Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f6952a8a-cf6d-359b-a9f1-f6105fd8dbdd.roa
File:                     f6952a8a-cf6d-359b-a9f1-f6105fd8dbdd.roa (raw, json)
Hash identifier:          4EsmzpoxSO7jOanT6wX/ZYMSWaKEbUNPp4qTi7zEPG8=
Subject key identifier:   11:01:33:98:CF:53:C0:57:A3:AF:6D:3F:F5:B0:1E:9C:7F:CE:65:0F
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E104F08EC2D47FBE4FC84EF00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f6952a8a-cf6d-359b-a9f1-f6105fd8dbdd.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     396561
IP address blocks:        2620:74:2b::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:08:ec:2d:47:fb:e4:fc:84:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=4e3a3ad9-b993-4792-9e9a-8cf419cb7337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3d:af:1b:0c:71:f5:61:dd:e7:c2:60:33:4d:
                    b7:ac:cb:4a:9c:c8:10:c9:7e:5e:e5:45:cb:59:54:
                    1d:7c:8b:81:f8:de:36:5c:29:56:10:0c:b1:31:09:
                    66:30:64:03:3f:c6:f9:18:1a:38:01:29:36:ff:a5:
                    12:e1:46:44:17:ea:64:bb:d3:24:5e:21:a3:10:a0:
                    7a:b6:59:56:d5:3e:68:b0:4c:2a:63:b2:6c:5d:37:
                    c6:1d:0e:a5:08:76:3f:5c:8b:03:e9:f4:2d:ee:8c:
                    ad:e8:f1:10:05:79:e0:fd:41:13:2a:37:1d:85:b8:
                    f8:fb:88:aa:19:fa:df:96:69:a6:6a:b2:f9:73:72:
                    da:6c:ac:69:8d:cb:86:af:9a:d4:a7:5a:dd:ca:07:
                    25:61:a8:f2:e3:02:48:49:2a:7f:ea:c3:90:d2:fc:
                    ea:bb:07:b2:bf:cc:5a:f6:fd:f1:60:19:be:66:48:
                    de:2a:86:ee:d8:28:f4:51:12:0c:eb:41:e1:de:45:
                    a5:04:65:b4:d6:ab:0c:3f:c4:85:5c:80:4b:db:c1:
                    86:64:de:b1:f4:3f:04:8a:99:fa:bc:dc:1e:70:cc:
                    dc:e8:41:9d:9e:1e:00:9f:29:04:1b:e9:38:28:57:
                    77:d4:f4:48:48:b4:72:f1:c0:22:55:ac:63:57:ca:
                    32:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:01:33:98:CF:53:C0:57:A3:AF:6D:3F:F5:B0:1E:9C:7F:CE:65:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f6952a8a-cf6d-359b-a9f1-f6105fd8dbdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:5e:42:ba:35:cb:b6:8c:b1:d6:3a:99:71:ad:0d:a8:8d:53:
         18:6b:f1:66:e2:fa:28:47:0f:4a:82:3e:f4:7e:ff:d9:af:12:
         a4:25:77:cf:a5:b3:df:6b:cf:fe:f3:36:3b:d5:d1:66:3c:e4:
         6f:55:3b:4c:d5:a7:55:52:87:2c:b3:aa:47:be:3d:dc:75:17:
         82:f8:a4:b7:83:d6:21:cf:bc:0f:eb:17:40:94:a9:6a:14:af:
         e3:51:31:df:7f:8e:3f:96:93:b7:a0:06:90:b6:42:4a:95:09:
         0f:15:ea:75:99:81:d7:51:90:8d:9e:d1:a9:c0:0b:be:8c:ff:
         45:6d:67:f6:ca:9b:68:f7:74:0b:21:0e:4b:98:2c:89:50:7f:
         fa:4b:f4:0d:f1:35:db:c6:5a:c3:ac:79:60:c4:53:49:87:62:
         b3:54:e1:7d:7c:33:75:a9:2e:a8:36:6e:3e:bb:42:94:70:f6:
         c2:98:97:c7:33:78:a3:02:d7:ca:96:8d:bc:06:41:04:40:3c:
         e7:8f:72:fe:23:52:3b:da:81:1d:00:3d:69:ea:24:06:30:03:
         4d:2e:c9:fb:c1:51:e0:30:fa:29:d3:21:43:a3:ba:20:3d:58:
         50:1b:ed:0f:4b:bf:84:36:04:f1:f1:89:f0:14:cd:b6:0b:57:
         b1:f4:3b:a1
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE4QTwjsLUf75PyE7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk
NGUzYTNhZDktYjk5My00NzkyLTllOWEtOGNmNDE5Y2I3MzM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD2vGwxx9WHd58JgM023rMtKnMgQyX5e5UXL
WVQdfIuB+N42XClWEAyxMQlmMGQDP8b5GBo4ASk2/6US4UZEF+pku9MkXiGjEKB6
tllW1T5osEwqY7JsXTfGHQ6lCHY/XIsD6fQt7oyt6PEQBXng/UETKjcdhbj4+4iq
GfrflmmmarL5c3LabKxpjcuGr5rUp1rdygclYajy4wJISSp/6sOQ0vzquweyv8xa
9v3xYBm+ZkjeKobu2Cj0URIM60Hh3kWlBGW01qsMP8SFXIBL28GGZN6x9D8Eipn6
vNwecMzc6EGdnh4AnykEG+k4KFd31PRISLRy8cAiVaxjV8oyuQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFBEBM5jPU8BXo69tP/WwHpx/zmUPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjY5NTJhOGEtY2Y2ZC0z
NTliLWE5ZjEtZjYxMDVmZDhkYmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr
AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAzXkK6Ncu2jLHWOplxrQ2ojVMYa/Fm4vooRw9K
gj70fv/ZrxKkJXfPpbPfa8/+8zY71dFmPORvVTtM1adVUocss6pHvj3cdReC+KS3
g9Yhz7wP6xdAlKlqFK/jUTHff44/lpO3oAaQtkJKlQkPFep1mYHXUZCNntGpwAu+
jP9FbWf2ypto93QLIQ5LmCyJUH/6S/QN8TXbxlrDrHlgxFNJh2KzVOF9fDN1qS6o
Nm4+u0KUcPbCmJfHM3ijAtfKlo28BkEEQDznj3L+I1I72oEdAD1p6iQGMANNLsn7
wVHgMPop0yFDo7ogPVhQG+0PS7+ENgTx8YnwFM22C1ex9Duh
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:26:41 2026 by rpki-client