Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e10990d-802a-331a-8309-39cdc5aa1189.roa
File:                     3e10990d-802a-331a-8309-39cdc5aa1189.roa (raw, json)
Hash identifier:          edlHYSzge/vHKKzVirauEr9zX/S2GC5Dg1sukMgPUR4=
Subject key identifier:   08:47:B7:6B:88:00:D3:68:BA:8B:66:FA:15:C1:DA:FE:5B:39:1F:D0
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B21CC3972512CCD854C663680
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e10990d-802a-331a-8309-39cdc5aa1189.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     397199
IP address blocks:        2620:74:2c::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:39:72:51:2c:cd:85:4c:66:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=1137be86-3a75-46a7-965c-7ed98a49d323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:80:87:a8:ab:b0:39:3f:6f:a1:a7:71:ce:d5:
                    50:53:b4:2e:2a:5d:2a:99:67:bc:16:55:19:ad:66:
                    95:4d:79:ad:13:f4:eb:be:b8:a4:43:d7:72:8d:ad:
                    3b:6a:16:c1:6e:f2:0f:a6:7c:aa:9d:a6:ed:7b:b7:
                    f7:0c:10:d1:60:98:31:7b:15:cc:5a:b6:bd:2e:75:
                    ff:da:03:15:27:c1:5d:62:79:cf:a0:e4:d7:f3:94:
                    0f:df:00:4a:9b:37:3e:3c:18:55:9a:bd:48:20:cf:
                    05:8d:4d:bd:e3:45:bd:6e:87:02:4d:01:3f:c0:df:
                    24:54:2f:90:37:04:fc:a5:03:3b:db:8f:6d:8a:76:
                    d9:8e:20:9e:54:5a:9c:6a:f0:ce:d5:00:ea:8e:6f:
                    10:51:7c:b9:d5:f1:bc:ea:b7:2a:db:ab:9c:f8:e4:
                    de:1e:6e:4d:03:12:9b:63:6d:01:27:c5:18:38:2e:
                    30:4b:aa:5a:02:31:25:03:b3:7d:2a:b3:3b:fa:c1:
                    1d:bd:de:94:32:ff:3a:d2:56:2e:04:79:2e:08:b1:
                    c3:71:c2:3f:8f:11:8f:ba:d9:2a:69:b5:70:26:73:
                    fe:3a:c8:7f:60:33:a2:5b:cb:b6:e0:7b:8e:41:c3:
                    78:96:7f:af:e9:ec:79:ef:1d:73:d4:98:b0:93:33:
                    3a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:47:B7:6B:88:00:D3:68:BA:8B:66:FA:15:C1:DA:FE:5B:39:1F:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e10990d-802a-331a-8309-39cdc5aa1189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:02:d5:9b:1f:22:ac:81:9d:79:73:08:9f:16:e5:42:59:03:
         f6:e7:f3:9f:05:65:0b:c3:83:8b:b7:05:79:87:a3:9d:05:6f:
         05:ae:d1:3d:64:05:90:1a:b2:e2:de:da:2a:9e:53:3d:66:cb:
         ff:68:81:72:cd:68:17:cf:58:19:fa:9f:db:52:11:89:1c:ff:
         63:7f:ea:43:d9:30:cb:f5:18:42:61:20:29:dd:6f:bc:12:8b:
         a4:5e:48:be:0e:da:d3:01:b1:c9:46:33:e2:b2:e5:10:cb:f9:
         66:26:26:32:8a:0e:25:66:44:40:97:fe:77:65:d9:77:1b:e1:
         ff:3b:ad:96:e4:3c:51:57:09:a1:a9:af:e0:83:84:bc:f4:f2:
         18:54:d2:9e:ab:33:23:b8:d4:66:01:50:14:94:a2:bc:d6:fd:
         d3:fd:3e:74:23:ec:ff:52:19:fa:80:29:54:bd:4f:93:a5:5b:
         9e:12:6d:e2:d9:44:6d:7f:96:8f:b6:d3:7f:e4:db:0b:f5:5d:
         74:90:cb:ec:0f:c0:60:5f:70:3e:fa:8f:65:86:5a:78:b9:1e:
         02:68:58:94:30:bc:a9:5e:04:b1:0c:8f:7b:42:17:83:39:42:
         37:86:48:27:22:1b:36:3b:b1:3c:ad:3e:b7:91:95:91:50:61:
         7c:be:00:f9
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEshzDlyUSzNhUxmNoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk
MTEzN2JlODYtM2E3NS00NmE3LTk2NWMtN2VkOThhNDlkMzIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYCHqKuwOT9voadxztVQU7QuKl0qmWe8FlUZ
rWaVTXmtE/TrvrikQ9dyja07ahbBbvIPpnyqnabte7f3DBDRYJgxexXMWra9LnX/
2gMVJ8FdYnnPoOTX85QP3wBKmzc+PBhVmr1IIM8FjU2940W9bocCTQE/wN8kVC+Q
NwT8pQM7249tinbZjiCeVFqcavDO1QDqjm8QUXy51fG86rcq26uc+OTeHm5NAxKb
Y20BJ8UYOC4wS6paAjElA7N9KrM7+sEdvd6UMv860lYuBHkuCLHDccI/jxGPutkq
abVwJnP+Osh/YDOiW8u24HuOQcN4ln+v6ex57x1z1JiwkzM6KQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFAhHt2uIANNouotm+hXB2v5bOR/QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2UxMDk5MGQtODAyYS0z
MzFhLTgzMDktMzljZGM1YWExMTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCQAtWbHyKsgZ15cwifFuVCWQP25/OfBWULw4OL
twV5h6OdBW8FrtE9ZAWQGrLi3toqnlM9Zsv/aIFyzWgXz1gZ+p/bUhGJHP9jf+pD
2TDL9RhCYSAp3W+8EoukXki+DtrTAbHJRjPisuUQy/lmJiYyig4lZkRAl/53Zdl3
G+H/O62W5DxRVwmhqa/gg4S89PIYVNKeqzMjuNRmAVAUlKK81v3T/T50I+z/Uhn6
gClUvU+TpVueEm3i2URtf5aPttN/5NsL9V10kMvsD8BgX3A++o9lhlp4uR4CaFiU
MLypXgSxDI97QheDOUI3hkgnIhs2O7E8rT63kZWRUGF8vgD5
-----END CERTIFICATE-----
Generated at Wed Sep 10 22:50:05 2025 by rpki-client