Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd2a4b81-a65b-3cb3-9f9e-930000e999a9.roa
File:                     fd2a4b81-a65b-3cb3-9f9e-930000e999a9.roa (raw, json)
Hash identifier:          wWZkEtXTAqZ5viCd4FPysVKi9rp3alYJTVvzwhX/YEc=
Subject key identifier:   38:E6:DD:F5:9B:34:91:96:56:E0:09:3F:20:ED:C8:9B:F7:B8:DA:FC
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E104F07BE3B99C82701B94280
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd2a4b81-a65b-3cb3-9f9e-930000e999a9.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     36629
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:07:be:3b:99:c8:27:01:b9:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=529ea00b-6554-4182-8b50-a4f1dd21c330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:55:f5:f2:3c:92:e2:3c:b4:b6:41:68:23:29:
                    f6:ea:d7:7a:aa:21:a0:89:b0:36:6d:53:03:0b:55:
                    dd:15:87:15:50:f9:18:6d:fb:f9:48:b7:31:91:58:
                    41:44:e7:1e:65:15:e0:45:cd:9b:cf:43:c8:52:91:
                    ec:53:57:d5:2e:f8:da:3e:cc:d5:d4:af:81:21:ae:
                    65:05:41:90:19:cd:a1:ff:d8:e9:8f:c9:42:42:91:
                    d9:16:be:65:76:37:26:e5:a3:84:e6:ed:79:aa:aa:
                    0a:7e:30:cf:1a:27:16:84:7b:75:b9:39:37:14:06:
                    61:51:ba:49:15:d9:84:0b:57:17:af:e5:08:c5:dc:
                    43:eb:fc:fd:9f:9a:22:bb:84:36:89:fe:6e:aa:ab:
                    4b:21:40:c2:52:e3:33:da:b3:ae:f9:a3:24:e8:3a:
                    78:4d:8f:2c:8a:db:f7:b2:c8:e4:b5:30:30:dd:a5:
                    92:4a:ac:d0:f5:6b:6b:ad:fa:38:e0:79:79:db:da:
                    46:c7:83:a4:d3:e7:50:83:41:79:82:10:4c:cf:55:
                    b1:46:92:26:18:40:e7:c7:02:c6:50:21:3f:e3:ca:
                    2e:85:15:98:f4:d7:de:6d:8a:eb:95:e0:48:63:59:
                    70:93:3d:02:96:9a:77:2c:7f:1c:f3:68:22:03:70:
                    07:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E6:DD:F5:9B:34:91:96:56:E0:09:3F:20:ED:C8:9B:F7:B8:DA:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd2a4b81-a65b-3cb3-9f9e-930000e999a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:62:e8:86:3e:98:ce:72:e2:b2:ec:87:b1:de:ec:5c:c8:36:
         bc:2c:78:40:b9:31:b1:1c:16:0e:8c:67:9a:16:4c:0c:ac:c5:
         b4:1a:c0:ad:eb:ff:3d:e0:ad:dc:43:3e:e1:17:41:1a:4c:2a:
         8c:9a:97:55:29:b9:d4:58:44:64:cc:fd:37:9f:40:c6:56:6d:
         11:ef:47:2b:ca:a7:2f:e4:67:aa:25:cd:48:08:ec:7f:18:cb:
         ea:87:c1:52:76:96:1d:07:05:3c:06:c8:6c:0f:72:96:c0:cf:
         f9:c3:1b:14:a8:6b:30:f4:d3:ba:88:0d:22:69:62:5b:74:bf:
         3f:b8:2d:f3:c7:86:ed:36:2c:b4:0b:41:15:ca:35:d3:da:6a:
         d0:84:ef:b9:78:12:87:af:8f:a5:4a:87:d8:51:e3:a0:6d:7e:
         9a:57:11:19:e2:23:d1:fc:c5:a9:38:5f:3b:93:e1:79:62:a0:
         87:64:25:d0:22:27:bb:7b:7c:ff:08:cb:40:65:4d:4a:dc:5e:
         bc:e3:ea:83:34:e5:71:36:a4:3d:5c:bc:91:5e:88:56:07:4d:
         db:64:c0:fa:b5:c0:e3:78:2b:8d:f2:25:13:97:cb:87:70:2c:
         86:d2:e5:0d:d2:13:c0:cc:6e:5f:2b:31:80:62:fb:7e:08:75:
         19:2b:30:74
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE4QTwe+O5nIJwG5QoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk
NTI5ZWEwMGItNjU1NC00MTgyLThiNTAtYTRmMWRkMjFjMzMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVX18jyS4jy0tkFoIyn26td6qiGgibA2bVMD
C1XdFYcVUPkYbfv5SLcxkVhBROceZRXgRc2bz0PIUpHsU1fVLvjaPszV1K+BIa5l
BUGQGc2h/9jpj8lCQpHZFr5ldjcm5aOE5u15qqoKfjDPGicWhHt1uTk3FAZhUbpJ
FdmEC1cXr+UIxdxD6/z9n5oiu4Q2if5uqqtLIUDCUuMz2rOu+aMk6Dp4TY8sitv3
ssjktTAw3aWSSqzQ9Wtrrfo44Hl529pGx4Ok0+dQg0F5ghBMz1WxRpImGEDnxwLG
UCE/48ouhRWY9NfebYrrleBIY1lwkz0Clpp3LH8c82giA3AHEQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFDjm3fWbNJGWVuAJPyDtyJv3uNr8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmQyYTRiODEtYTY1Yi0z
Y2IzLTlmOWUtOTMwMDAwZTk5OWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCJYuiGPpjOcuKy7Iex3uxcyDa8LHhAuTGxHBYO
jGeaFkwMrMW0GsCt6/894K3cQz7hF0EaTCqMmpdVKbnUWERkzP03n0DGVm0R70cr
yqcv5GeqJc1ICOx/GMvqh8FSdpYdBwU8BshsD3KWwM/5wxsUqGsw9NO6iA0iaWJb
dL8/uC3zx4btNiy0C0EVyjXT2mrQhO+5eBKHr4+lSofYUeOgbX6aVxEZ4iPR/MWp
OF87k+F5YqCHZCXQIie7e3z/CMtAZU1K3F684+qDNOVxNqQ9XLyRXohWB03bZMD6
tcDjeCuN8iUTl8uHcCyG0uUN0hPAzG5fKzGAYvt+CHUZKzB0
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:31:32 2026 by rpki-client