Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/045710b3-a6fd-3e7c-942d-9a0fa5e53cf5.roa
File:                     045710b3-a6fd-3e7c-942d-9a0fa5e53cf5.roa (raw, json)
Hash identifier:          zrPOm0d88pOqo/0vxXToikxJ4a8CJO5ycyUHhN3VF+k=
Subject key identifier:   CF:C7:CD:29:3D:B7:85:3D:54:BF:C4:A5:DF:43:51:2C:DF:99:5F:1E
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584CE1FCDCCC9C1CD77CC11A0F00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/045710b3-a6fd-3e7c-942d-9a0fa5e53cf5.roa
Signing time:             Mon 16 Feb 2026 14:00:40 +0000
ROA not before:           Mon 16 Feb 2026 14:00:40 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     396609
IP address blocks:        2620:74:2c::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:fc:dc:cc:9c:1c:d7:7c:c1:1a:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 16 14:00:40 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=7e4bbd52-626d-4b46-aabf-2e07919053d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:15:c9:f8:5e:ba:87:14:72:74:87:9c:dd:07:
                    6e:62:ca:59:75:c0:dd:4d:51:73:d0:d5:fb:72:4f:
                    f0:79:da:a1:5f:54:bd:74:34:41:ad:d8:2a:93:3b:
                    43:b1:ab:fc:b1:c5:ef:35:a1:89:0e:7d:80:32:22:
                    fb:f3:73:bf:40:b5:40:21:8d:e6:e0:0b:63:aa:f5:
                    5c:fe:dd:66:3b:0f:2c:ac:d8:05:02:90:07:b9:87:
                    56:4f:87:b0:d1:d4:5b:30:69:cc:fe:c5:23:14:34:
                    8f:d3:34:2a:87:0f:05:6e:c1:99:12:c5:28:93:f8:
                    c1:ab:b7:5c:8b:db:2a:02:26:e8:3d:35:ff:ab:9a:
                    d8:82:42:77:ad:d6:35:08:b5:e7:d9:14:00:b4:2b:
                    98:da:e2:68:2a:08:e9:c7:ff:c4:a1:7b:c4:fc:93:
                    0a:6c:02:06:7a:87:0b:86:87:71:d3:c8:6a:ac:21:
                    45:39:2e:b8:ea:c6:9e:bf:b5:7c:be:f3:b6:34:16:
                    36:6c:81:49:cf:f3:a5:86:c7:85:67:ff:b7:40:19:
                    e8:5d:d1:e1:f0:a7:4a:87:5d:69:60:47:aa:df:64:
                    a7:d6:a9:b2:41:21:af:34:14:08:aa:b9:8e:23:ff:
                    3b:ca:b3:f4:d0:4d:da:ae:19:3c:20:2d:a4:fd:2a:
                    10:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C7:CD:29:3D:B7:85:3D:54:BF:C4:A5:DF:43:51:2C:DF:99:5F:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/045710b3-a6fd-3e7c-942d-9a0fa5e53cf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:e9:e5:af:22:02:3d:27:79:74:a2:9a:84:94:94:fd:00:6d:
         14:f1:80:f2:8a:a2:fe:28:ab:7f:bb:4c:37:9e:07:19:d0:5e:
         26:f6:35:ff:b4:21:56:8f:4c:1a:9d:6b:3e:93:49:bb:3f:b4:
         97:63:6a:84:19:1d:b6:69:9f:81:11:62:6a:cd:9d:24:3f:4e:
         de:9e:80:eb:41:a0:55:8b:2a:70:af:87:ee:cc:72:30:0f:58:
         07:da:cd:a7:00:28:05:db:b7:70:a7:79:9d:05:8f:cd:e1:f7:
         6a:54:c5:52:21:aa:a1:a3:e1:aa:eb:b2:da:c6:61:db:fc:59:
         6d:6f:59:ae:f8:d8:29:22:78:8f:f9:7f:b0:95:e9:cc:b2:21:
         fa:b3:01:9d:6c:16:fc:e1:82:65:17:94:93:04:64:4a:22:ea:
         06:7c:9b:c7:16:8e:85:96:70:bd:e6:8b:14:32:b8:c7:0b:38:
         ff:e7:44:09:6f:11:38:71:a8:2b:36:60:6b:40:a1:d4:e5:1f:
         8e:a6:18:20:31:43:27:4c:1e:14:11:6b:f3:02:ec:4b:f9:69:
         27:ea:c7:f7:8a:f4:8e:7a:d5:75:00:70:3c:c1:36:9b:68:ed:
         c3:31:94:db:1e:1a:bf:c6:0d:ac:94:b2:96:79:a2:dc:5b:1c:
         61:01:6e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:21 2026 by rpki-client