Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ac39735-fd32-3bc7-ad21-0d0ccdd61d8d.roa
File:                     9ac39735-fd32-3bc7-ad21-0d0ccdd61d8d.roa (raw, json)
Hash identifier:          Mn5rKUnNMo/rMsADKf+CnL1gEUpehlgqzJnwZaZzCiA=
Subject key identifier:   0C:39:8A:5B:68:A6:26:1E:54:A5:4C:8A:05:F9:C4:85:1F:33:15:A8
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F71EDB4320656610D431EF410
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ac39735-fd32-3bc7-ad21-0d0ccdd61d8d.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     7342
IP address blocks:        2620:74:84::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:b4:32:06:56:61:0d:43:1e:f4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=692fccfd-75c8-4980-9ecd-a8a0124c810c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:eb:03:90:bb:5c:4d:44:74:c7:a0:c6:0e:38:
                    1f:4b:d8:fd:c2:8f:77:34:53:c0:89:7a:09:6f:ee:
                    46:cf:9a:5f:11:64:8a:5d:33:97:bc:e3:a2:fa:7e:
                    08:23:bb:37:3d:74:ab:67:bb:30:f9:49:b8:02:d0:
                    54:3d:6c:09:f2:fd:41:da:e1:27:fa:08:b5:4f:c9:
                    2c:00:d2:5e:8f:8c:e3:af:24:29:71:7f:2c:9f:f4:
                    7b:1a:53:8f:e1:6b:00:f7:b0:8d:7c:2a:1b:a2:78:
                    ad:ed:d3:d2:01:73:a3:a0:a6:cd:74:2b:20:e3:61:
                    a7:a9:31:df:91:cc:3e:99:4e:fb:34:eb:0f:5b:2c:
                    f3:e9:7f:0a:c6:d1:c5:31:2c:ba:db:2c:d4:4b:02:
                    92:c4:fb:8c:c0:92:d9:8c:36:b5:b9:a1:3b:cf:2a:
                    eb:cc:25:98:aa:5c:c6:f3:6c:43:d0:e4:74:64:40:
                    04:73:65:39:a0:73:57:88:f9:38:51:0d:ee:7c:3c:
                    72:4e:6d:a0:63:9a:ae:ad:61:9f:bf:9e:db:b4:02:
                    f8:d8:3a:65:b8:50:d5:cf:5e:29:92:bd:49:eb:74:
                    72:19:fa:5f:a9:d3:ca:14:c2:3a:6e:2c:d7:d9:b2:
                    a2:2f:54:78:9a:8c:d6:32:85:34:c0:3a:36:7b:a6:
                    c2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:39:8A:5B:68:A6:26:1E:54:A5:4C:8A:05:F9:C4:85:1F:33:15:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ac39735-fd32-3bc7-ad21-0d0ccdd61d8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:84::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:35:47:b3:91:18:8b:e2:48:d7:08:52:35:54:99:c4:28:67:
         1b:78:9b:f1:b7:48:8c:c4:75:df:3c:18:d0:d6:fb:60:bf:26:
         4b:57:c1:d2:d0:1d:0c:4e:0e:33:2d:b7:77:eb:2b:91:1f:e1:
         47:b1:53:76:a4:ae:0c:09:05:3d:f2:c8:d7:b7:1b:6f:50:db:
         e8:73:52:3e:df:e4:7f:74:4e:ef:cb:38:a5:3b:fe:ee:35:c0:
         1c:f4:30:c5:4f:e0:b3:32:45:18:73:e8:b2:5a:3c:2a:2d:93:
         84:ce:c9:86:39:e1:2a:0a:7f:c3:3b:f0:96:21:14:e3:af:95:
         14:f5:c1:b7:f1:50:74:86:b9:ad:52:64:af:ba:60:cc:37:03:
         a8:3e:99:7d:d2:a0:90:42:29:9d:ba:f3:81:19:95:8c:11:a5:
         68:9b:f7:d0:90:8a:22:c8:79:8e:b4:e8:e5:aa:50:ea:2d:91:
         16:0b:3e:b0:c9:89:5a:37:4d:6f:02:30:69:19:08:39:4e:9b:
         91:8a:df:2b:87:9b:a5:e4:f9:16:09:d1:0a:78:2d:8c:3d:43:
         90:55:a5:c4:3f:d0:f6:6e:e0:f3:80:4d:d6:36:e1:86:48:30:
         96:33:a1:9f:4c:c2:3f:e2:8a:2b:4a:33:7a:29:6a:18:7a:8b:
         25:8f:d9:fb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9x7bQyBlZhDUMe9BAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk
NjkyZmNjZmQtNzVjOC00OTgwLTllY2QtYThhMDEyNGM4MTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+sDkLtcTUR0x6DGDjgfS9j9wo93NFPAiXoJ
b+5Gz5pfEWSKXTOXvOOi+n4II7s3PXSrZ7sw+Um4AtBUPWwJ8v1B2uEn+gi1T8ks
ANJej4zjryQpcX8sn/R7GlOP4WsA97CNfCobonit7dPSAXOjoKbNdCsg42GnqTHf
kcw+mU77NOsPWyzz6X8KxtHFMSy62yzUSwKSxPuMwJLZjDa1uaE7zyrrzCWYqlzG
82xD0OR0ZEAEc2U5oHNXiPk4UQ3ufDxyTm2gY5qurWGfv57btAL42DpluFDVz14p
kr1J63RyGfpfqdPKFMI6bizX2bKiL1R4mozWMoU0wDo2e6bC6wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAw5iltopiYeVKVMigX5xIUfMxWoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWFjMzk3MzUtZmQzMi0z
YmM3LWFkMjEtMGQwY2NkZDYxZDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH01R7ORGIviSNcIUjVUmcQoZxt4m/G3SIzEdd88GNDW+2C/JktX
wdLQHQxODjMtt3frK5Ef4UexU3akrgwJBT3yyNe3G29Q2+hzUj7f5H90Tu/LOKU7
/u41wBz0MMVP4LMyRRhz6LJaPCotk4TOyYY54SoKf8M78JYhFOOvlRT1wbfxUHSG
ua1SZK+6YMw3A6g+mX3SoJBCKZ2684EZlYwRpWib99CQiiLIeY606OWqUOotkRYL
PrDJiVo3TW8CMGkZCDlOm5GK3yuHm6Xk+RYJ0Qp4LYw9Q5BVpcQ/0PZu4POATdY2
4YZIMJYzoZ9Mwj/iiitKM3opahh6iyWP2fs=
-----END CERTIFICATE-----
Generated at Sat Oct 10 23:19:22 2026 by rpki-client