Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/83d784a3-e8e5-3517-8f8c-54ea05f3df52.roa
File:                     83d784a3-e8e5-3517-8f8c-54ea05f3df52.roa (raw, json)
Hash identifier:          wUiea2/57KJFaM1qM113YjeqF+GpQ++4Z58ZES/wj9I=
Subject key identifier:   7C:7F:98:8C:07:50:26:45:AA:D5:5A:FE:A1:97:83:BD:EB:17:5A:A4
Certificate issuer:       /CN=74d22a1a-fc42-41ba-92e0-a233913b3c86
Certificate serial:       010D0C9F4328584E6373B840D0781B72EFB58E80
Authority key identifier: C3:D3:22:A9:74:F7:21:7C:96:FA:3E:27:A6:90:34:74:A6:75:8B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/83d784a3-e8e5-3517-8f8c-54ea05f3df52.roa
Signing time:             Sat 04 Jul 2026 15:46:42 +0000
ROA not before:           Sat 04 Jul 2026 15:46:42 +0000
ROA not after:            Fri 02 Oct 2026 15:46:42 +0000
asID:                     402586
IP address blocks:        2602:81d:e002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/74d22a1a-fc42-41ba-92e0-a233913b3c86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/74d22a1a-fc42-41ba-92e0-a233913b3c86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:63:73:b8:40:d0:78:1b:72:ef:b5:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74d22a1a-fc42-41ba-92e0-a233913b3c86
        Validity
            Not Before: Jul  4 15:46:42 2026 GMT
            Not After : Oct  2 15:46:42 2026 GMT
        Subject: CN=12291d3d-132c-4f5b-b248-4280bfb93faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:30:76:ad:07:32:43:8e:ff:80:ba:f2:4f:6a:
                    11:a3:27:d5:47:42:a2:9a:1d:a9:41:87:af:3c:bd:
                    de:b9:62:f5:e4:ba:6b:83:47:f1:fe:db:49:8f:b5:
                    d0:06:77:ce:d9:f1:06:aa:c0:97:04:09:02:8f:39:
                    b6:a6:d6:f1:dc:a3:ba:4c:b2:b5:1b:d0:86:3a:90:
                    4f:eb:17:44:9a:5f:3e:4f:0a:1a:42:ec:1c:30:37:
                    ff:b4:c0:82:9f:97:84:d5:1c:fb:af:66:78:de:2a:
                    f3:75:be:6b:40:b4:62:81:32:58:27:ae:50:da:28:
                    f5:69:a1:c2:29:e1:a0:30:8f:13:e4:0f:63:c4:c9:
                    02:ae:48:66:12:32:6a:de:4b:79:93:2d:cc:03:a4:
                    f0:9c:d5:36:98:a5:8c:62:aa:e1:6c:8c:6f:7f:f8:
                    d1:29:ff:c4:b7:f4:27:64:0a:92:52:56:a9:a2:c7:
                    99:8a:12:88:d5:34:3f:eb:43:11:a0:9e:d3:9e:46:
                    01:09:b3:99:39:85:bf:a9:f4:a1:4b:b9:c3:5a:e6:
                    33:5a:68:15:43:d2:33:3a:96:fb:9b:05:9b:e6:5a:
                    ad:7a:ba:ed:8d:c9:50:4c:92:62:5b:c1:1f:6e:7e:
                    73:85:c8:73:9f:dd:45:e5:64:70:f9:a7:32:de:5f:
                    98:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7F:98:8C:07:50:26:45:AA:D5:5A:FE:A1:97:83:BD:EB:17:5A:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/83d784a3-e8e5-3517-8f8c-54ea05f3df52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/74d22a1a-fc42-41ba-92e0-a233913b3c86.crl

