b3:f3:95:f4:7f:a0:4d:00:3f:
                    88:dd:12:f1:a6:fe:cf:6f:46:8f:18:05:22:bd:b2:
                    64:da:07:84:a2:8e:06:70:71:09:9b:64:76:35:52:
                    4c:3b:71:f1:43:fe:db:15:c5:16:b0:60:f6:31:f3:
                    c0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:EA:6A:EB:69:06:95:6C:B7:47:53:F3:15:AB:6F:AE:6C:84:9C:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ee930ebf-de5c-3343-8464-509fa550c8e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:c8:b9:01:5d:dd:b6:34:6a:88:0d:0c:15:02:95:e4:36:e9:
         85:0e:bc:78:1c:d5:40:9d:33:1d:33:5c:7d:9c:9f:3c:23:60:
         b6:ce:1c:8f:1c:0c:7c:d7:67:b5:fd:6a:e0:13:bf:f1:18:a3:
         b5:a5:cd:b2:bd:91:84:f0:09:10:ee:fd:2b:7b:be:c2:79:a5:
         e7:25:12:8a:ed:e5:5a:38:c9:ce:ef:15:6a:0d:47:c7:e6:4f:
         33:17:44:d5:28:09:ab:f6:c8:65:d6:31:11:f5:b1:19:d9:f4:
         2f:1c:12:76:73:d4:dc:81:5d:57:4e:c0:8e:7d:9a:76:1a:32:
         79:de:8d:3e:54:63:87:6e:50:d3:9d:cd:17:54:fd:69:de:30:
         0b:1f:36:5e:18:5a:8a:77:7e:b8:a2:fb:52:2e:0a:5e:ce:fe:
         24:1e:6e:e1:57:79:c7:9b:47:c3:9e:ee:0e:36:41:80:34:cf:
         a1:9e:35:b6:4d:f9:b5:1a:ed:aa:47:4c:67:2b:c2:02:15:c9:
         cd:2d:28:38:e1:d0:7b:9e:57:ca:5c:0a:1c:7f:9e:dd:00:fc:
         76:fa:52:05:81:8c:d7:49:27:e4:7c:f4:2e:93:3f:4c:30:63:
         e9:9e:a1:80:e8:ec:fa:62:f7:45:06:49:cf:30:1e:ea:37:76:
         34:ba:f0:54
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEz1h6kvF+hoL6m5CEowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk
ZjU1OTU3ZTUtZWQ3YS00MTdkLWJlOGQtNmJmNzBhNGVlNDAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAongtJ+OmC9adeMLiXxmGKTMfTeOoWkBModnI
9OCJik6S7YkuCPKpKbRP01jBjBKu+geOEoZD8Ag85g3tVAWUJ2gKneds1ZQgX8z6
JJGR9hqLAJQhiVYIe25E1nD7ggoKsyvAmRF/8K/qQfZtky3XPuXuC/Yp96hSH0au
tmbfuoEiiyIlCQguTyIRs4gwtXhi+UDUwW8iT5zteWvHciFLB+yzCn2mekLgvYQM
vBAVqzMS0FOGGwW0WK5RucvEYF5aORCgwALy/cqz85X0f6BNAD+I3RLxpv7Pb0aP
GAUivbJk2geEoo4GcHEJm2R2NVJMO3HxQ/7bFcUWsGD2MfPAwQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPbqautpBpVst0dT8xWrb65shJyUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWU5MzBlYmYtZGU1Yy0z
MzQzLTg0NjQtNTA5ZmE1NTBjOGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs
AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBwyLkBXd22NGqIDQwVApXkNumFDrx4HNVAnTMd
M1x9nJ88I2C2zhyPHAx812e1/WrgE7/xGKO1pc2yvZGE8AkQ7v0re77CeaXnJRKK
7eVaOMnO7xVqDUfH5k8zF0TVKAmr9shl1jER9bEZ2fQvHBJ2c9TcgV1XTsCOfZp2
GjJ53o0+VGOHblDTnc0XVP1p3jALHzZeGFqKd364ovtSLgpezv4kHm7hV3nHm0fD
nu4ONkGANM+hnjW2Tfm1Gu2qR0xnK8ICFcnNLSg44dB7nlfKXAocf57dAPx2+lIF
gYzXSSfkfPQukz9MMGPpnqGA6Oz6YvdFBknPMB7qN3Y0uvBU
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:03 2026 by rpki-client