Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1e1bd161-42cb-3651-b2f8-81901c696ca2.roa
File:                     1e1bd161-42cb-3651-b2f8-81901c696ca2.roa (raw, json)
Hash identifier:          syijuUUXkPu2pUTFE9jiEz4HDBrMSRx9Fe+5zNLPcM8=
Subject key identifier:   10:AF:A4:09:DC:A2:2D:D6:31:63:2D:F7:8C:FE:D5:40:07:B7:4E:84
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F549D861998C351FC132425A0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1e1bd161-42cb-3651-b2f8-81901c696ca2.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     396593
IP address blocks:        2620:74:2b::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:86:19:98:c3:51:fc:13:24:25:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=d839f343-e236-4be4-b5b0-b8efd64434ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:02:e4:83:59:08:bf:42:e6:3a:49:50:19:bb:
                    3e:ce:1a:67:4c:70:7d:51:3e:a1:68:38:c9:b2:b3:
                    d6:37:a8:54:88:d4:2f:47:1b:cb:5f:66:8b:a8:e4:
                    c9:db:17:53:4a:a5:6a:af:af:87:da:de:47:72:c7:
                    c4:ac:50:61:c2:63:fe:62:25:1e:d5:bf:93:0b:57:
                    53:c5:d7:0a:e0:01:9c:b6:e5:51:49:31:48:31:b3:
                    94:94:bb:ec:56:7d:43:83:39:f0:69:43:93:19:25:
                    9b:1a:3e:ee:16:3a:4c:96:2b:8b:e2:b8:9c:ca:96:
                    4d:85:84:9e:ba:60:f4:ac:ee:a0:60:12:b1:ab:7c:
                    75:4b:b3:31:64:d3:dc:84:5b:63:b7:16:0d:b1:7b:
                    dd:ec:f7:3e:c4:54:8b:4c:76:3a:0a:a1:49:c0:16:
                    6e:af:85:20:c6:7a:1c:15:a7:64:c1:9a:33:3a:9e:
                    d1:5e:35:3f:1f:3c:c3:23:31:a0:22:9c:d0:1f:61:
                    17:2e:3c:a9:c6:dc:a1:db:18:4d:88:6b:04:0b:7f:
                    c9:06:0f:01:26:9b:21:6d:ac:94:2b:2e:3e:18:d9:
                    a8:83:8a:22:37:5b:40:58:60:bf:23:4e:ea:13:42:
                    18:eb:66:cf:46:b2:60:3e:94:fe:87:82:b7:be:07:
                    9c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AF:A4:09:DC:A2:2D:D6:31:63:2D:F7:8C:FE:D5:40:07:B7:4E:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1e1bd161-42cb-3651-b2f8-81901c696ca2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:ca:f5:b8:fe:db:25:ef:84:b7:f5:1e:aa:91:a8:f8:40:e7:
         c6:46:d8:6a:bb:be:47:d8:20:ec:4e:69:c7:eb:8b:ce:57:71:
         cf:76:65:4f:0e:bf:0e:c5:5b:d0:ac:0b:ae:40:92:0b:aa:1f:
         d0:0d:24:a2:4e:47:a8:ac:1e:2c:7f:1e:58:dd:18:27:c2:fb:
         2c:6c:50:43:c1:6c:56:12:9b:60:60:77:23:ea:87:55:73:fb:
         e3:da:1e:3d:04:98:67:b8:dc:cd:50:8b:eb:0c:67:47:da:63:
         76:a6:97:df:91:ea:36:d8:d1:39:5e:5e:b4:5e:ab:9b:03:6a:
         5b:b0:57:a2:6d:62:2e:29:7f:78:f9:e0:e9:4d:2a:ef:22:89:
         4e:df:a0:0a:f3:f0:92:7f:5f:a2:70:08:45:d6:f6:24:6a:c2:
         76:9c:b1:f8:6e:55:d4:f3:3a:06:81:cb:d3:8d:14:ec:44:08:
         b8:50:76:f8:76:ea:e0:ba:a2:16:35:f9:07:f1:14:53:18:77:
         91:eb:71:e6:9a:0a:66:21:7b:7f:1b:3d:fe:5f:1e:0a:2f:5b:
         af:e7:92:54:89:ab:26:87:c3:20:77:fb:ff:fb:dc:87:c0:70:
         20:76:e9:a9:e4:e5:e8:b1:55:e9:64:ac:53:9f:4f:47:1b:9f:
         48:1d:5e:eb
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9UnYYZmMNR/BMkJaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
ZDgzOWYzNDMtZTIzNi00YmU0LWI1YjAtYjhlZmQ2NDQzNGNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxALkg1kIv0LmOklQGbs+zhpnTHB9UT6haDjJ
srPWN6hUiNQvRxvLX2aLqOTJ2xdTSqVqr6+H2t5HcsfErFBhwmP+YiUe1b+TC1dT
xdcK4AGctuVRSTFIMbOUlLvsVn1DgznwaUOTGSWbGj7uFjpMliuL4ricypZNhYSe
umD0rO6gYBKxq3x1S7MxZNPchFtjtxYNsXvd7Pc+xFSLTHY6CqFJwBZur4Ugxnoc
FadkwZozOp7RXjU/HzzDIzGgIpzQH2EXLjypxtyh2xhNiGsEC3/JBg8BJpshbayU
Ky4+GNmog4oiN1tAWGC/I07qE0IY62bPRrJgPpT+h4K3vgecBQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFBCvpAncoi3WMWMt94z+1UAHt06EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWUxYmQxNjEtNDJjYi0z
NjUxLWIyZjgtODE5MDFjNjk2Y2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr
AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBeyvW4/tsl74S39R6qkaj4QOfGRthqu75H2CDs
TmnH64vOV3HPdmVPDr8OxVvQrAuuQJILqh/QDSSiTkeorB4sfx5Y3RgnwvssbFBD
wWxWEptgYHcj6odVc/vj2h49BJhnuNzNUIvrDGdH2mN2ppffkeo22NE5Xl60Xqub
A2pbsFeibWIuKX94+eDpTSrvIolO36AK8/CSf1+icAhF1vYkasJ2nLH4blXU8zoG
gcvTjRTsRAi4UHb4durguqIWNfkH8RRTGHeR63HmmgpmIXt/Gz3+Xx4KL1uv55JU
iasmh8Mgd/v/+9yHwHAgdump5OXosVXpZKxTn09HG59IHV7r
-----END CERTIFICATE-----
Generated at Tue Oct 6 11:34:54 2026 by rpki-client