Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1212ee53-1ba8-30dd-9687-9be853c69f3b.roa
File:                     1212ee53-1ba8-30dd-9687-9be853c69f3b.roa (raw, json)
Hash identifier:          aITGgm8VleoIerqHVUVhbM2V545+jK4EK/F+o0nEZVo=
Subject key identifier:   3B:72:54:B5:59:FD:7D:FB:BB:C3:95:40:95:BA:22:82:18:77:1A:78
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584DD625C3F11E6327DFA9E41C40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1212ee53-1ba8-30dd-9687-9be853c69f3b.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     396612
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:c3:f1:1e:63:27:df:a9:e4:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=d7f0997d-6eef-47b7-a1a8-c95e4391a1c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1b:38:51:92:68:6f:bc:9a:62:6a:b7:3b:93:
                    1f:42:47:e7:5d:a0:f1:39:2e:ac:ce:86:1a:2c:07:
                    e1:51:7a:5f:a8:c1:b4:44:8d:e0:67:2c:0c:35:73:
                    a7:18:26:58:7c:3c:e4:84:81:48:14:0f:f4:8e:25:
                    b1:67:6a:ec:2f:20:0d:11:1d:10:30:f9:48:07:39:
                    b8:e2:9c:59:2f:77:d6:26:90:e6:9f:6b:06:b7:8a:
                    f3:c3:2f:51:09:b5:f5:6e:ed:3a:ce:ed:78:5e:f7:
                    a7:3d:b6:8c:2b:8c:5b:60:4b:b5:c9:35:1e:44:3b:
                    29:7c:83:62:47:6c:a5:8b:06:ed:a0:fa:93:2e:4d:
                    7e:97:0a:c4:eb:2d:2c:e6:a6:47:d0:92:1f:f7:ca:
                    bf:92:06:1d:c9:eb:f3:0d:1b:3c:f7:cd:3a:de:d0:
                    f9:31:4f:2b:f6:ad:cb:58:62:2c:21:67:ce:61:b8:
                    35:4f:26:39:57:64:ee:76:00:43:e9:82:16:1d:d3:
                    40:c7:9c:49:a6:d0:7c:a9:1c:fe:2b:3a:4b:d6:8a:
                    f5:29:0f:3e:c4:fa:ca:ed:05:1c:91:e1:37:43:72:
                    0f:b3:16:5e:02:f5:1e:c5:25:c0:42:2d:95:9a:c4:
                    81:0f:b6:ff:f6:8e:61:c0:39:0c:d7:ea:5c:0c:19:
                    68:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:72:54:B5:59:FD:7D:FB:BB:C3:95:40:95:BA:22:82:18:77:1A:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1212ee53-1ba8-30dd-9687-9be853c69f3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:2e:11:c9:6d:40:72:16:0d:1e:95:8e:21:da:00:e2:bf:27:
         7b:a7:4e:10:09:96:61:d6:52:df:e7:dc:68:b5:ce:21:c8:68:
         d1:63:a3:91:87:96:1c:d0:c8:f4:84:68:92:0a:3c:53:4b:ff:
         9f:b1:e9:7a:ba:15:90:f6:d5:bb:f9:b2:81:a8:50:dd:88:98:
         44:e1:13:31:e1:93:e3:4f:de:52:b8:5b:3a:5b:1d:59:0b:0e:
         e2:46:0a:1c:0e:8c:4b:a3:69:04:b6:b2:ef:79:23:8a:98:28:
         54:d9:8a:9d:cf:dd:a0:45:bd:f7:f5:b1:0e:bd:1a:7b:47:8d:
         b0:23:26:8d:b2:94:c9:2b:d6:bc:e3:9a:fe:a1:b6:68:eb:d1:
         b0:eb:ce:89:3f:ef:e4:d5:c8:20:ee:04:f7:17:90:62:6c:8a:
         fa:2b:a7:01:6a:fd:de:1d:fa:6c:3a:2e:67:30:69:fc:19:4e:
         d1:86:7d:17:cf:46:e8:e1:95:0d:46:e4:03:d8:1c:cd:ee:ac:
         68:af:01:47:89:35:0b:a6:01:f9:01:de:ab:61:c6:04:0d:03:
         f9:21:8a:0b:8f:6f:d9:1c:99:59:1e:dd:92:e8:7b:ca:74:65:
         68:36:cb:58:a4:e2:39:1c:1c:d8:af:53:3e:a6:8e:64:45:17:
         14:52:f6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:26:31 2026 by rpki-client