Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f1570ee3-8483-39d5-ac13-b001e2039143.roa
File:                     f1570ee3-8483-39d5-ac13-b001e2039143.roa (raw, json)
Hash identifier:          RujIyA5tmBI3bEXV//XYjvSz1S95wyFNGH8RynEj88M=
Subject key identifier:   D2:B5:E7:E2:81:8B:16:9D:59:BE:5C:3A:B7:FF:DB:4B:73:FE:24:A5
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E253F18016669AEAC6D33A280
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f1570ee3-8483-39d5-ac13-b001e2039143.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     36616
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:18:01:66:69:ae:ac:6d:33:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=1fda3058-8d10-4829-b19a-ec081760459f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:11:8c:65:25:2b:39:83:75:09:bd:dc:82:35:
                    50:80:3e:0b:61:f5:64:2a:71:50:8c:db:fa:2f:24:
                    ec:f7:af:9e:71:dc:12:7b:7d:bd:09:4f:93:5b:cb:
                    b7:ac:c5:d6:3d:3f:ba:2e:85:ac:87:91:ea:22:af:
                    4c:30:b4:cb:6c:3c:34:67:de:00:b0:01:0b:c8:3d:
                    59:0d:00:52:24:e3:74:a6:b1:49:f5:a7:f1:d3:c4:
                    71:0a:a6:1c:e2:cb:6c:59:bc:f9:c7:17:47:db:30:
                    0f:f0:4f:c3:20:ae:34:e0:38:ef:51:b3:27:45:3b:
                    e8:c8:2c:76:74:b2:21:c9:e3:fa:39:4e:11:1d:3b:
                    d8:9d:00:30:35:df:13:0c:2a:f5:d9:ca:52:0c:4f:
                    92:1a:42:75:a4:92:51:28:a7:42:58:41:f3:2d:9d:
                    2a:82:30:6f:6d:12:8f:76:75:0d:0a:ef:91:25:82:
                    6b:13:17:a2:a3:23:04:7e:be:b4:ad:8e:0a:9a:e1:
                    7e:ff:2d:b9:17:f6:b0:c7:0a:b6:5a:1b:9b:48:51:
                    69:e5:2b:8c:d5:07:55:0f:97:cf:4a:81:85:c8:15:
                    69:a5:21:87:29:76:6c:6d:ba:e9:ec:8a:d9:95:3c:
                    b4:b6:0b:dc:2f:e5:d0:77:d5:4c:d8:2a:ea:d1:dd:
                    e9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B5:E7:E2:81:8B:16:9D:59:BE:5C:3A:B7:FF:DB:4B:73:FE:24:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f1570ee3-8483-39d5-ac13-b001e2039143.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:d8:7d:60:69:88:99:ca:cf:6e:a5:ae:36:b5:95:f7:ce:ea:
         f9:13:44:09:f5:60:bc:f4:ed:b4:b2:fe:ac:3b:ef:68:cf:cf:
         5d:57:96:b3:2d:73:57:1a:a7:31:79:80:f6:da:34:20:29:1b:
         0c:dd:99:33:13:0a:be:60:59:42:7e:5a:11:ab:ee:a4:fe:18:
         95:9f:41:50:e4:d9:a0:c0:67:cd:6a:5b:0f:50:cb:f5:60:c7:
         9f:45:03:d0:b9:4d:5c:45:88:19:a7:23:c0:f3:06:78:38:d0:
         fd:b4:85:93:46:e0:b5:67:35:b6:f0:42:85:55:44:c9:f4:86:
         ae:42:26:10:49:f3:65:9f:76:bf:f0:14:3a:5c:37:35:f6:5f:
         16:dd:63:ba:53:e7:67:ec:73:e5:de:2c:c0:d0:80:ad:12:8f:
         88:31:a9:d7:37:1d:77:ac:c4:34:96:8d:f9:cf:4b:2d:33:37:
         0d:f2:09:40:e6:6a:70:e4:d9:53:d8:9e:51:94:04:f0:bf:f8:
         96:dd:7e:cd:c1:a4:61:55:db:16:1a:e6:88:98:b8:02:5c:d9:
         4a:21:86:39:23:71:57:84:7e:3f:2e:2e:a7:cd:d7:7b:cf:78:
         86:3b:34:88:92:e7:89:35:04:3f:fc:c2:82:1f:cc:44:0e:49:
         17:1d:a8:8f
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE4lPxgBZmmurG0zooAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk
MWZkYTMwNTgtOGQxMC00ODI5LWIxOWEtZWMwODE3NjA0NTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshGMZSUrOYN1Cb3cgjVQgD4LYfVkKnFQjNv6
LyTs96+ecdwSe329CU+TW8u3rMXWPT+6LoWsh5HqIq9MMLTLbDw0Z94AsAELyD1Z
DQBSJON0prFJ9afx08RxCqYc4stsWbz5xxdH2zAP8E/DIK404DjvUbMnRTvoyCx2
dLIhyeP6OU4RHTvYnQAwNd8TDCr12cpSDE+SGkJ1pJJRKKdCWEHzLZ0qgjBvbRKP
dnUNCu+RJYJrExeioyMEfr60rY4KmuF+/y25F/awxwq2WhubSFFp5SuM1QdVD5fP
SoGFyBVppSGHKXZsbbrp7IrZlTy0tgvcL+XQd9VM2Crq0d3pPQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNK15+KBixadWb5cOrf/20tz/iSlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjE1NzBlZTMtODQ4My0z
OWQ1LWFjMTMtYjAwMWUyMDM5MTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq
AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAY2H1gaYiZys9upa42tZX3zur5E0QJ9WC89O20
sv6sO+9oz89dV5azLXNXGqcxeYD22jQgKRsM3ZkzEwq+YFlCfloRq+6k/hiVn0FQ
5NmgwGfNalsPUMv1YMefRQPQuU1cRYgZpyPA8wZ4OND9tIWTRuC1ZzW28EKFVUTJ
9IauQiYQSfNln3a/8BQ6XDc19l8W3WO6U+dn7HPl3izA0ICtEo+IManXNx13rMQ0
lo35z0stMzcN8glA5mpw5NlT2J5RlATwv/iW3X7NwaRhVdsWGuaImLgCXNlKIYY5
I3FXhH4/Li6nzdd7z3iGOzSIkueJNQQ//MKCH8xEDkkXHaiP
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:34:55 2026 by rpki-client