Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f662078-c87e-3e94-b9f7-e83fa6ac8a50.roa
File:                     3f662078-c87e-3e94-b9f7-e83fa6ac8a50.roa (raw, json)
Hash identifier:          Zs9Jq+X/nCozPtR8WV35BBWmIFl58ye0XeEg5+I3FXU=
Subject key identifier:   B7:90:15:C8:A3:D8:24:D5:8A:31:36:11:94:16:4C:BD:EB:DE:FD:EE
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F698D950405CED0268AAB5800
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f662078-c87e-3e94-b9f7-e83fa6ac8a50.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     36628
IP address blocks:        2620:74:2a::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:95:04:05:ce:d0:26:8a:ab:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=6e3c3533-19c0-486e-b128-1f3c60a15467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:84:a5:69:a1:1f:b9:66:eb:56:6b:d0:17:ba:
                    cd:6c:7a:6b:42:94:2a:ab:c3:0e:8a:47:81:d2:2d:
                    c1:8a:95:ae:7f:0a:ae:e5:e3:ad:4c:04:22:75:65:
                    33:14:21:2d:32:36:48:a7:d2:54:85:7a:f7:0f:5f:
                    d1:cc:22:0f:3d:ed:de:23:37:a9:fa:26:bf:29:86:
                    73:ce:31:4b:8f:3c:69:b0:b1:3f:fe:e0:f3:71:de:
                    22:3c:6d:04:a8:4e:ab:56:4b:ec:24:81:1e:f7:33:
                    cd:bc:d6:b7:f4:de:c4:33:ff:5c:29:30:bb:25:b5:
                    80:cc:68:41:cb:f0:0e:84:15:90:2d:20:d7:7f:47:
                    76:60:b5:07:c1:0f:f9:76:cd:a0:10:ba:3d:5e:30:
                    be:4d:15:2b:be:55:c2:5a:f4:a8:24:70:e2:b0:cb:
                    2a:91:3c:fc:72:4b:80:8b:91:98:6e:92:4d:d1:a2:
                    6e:79:c5:03:f9:e8:b1:8f:25:2e:c3:00:c5:4d:b0:
                    0f:54:f3:04:f2:65:74:84:2d:2f:16:dd:f7:96:e2:
                    75:4b:0a:9d:f9:2d:35:d2:9a:9c:37:de:d6:d4:44:
                    9b:4a:99:ff:56:a2:c7:02:76:2a:16:6a:73:72:87:
                    e8:11:c6:96:c4:b6:27:3f:19:25:dc:1d:fa:8a:1b:
                    f4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:90:15:C8:A3:D8:24:D5:8A:31:36:11:94:16:4C:BD:EB:DE:FD:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f662078-c87e-3e94-b9f7-e83fa6ac8a50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:a6:cf:cf:a8:4b:0d:d5:3b:e0:60:38:e0:fc:c5:eb:8c:8b:
         20:fd:09:b6:4f:92:cc:41:41:14:05:7d:b1:f9:f9:1b:98:f4:
         04:b8:c9:50:53:09:c6:93:d7:d4:0a:0b:8b:a5:fc:32:55:aa:
         f8:4b:00:4d:a1:28:87:3e:bc:19:cb:28:4e:f8:f7:f4:98:02:
         73:17:1a:de:d2:38:c8:5b:bd:f4:4e:8d:b0:ee:80:10:15:c1:
         3c:97:96:37:ba:82:4e:1a:96:50:ee:ae:5c:bf:4c:4f:7b:e2:
         71:fe:e6:71:37:f2:24:8a:c4:bb:43:9f:7d:c3:ff:37:80:2f:
         91:0c:3a:65:ca:ad:2b:c7:b0:2d:eb:98:f8:72:f7:82:e2:9b:
         7c:09:6c:5a:7c:56:35:a5:ce:2e:61:94:47:7e:3f:ea:de:f9:
         22:51:5e:72:10:1c:52:ee:cc:ce:25:77:6b:a6:35:72:02:1e:
         c1:e0:26:c3:34:cd:5e:8a:91:75:5e:d6:55:1f:3f:56:df:ed:
         4e:fa:38:0c:bf:4a:28:6c:cc:44:c5:ec:7b:74:81:96:ff:93:
         ef:17:bf:22:6e:9b:5f:b5:01:50:84:4d:4d:e2:05:bf:15:47:
         04:62:6f:81:d2:14:29:dc:69:1c:df:33:0b:49:e4:49:9a:0c:
         c2:16:2e:b8
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9pjZUEBc7QJoqrWAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk
NmUzYzM1MzMtMTljMC00ODZlLWIxMjgtMWYzYzYwYTE1NDY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYSlaaEfuWbrVmvQF7rNbHprQpQqq8MOikeB
0i3BipWufwqu5eOtTAQidWUzFCEtMjZIp9JUhXr3D1/RzCIPPe3eIzep+ia/KYZz
zjFLjzxpsLE//uDzcd4iPG0EqE6rVkvsJIEe9zPNvNa39N7EM/9cKTC7JbWAzGhB
y/AOhBWQLSDXf0d2YLUHwQ/5ds2gELo9XjC+TRUrvlXCWvSoJHDisMsqkTz8ckuA
i5GYbpJN0aJuecUD+eixjyUuwwDFTbAPVPME8mV0hC0vFt33luJ1Swqd+S010pqc
N97W1ESbSpn/VqLHAnYqFmpzcofoEcaWxLYnPxkl3B36ihv0/QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFLeQFcij2CTVijE2EZQWTL3r3v3uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2Y2NjIwNzgtYzg3ZS0z
ZTk0LWI5ZjctZTgzZmE2YWM4YTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBZps/PqEsN1TvgYDjg/MXrjIsg/Qm2T5LMQUEU
BX2x+fkbmPQEuMlQUwnGk9fUCguLpfwyVar4SwBNoSiHPrwZyyhO+Pf0mAJzFxre
0jjIW730To2w7oAQFcE8l5Y3uoJOGpZQ7q5cv0xPe+Jx/uZxN/IkisS7Q599w/83
gC+RDDplyq0rx7At65j4cveC4pt8CWxafFY1pc4uYZRHfj/q3vkiUV5yEBxS7szO
JXdrpjVyAh7B4CbDNM1eipF1XtZVHz9W3+1O+jgMv0oobMxExex7dIGW/5PvF78i
bptftQFQhE1N4gW/FUcEYm+B0hQp3Gkc3zMLSeRJmgzCFi64
-----END CERTIFICATE-----
Generated at Thu Oct 8 10:58:20 2026 by rpki-client