Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/130e487e-4d88-3bee-9426-6e3ea9703dfb.roa
File:                     130e487e-4d88-3bee-9426-6e3ea9703dfb.roa (raw, json)
Hash identifier:          jhu1kk8UcRaq9mu0aY51hQobRJbwXV4rPi6yieDxRNM=
Subject key identifier:   B3:2E:0B:34:55:E0:9F:28:4D:09:D8:CB:1F:20:FF:D5:8B:71:73:7B
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E15E470FE776F19AE8ABA5300
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/130e487e-4d88-3bee-9426-6e3ea9703dfb.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     7342
IP address blocks:        2620:74:3a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:70:fe:77:6f:19:ae:8a:ba:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=2214b295-71de-42dc-83e4-477ea3ab3646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f0:21:08:bf:87:3c:73:d6:20:f7:63:8b:7f:
                    e2:78:6c:72:55:fb:d3:8d:3c:1c:97:cf:21:80:bf:
                    00:c5:3e:e2:ae:2b:dd:32:3b:9d:da:b5:e2:92:a5:
                    1f:03:70:86:26:d5:86:30:12:ed:bf:e5:2a:18:15:
                    4a:22:48:86:53:92:b7:10:21:3c:b4:b6:a9:90:ec:
                    2c:bc:28:37:f1:df:48:72:60:1d:d7:d3:b1:7c:e0:
                    6e:30:eb:9d:75:95:59:70:50:6a:f4:21:e2:19:60:
                    b3:4c:fc:5d:ff:71:04:07:ca:e6:96:53:8c:92:55:
                    3b:01:92:b9:80:0a:69:4d:8a:75:c2:27:61:a4:f8:
                    8b:81:20:b7:b3:f0:0f:ad:a4:6d:d9:ca:f7:f9:c2:
                    69:98:48:1a:1d:b6:00:3a:9c:65:52:ed:7b:a5:7b:
                    3d:91:65:69:3b:ea:76:86:9b:e6:a3:7c:ff:e1:f7:
                    c8:eb:dd:9f:ff:17:04:ed:51:18:a6:06:3e:55:60:
                    f8:23:06:4b:3c:23:35:7d:dc:34:17:df:9e:84:22:
                    07:87:36:fc:ef:68:6e:d0:2a:fc:3f:5b:0e:a6:de:
                    d0:e6:6c:b9:b8:4c:80:6d:13:e7:9d:ff:32:76:2e:
                    5f:43:4e:1e:61:95:e9:79:02:14:dd:a6:48:b2:94:
                    ea:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2E:0B:34:55:E0:9F:28:4D:09:D8:CB:1F:20:FF:D5:8B:71:73:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/130e487e-4d88-3bee-9426-6e3ea9703dfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:3a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:50:aa:f1:e1:8b:ad:4f:1a:81:b0:01:8a:99:13:57:00:27:
         30:a8:6e:19:c3:ea:a0:91:f6:2e:34:f0:a4:8c:b4:87:5d:9e:
         5a:d7:2e:bd:2e:85:02:1a:3b:42:a4:3c:0c:53:32:30:de:07:
         fd:57:1c:87:e7:1b:bc:59:73:d4:91:ef:f4:91:00:9a:1f:7e:
         53:83:da:0f:ad:1b:9f:b5:0c:8c:0f:9f:1b:bc:10:de:f6:49:
         20:ba:d7:a8:2e:d0:ae:3f:10:15:1d:38:d5:62:ee:3b:98:69:
         fb:9f:5a:ba:ba:e9:98:d2:ea:e7:b8:db:7f:3b:6f:df:32:6d:
         ba:5f:3a:72:88:ab:9d:b7:ea:90:2e:57:ec:33:a4:f8:5f:3e:
         cf:55:8e:03:20:b1:d7:af:d1:40:eb:ce:a6:c2:79:bb:81:e6:
         ca:96:1f:d4:af:38:c4:52:21:2f:a4:11:e1:fb:10:6d:51:03:
         9b:1f:2a:d4:c1:e7:99:4d:22:5a:8b:9d:f3:3a:dc:c3:a2:79:
         bf:cb:4e:65:c6:27:60:fa:d7:81:89:60:d0:f4:63:33:ae:04:
         77:b7:9d:ca:7d:a9:ce:6b:f7:a8:3a:59:c1:96:65:09:a5:a9:
         de:71:6c:56:e4:ba:18:9c:fd:40:1d:c2:63:4b:f1:d0:91:65:
         c6:ed:65:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:26:19 2026 by rpki-client