            X509v3 Authority Key Identifier:
                keyid:C3:D3:22:A9:74:F7:21:7C:96:FA:3E:27:A6:90:34:74:A6:75:8B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81d:e002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:dc:1e:e3:8a:3b:ff:5a:32:09:e6:2e:19:a2:72:33:38:15:
         ed:af:2b:a5:28:36:21:b0:7d:13:b6:4b:46:70:bc:90:66:a3:
         6d:39:b2:4d:6d:0c:80:77:3c:cc:b7:78:1a:5e:fe:87:9b:a1:
         ef:9f:53:4b:04:4b:00:98:8b:e9:d3:46:56:34:aa:24:4b:9a:
         bb:1b:40:34:bf:7a:03:ad:92:e7:7b:d1:73:a8:bf:02:59:fe:
         d1:6c:00:1d:65:b7:25:7c:06:60:77:13:90:bb:e8:3d:3c:f1:
         ea:cf:96:d9:1f:0f:9f:fd:96:36:5a:fe:fa:8b:70:46:49:8f:
         66:d8:33:35:1f:23:4e:b0:c8:43:bc:7f:94:67:1c:20:05:63:
         9f:3d:5e:7c:6f:4e:d3:7c:4c:d4:65:27:a0:fb:43:19:7c:da:
         1b:99:95:26:b1:6b:bc:a6:26:40:18:2a:61:7d:f8:ca:43:50:
         d3:6f:95:ef:67:eb:b2:65:db:43:2f:da:ea:dc:fd:12:6f:a0:
         73:4a:2b:e6:ba:d8:0e:f3:94:4b:85:b2:e9:0c:1a:14:34:20:
         d9:ee:18:25:4f:11:d5:61:34:13:c7:32:f1:a4:3d:fa:7a:6c:
         e3:69:c7:24:a9:2e:1c:16:f5:62:ea:93:ca:be:99:ca:1f:98:
         a7:a8:db:e5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5jc7hA0Hgbcu+1joAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzRkMjJhMWEtZmM0Mi00MWJhLTkyZTAtYTIzMzkxM2Iz
Yzg2MB4XDTI2MDcwNDE1NDY0MloXDTI2MTAwMjE1NDY0MlowLzEtMCsGA1UEAxMk
MTIyOTFkM2QtMTMyYy00ZjViLWIyNDgtNDI4MGJmYjkzZmFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzB2rQcyQ47/gLryT2oRoyfVR0Kimh2pQYev
PL3euWL15Lprg0fx/ttJj7XQBnfO2fEGqsCXBAkCjzm2ptbx3KO6TLK1G9CGOpBP
6xdEml8+TwoaQuwcMDf/tMCCn5eE1Rz7r2Z43irzdb5rQLRigTJYJ65Q2ij1aaHC
KeGgMI8T5A9jxMkCrkhmEjJq3kt5ky3MA6TwnNU2mKWMYqrhbIxvf/jRKf/Et/Qn
ZAqSUlaposeZihKI1TQ/60MRoJ7TnkYBCbOZOYW/qfShS7nDWuYzWmgVQ9IzOpb7
mwWb5lqterrtjclQTJJiW8Efbn5zhchzn91F5WRw+acy3l+Y0QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHx/mIwHUCZFqtVa/qGXg73rF1qkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83NGQy
MmExYS1mYzQyLTQxYmEtOTJlMC1hMjMzOTEzYjNjODYvODNkNzg0YTMtZThlNS0z
NTE3LThmOGMtNTRlYTA1ZjNkZjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNzRkMjJhMWEtZmM0Mi00MWJhLTky
ZTAtYTIzMzkxM2IzYzg2Lzc0ZDIyYTFhLWZjNDItNDFiYS05MmUwLWEyMzM5MTNi
M2M4Ni5jcmwwHwYDVR0jBBgwFoAUw9MiqXT3IXyW+j4nppA0dKZ1i90wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi83NGQyMmExYS1mYzQyLTQxYmEtOTJlMC1hMjMz
OTEzYjNjODYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIHeAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA/cHuOKO/9aMgnmLhmicjM4Fe2vK6UoNiGwfRO2S0ZwvJBmo205
sk1tDIB3PMy3eBpe/oeboe+fU0sESwCYi+nTRlY0qiRLmrsbQDS/egOtkud70XOo
vwJZ/tFsAB1ltyV8BmB3E5C76D088erPltkfD5/9ljZa/vqLcEZJj2bYMzUfI06w
yEO8f5RnHCAFY589XnxvTtN8TNRlJ6D7Qxl82huZlSaxa7ymJkAYKmF9+MpDUNNv
le9n67Jl20Mv2urc/RJvoHNKK+a62A7zlEuFsukMGhQ0INnuGCVPEdVhNBPHMvGk
Pfp6bONpxySpLhwW9WLqk8q+mcofmKeo2+U=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:17:13 2026 by rpki-client