Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f63dfe73-8e14-310d-b837-998db06b2627.roa
File:                     f63dfe73-8e14-310d-b837-998db06b2627.roa (raw, json)
Hash identifier:          cmeFskV3+TJ6pg6mGhPUrxr28SrKFkhCMUFVCOm4PjI=
Subject key identifier:   D6:64:DE:9F:40:44:8F:87:29:3D:77:D5:73:09:47:80:8F:64:DD:0A
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584DE2D88B4121ADA9E2BE476880
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f63dfe73-8e14-310d-b837-998db06b2627.roa
Signing time:             Tue 19 May 2026 14:10:34 +0000
ROA not before:           Tue 19 May 2026 14:10:34 +0000
ROA not after:            Mon 17 Aug 2026 14:10:34 +0000
asID:                     397198
IP address blocks:        2620:74:20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:d8:8b:41:21:ad:a9:e2:be:47:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May 19 14:10:34 2026 GMT
            Not After : Aug 17 14:10:34 2026 GMT
        Subject: CN=a0a242c8-32ce-42ad-8917-e63d94b07f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c1:57:a8:00:f8:18:32:d5:63:19:a5:6e:c9:
                    65:88:e7:b7:c3:cc:35:84:e3:23:a2:2a:1c:6b:76:
                    3c:3b:0f:88:7b:8d:92:86:79:ba:c8:38:e7:68:b7:
                    d1:7b:cc:f3:3a:48:39:aa:bc:e5:6b:6d:1b:e0:bf:
                    72:f5:57:c4:aa:bb:a6:f3:74:ff:69:48:fb:b4:ee:
                    23:aa:8c:a3:fd:18:ac:5e:ab:bf:d2:33:42:bd:a9:
                    02:45:01:9b:02:b1:2e:97:3c:6c:57:38:ed:31:6f:
                    6a:63:8f:39:56:99:16:93:28:2e:a7:f6:a7:2b:cb:
                    8e:7e:3d:07:a1:6e:64:6b:8a:dc:9a:95:c0:12:77:
                    eb:da:e3:29:d4:2e:89:94:0f:7f:03:46:61:f2:28:
                    03:a4:6d:61:17:c6:92:20:52:4e:05:0e:e8:41:eb:
                    15:33:6b:31:39:e9:9b:b5:3d:df:42:64:9e:c0:61:
                    76:e8:66:51:2d:b9:39:4a:6d:cf:39:63:47:84:c7:
                    97:98:df:ba:9c:3b:3f:d0:90:b7:6b:ad:38:99:d5:
                    0d:02:2f:72:7e:cb:4b:f0:96:39:fc:43:9b:eb:1c:
                    4c:bb:2e:ee:3c:9d:1a:f9:7d:52:6d:5a:f6:36:6f:
                    3e:19:2a:59:dc:f9:84:c0:9c:63:ac:b8:a2:c2:e7:
                    fd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:64:DE:9F:40:44:8F:87:29:3D:77:D5:73:09:47:80:8F:64:DD:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f63dfe73-8e14-310d-b837-998db06b2627.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:66:39:0a:ea:f0:51:03:2b:27:60:c9:24:bd:f7:7a:8d:7e:
         6f:09:94:4c:23:ab:e2:d4:ec:7c:03:81:89:e8:d7:42:cf:a2:
         23:af:e8:62:da:0b:61:fd:c5:46:82:64:23:50:9f:3a:66:94:
         ea:a8:6a:ee:76:23:84:aa:fe:5f:36:ab:dc:83:61:d1:18:d5:
         46:37:01:17:63:77:aa:96:58:c6:cf:79:83:99:8d:87:ae:69:
         c1:ed:a4:73:cc:8e:31:6d:c2:3b:f0:bb:82:99:81:c5:d5:f5:
         cc:ed:05:d9:d0:87:7f:a7:8c:2f:9f:2b:13:63:11:10:3e:ca:
         00:3c:15:1e:59:e9:5e:8c:4b:a3:d9:db:b8:23:70:5e:02:88:
         4d:d0:b0:b1:af:d3:6d:ef:fa:10:0e:30:68:e7:0b:8b:e6:f9:
         fb:de:3e:b5:90:f7:b9:41:53:71:ec:e7:b1:57:c0:44:de:c8:
         63:43:6e:67:f4:71:b0:dc:3b:a2:1d:bb:d3:ca:93:df:18:86:
         4d:30:62:f7:ea:10:93:fa:ff:5f:e0:1e:01:36:6e:31:52:5d:
         37:93:a2:e5:08:3c:bd:a7:72:eb:17:85:f0:af:65:b8:f6:20:
         b0:fa:dd:a4:5e:e4:90:68:c4:15:2d:ce:a4:6a:9e:72:0c:87:
         37:11:c7:77
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3i2ItBIa2p4r5HaIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDUxOTE0MTAzNFoXDTI2MDgxNzE0MTAzNFowLzEtMCsGA1UEAxMk
YTBhMjQyYzgtMzJjZS00MmFkLTg5MTctZTYzZDk0YjA3ZjVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8FXqAD4GDLVYxmlbslliOe3w8w1hOMjoioc
a3Y8Ow+Ie42Shnm6yDjnaLfRe8zzOkg5qrzla20b4L9y9VfEqrum83T/aUj7tO4j
qoyj/RisXqu/0jNCvakCRQGbArEulzxsVzjtMW9qY485VpkWkygup/anK8uOfj0H
oW5ka4rcmpXAEnfr2uMp1C6JlA9/A0Zh8igDpG1hF8aSIFJOBQ7oQesVM2sxOemb
tT3fQmSewGF26GZRLbk5Sm3POWNHhMeXmN+6nDs/0JC3a604mdUNAi9yfstL8JY5
/EOb6xxMuy7uPJ0a+X1SbVr2Nm8+GSpZ3PmEwJxjrLiiwuf9UQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNZk3p9ARI+HKT131XMJR4CPZN0KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjYzZGZlNzMtOGUxNC0z
MTBkLWI4MzctOTk4ZGIwNmIyNjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHpmOQrq8FEDKydgySS993qNfm8JlEwjq+LU7HwDgYno10LPoiOv
6GLaC2H9xUaCZCNQnzpmlOqoau52I4Sq/l82q9yDYdEY1UY3ARdjd6qWWMbPeYOZ
jYeuacHtpHPMjjFtwjvwu4KZgcXV9cztBdnQh3+njC+fKxNjERA+ygA8FR5Z6V6M
S6PZ27gjcF4CiE3QsLGv023v+hAOMGjnC4vm+fvePrWQ97lBU3Hs57FXwETeyGND
bmf0cbDcO6Idu9PKk98Yhk0wYvfqEJP6/1/gHgE2bjFSXTeTouUIPL2ncusXhfCv
Zbj2ILD63aRe5JBoxBUtzqRqnnIMhzcRx3c=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:39:51 2026 by rpki-client