Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5bd64e44-14a1-37d6-b31f-5c2397e53513.roa
File:                     5bd64e44-14a1-37d6-b31f-5c2397e53513.roa (raw, json)
Hash identifier:          8Zgpmh0QErYnoPWZOqFs/POaZGKAA7glsEfv0cFc3vo=
Subject key identifier:   8E:0E:16:97:AD:CF:FA:B0:A7:25:2D:27:79:EF:CF:8C:00:1D:DE:6D
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F549D86494BEEE125F2539110
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5bd64e44-14a1-37d6-b31f-5c2397e53513.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     397199
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:86:49:4b:ee:e1:25:f2:53:91:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=10218bb3-a654-4562-893f-0d8781c60b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:30:60:05:9a:0c:6f:b0:a1:cc:e5:4a:99:5f:
                    67:78:88:4c:8d:b9:2b:dc:5e:4a:34:9a:34:5c:b6:
                    23:91:6c:8e:1f:3e:17:27:d7:48:10:4b:9d:18:79:
                    44:e1:18:7e:99:cb:fd:b7:00:85:5f:83:43:e7:e2:
                    8e:20:49:1c:fa:a5:d9:a9:86:02:87:7e:eb:bf:70:
                    f1:fe:69:fb:d8:86:56:8e:d6:20:86:53:74:f0:e4:
                    df:d6:21:f7:17:b8:fb:a6:25:c0:c5:12:ff:09:e3:
                    e1:ae:b4:76:d1:45:00:8e:60:25:fd:60:3f:50:d6:
                    a9:92:8c:0a:ca:0c:51:1d:7c:2e:de:5c:6b:3f:79:
                    78:bd:c1:c9:9d:8d:ed:1e:0e:06:e6:83:52:7f:ee:
                    63:24:25:8a:5d:6b:46:4b:0d:1b:f8:9d:9f:71:4c:
                    42:3f:30:89:3e:62:2b:8f:c5:15:96:34:f5:b6:f4:
                    e1:3d:96:07:6a:b9:69:42:ac:f9:b8:1e:8d:e3:13:
                    4d:5c:2a:66:9a:5f:78:af:b1:00:64:a5:6f:70:13:
                    df:19:5f:38:a7:2a:0e:be:9d:4b:cc:fd:80:f2:38:
                    a5:b5:de:78:3d:31:02:79:84:57:a6:02:a6:c1:1f:
                    21:fa:0e:af:b5:a3:66:23:28:e9:3d:d3:59:ba:af:
                    ef:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0E:16:97:AD:CF:FA:B0:A7:25:2D:27:79:EF:CF:8C:00:1D:DE:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5bd64e44-14a1-37d6-b31f-5c2397e53513.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:25:94:a4:76:68:8f:07:02:45:1b:54:89:dc:3b:02:65:67:
         78:66:76:6b:34:75:b3:c1:d2:b4:65:93:b4:dc:df:c0:bc:ab:
         a9:f7:18:88:6a:4c:28:58:d3:f3:b7:be:38:1c:9f:2a:75:f3:
         80:e9:67:b7:f0:d8:5b:f9:ed:07:6d:42:83:84:0c:a2:dd:74:
         53:b7:32:27:5a:e4:da:b6:80:05:57:78:72:fa:6c:84:fe:d0:
         41:8c:a3:59:3b:24:13:db:cb:72:ae:31:eb:7c:3a:9b:4d:1e:
         0d:ee:cc:24:5e:0f:82:70:dc:c1:31:d0:3e:64:a0:e6:71:e5:
         dd:e9:26:d1:a5:74:c4:e8:8f:4c:05:80:8c:bf:e4:3c:8d:28:
         3b:03:0b:25:a1:33:27:42:39:25:be:2f:12:01:d7:b2:ca:2d:
         75:4f:a1:60:99:70:aa:2e:7f:0d:37:e2:06:4b:52:93:7e:64:
         13:95:55:da:80:99:04:aa:0c:2a:a6:d1:45:27:1f:60:77:e9:
         95:de:ba:b0:8c:73:b3:9a:2a:88:10:bf:e5:f3:fb:1f:94:2b:
         fb:13:a6:a3:8b:0b:8f:fd:2b:7e:0a:cc:29:ab:5f:5c:97:6a:
         92:35:80:90:67:cd:49:3f:e8:e7:8d:6e:98:66:95:ae:ab:97:
         6a:d3:e7:51
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9UnYZJS+7hJfJTkRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
MTAyMThiYjMtYTY1NC00NTYyLTg5M2YtMGQ4NzgxYzYwYjhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjBgBZoMb7ChzOVKmV9neIhMjbkr3F5KNJo0
XLYjkWyOHz4XJ9dIEEudGHlE4Rh+mcv9twCFX4ND5+KOIEkc+qXZqYYCh37rv3Dx
/mn72IZWjtYghlN08OTf1iH3F7j7piXAxRL/CePhrrR20UUAjmAl/WA/UNapkowK
ygxRHXwu3lxrP3l4vcHJnY3tHg4G5oNSf+5jJCWKXWtGSw0b+J2fcUxCPzCJPmIr
j8UVljT1tvThPZYHarlpQqz5uB6N4xNNXCpmml94r7EAZKVvcBPfGV84pyoOvp1L
zP2A8jiltd54PTECeYRXpgKmwR8h+g6vtaNmIyjpPdNZuq/vrwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFI4OFpetz/qwpyUtJ3nvz4wAHd5tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWJkNjRlNDQtMTRhMS0z
N2Q2LWIzMWYtNWMyMzk3ZTUzNTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAMJZSkdmiPBwJFG1SJ3DsCZWd4ZnZrNHWzwdK0
ZZO03N/AvKup9xiIakwoWNPzt744HJ8qdfOA6We38Nhb+e0HbUKDhAyi3XRTtzIn
WuTatoAFV3hy+myE/tBBjKNZOyQT28tyrjHrfDqbTR4N7swkXg+CcNzBMdA+ZKDm
ceXd6SbRpXTE6I9MBYCMv+Q8jSg7AwsloTMnQjklvi8SAdeyyi11T6FgmXCqLn8N
N+IGS1KTfmQTlVXagJkEqgwqptFFJx9gd+mV3rqwjHOzmiqIEL/l8/sflCv7E6aj
iwuP/St+Cswpq19cl2qSNYCQZ81JP+jnjW6YZpWuq5dq0+dR
-----END CERTIFICATE-----
Generated at Wed Oct 7 23:02:04 2026 by rpki-client