Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/62da0c63-d961-34ba-a9e3-d8e8583c43ba.roa
File:                     62da0c63-d961-34ba-a9e3-d8e8583c43ba.roa (raw, json)
Hash identifier:          hPrhv9JWafjvxeK/7wTCVQmXVrMnxL4YO6vS50ahpms=
Subject key identifier:   7F:62:8C:7F:93:41:C1:5B:96:66:C4:A5:61:87:E2:43:CA:5F:54:F5
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EB2B1D848CAA7A86CFD663000
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/62da0c63-d961-34ba-a9e3-d8e8583c43ba.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     396566
IP address blocks:        2620:74:2b::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:d8:48:ca:a7:a8:6c:fd:66:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=13e153d9-0c8c-4fb0-8335-2bab7f5058a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:be:a8:e0:13:84:11:80:d3:64:7a:d2:6b:17:
                    eb:07:4b:6f:23:5c:82:3f:b6:c1:f9:10:27:89:85:
                    28:71:41:23:6d:cb:9e:cb:a2:45:5c:ff:be:4f:60:
                    53:c1:6f:95:8b:80:c1:fb:fa:7b:73:ef:6d:60:2b:
                    d5:bb:fd:ca:bd:94:c9:54:c1:7b:1e:a4:b2:e5:ca:
                    1a:aa:4e:1c:83:de:51:62:bd:51:43:06:fc:e2:ad:
                    9c:84:de:17:ce:d6:ec:db:ff:10:6d:d7:65:e6:eb:
                    0a:5a:ca:e1:72:cc:db:26:01:cc:2a:7d:cf:61:3d:
                    ea:bb:5e:d9:84:5a:be:92:00:07:90:d6:68:21:9e:
                    ae:e9:da:32:54:ef:74:7f:ef:ba:a5:cb:a1:f7:a6:
                    0b:0a:a8:83:ef:32:66:61:05:86:3b:30:b4:3a:98:
                    95:53:fc:6b:10:18:04:52:e4:d1:77:99:a9:93:24:
                    d5:94:c9:52:0f:f4:d4:5f:6f:d2:e2:df:48:8a:22:
                    ea:99:4c:c0:01:ae:11:ea:45:4d:17:be:b1:44:08:
                    2d:35:be:4c:38:91:66:8d:af:71:99:30:f4:d0:c4:
                    8c:eb:ca:5d:33:73:3f:d6:63:fb:46:bd:b3:86:4f:
                    0a:fc:28:6c:f2:55:3c:08:14:67:32:68:bb:e9:63:
                    80:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:62:8C:7F:93:41:C1:5B:96:66:C4:A5:61:87:E2:43:CA:5F:54:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/62da0c63-d961-34ba-a9e3-d8e8583c43ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:de:e0:73:b9:38:3a:64:e1:ee:a1:34:a8:b7:eb:44:55:c3:
         a0:aa:54:78:c4:96:cd:88:cf:89:22:06:83:b0:eb:1b:47:f0:
         59:da:4e:e8:0d:ef:11:f3:a3:bc:72:05:72:cf:24:ef:bd:04:
         bc:2b:cf:82:74:f8:b9:0f:06:70:e6:fd:d6:e5:11:07:8b:03:
         bf:55:3a:5d:1f:2d:14:9f:da:9e:89:3a:f8:dc:c2:90:51:66:
         8e:3a:fe:89:14:2e:7e:e8:30:17:6b:db:f1:6e:51:d2:ac:7d:
         81:8b:4f:e1:ae:35:be:09:11:b2:3c:4f:14:6d:ea:c1:7e:a0:
         9f:fe:c2:2c:01:39:c1:2f:7f:30:e0:9c:f1:33:d5:d6:56:db:
         dc:69:c0:a5:5d:ab:32:f6:e9:ff:2b:ed:9b:6f:82:3e:a1:89:
         31:5d:e7:0c:41:f7:30:95:e7:30:04:7b:26:31:f9:8d:b9:2e:
         3a:d8:bf:0c:61:fa:69:36:24:dc:5b:c0:61:ed:17:37:ce:46:
         a6:f3:6d:10:43:ee:5a:8c:4e:ce:5b:77:a5:c4:1b:0f:d2:91:
         cd:d8:b7:75:d3:78:44:0f:82:ff:b3:6f:6b:0e:01:75:ad:26:
         e6:d1:17:31:25:6e:cb:35:6b:77:b3:14:6d:fa:33:29:39:65:
         61:71:79:ec
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6ysdhIyqeobP1mMAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
MTNlMTUzZDktMGM4Yy00ZmIwLTgzMzUtMmJhYjdmNTA1OGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5b6o4BOEEYDTZHrSaxfrB0tvI1yCP7bB+RAn
iYUocUEjbcuey6JFXP++T2BTwW+Vi4DB+/p7c+9tYCvVu/3KvZTJVMF7HqSy5coa
qk4cg95RYr1RQwb84q2chN4Xztbs2/8Qbddl5usKWsrhcszbJgHMKn3PYT3qu17Z
hFq+kgAHkNZoIZ6u6doyVO90f++6pcuh96YLCqiD7zJmYQWGOzC0OpiVU/xrEBgE
UuTRd5mpkyTVlMlSD/TUX2/S4t9IiiLqmUzAAa4R6kVNF76xRAgtNb5MOJFmja9x
mTD00MSM68pdM3M/1mP7Rr2zhk8K/Chs8lU8CBRnMmi76WOAZwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFH9ijH+TQcFblmbEpWGH4kPKX1T1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjJkYTBjNjMtZDk2MS0z
NGJhLWE5ZTMtZDhlODU4M2M0M2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr
AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA73uBzuTg6ZOHuoTSot+tEVcOgqlR4xJbNiM+J
IgaDsOsbR/BZ2k7oDe8R86O8cgVyzyTvvQS8K8+CdPi5DwZw5v3W5REHiwO/VTpd
Hy0Un9qeiTr43MKQUWaOOv6JFC5+6DAXa9vxblHSrH2Bi0/hrjW+CRGyPE8UberB
fqCf/sIsATnBL38w4JzxM9XWVtvcacClXasy9un/K+2bb4I+oYkxXecMQfcwlecw
BHsmMfmNuS462L8MYfppNiTcW8Bh7Rc3zkam820QQ+5ajE7OW3elxBsP0pHN2Ld1
03hED4L/s29rDgF1rSbm0RcxJW7LNWt3sxRt+jMpOWVhcXns
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:55:55 2026 by rpki-client