Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2215a080-e5fa-3cf4-889a-556877608b80.roa
File:                     2215a080-e5fa-3cf4-889a-556877608b80.roa (raw, json)
Hash identifier:          1DZSH93EZR7s+zJ++Enx61YflENzwWPlYCY9OsjNSG8=
Subject key identifier:   BA:84:0B:CD:F1:9E:F7:F6:CB:89:48:61:01:1D:90:DF:66:8A:6E:73
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D59EA99784C0BCF3CCB293980
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2215a080-e5fa-3cf4-889a-556877608b80.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     36629
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:99:78:4c:0b:cf:3c:cb:29:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=5eb6af39-3a77-49c5-9b2b-f07caa490612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c4:c4:48:22:e2:03:c0:da:31:0d:39:60:4b:
                    d7:a6:72:60:55:06:8c:02:a8:b0:86:8e:c5:d1:07:
                    be:34:3c:74:f7:98:6c:a2:64:33:92:7c:ff:9b:fe:
                    0d:81:53:82:dd:80:df:44:71:47:c1:b0:34:21:48:
                    6f:30:41:19:96:5b:bc:74:fa:1c:a9:36:cc:4e:84:
                    43:c2:d5:3e:12:68:77:cf:78:5e:06:5d:9b:42:65:
                    f0:50:c1:60:78:e3:20:0e:44:52:a3:bf:cd:b8:a3:
                    c4:e5:32:13:62:09:61:77:3b:b1:1e:b0:2c:ca:24:
                    ab:ac:a3:f9:27:a5:c0:e7:40:9f:ad:a4:58:30:f1:
                    e7:cd:a9:71:8e:d8:05:4c:9e:95:28:9e:ce:10:49:
                    63:83:ef:77:77:da:c0:f0:01:56:0c:50:93:3b:f2:
                    34:91:34:9d:ab:ad:24:5d:99:b6:51:f8:35:7e:01:
                    fa:77:7e:b3:5e:01:9b:c5:bb:1a:86:73:81:d6:02:
                    77:9c:62:3a:7e:92:e7:3a:86:f2:58:fc:84:9c:0c:
                    f7:29:93:75:4a:cf:7f:bc:ce:79:57:99:b6:b5:36:
                    9c:d7:59:fb:57:e1:b2:4b:cc:5c:a4:97:ca:0a:64:
                    bf:a0:41:fe:42:0c:ba:05:74:e5:38:b4:e0:6b:dc:
                    bf:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:84:0B:CD:F1:9E:F7:F6:CB:89:48:61:01:1D:90:DF:66:8A:6E:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2215a080-e5fa-3cf4-889a-556877608b80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:1b:7c:14:43:c6:40:ef:0b:3b:47:60:c3:ea:df:c8:82:61:
         e4:96:98:fa:0e:5e:74:39:db:fb:3c:da:78:37:00:de:ef:0f:
         58:4e:3c:71:cf:b8:40:3d:00:18:ae:7b:3c:41:98:a8:82:6d:
         d5:0e:af:cd:7a:4b:79:85:70:2a:d7:a4:5c:0e:d9:f5:34:5a:
         a8:c8:66:06:ff:29:c1:62:c1:b1:a2:88:c7:1b:12:a1:64:17:
         9b:b4:89:b0:18:e8:d5:e8:7b:dd:3a:59:1a:9d:19:46:20:b0:
         c9:1f:a9:47:40:d8:f0:1d:c6:1b:b1:06:2a:af:b2:32:ba:82:
         8d:4b:47:2b:00:32:7a:e6:e6:3c:a7:44:e2:f2:51:2c:a3:41:
         c6:7d:1d:ed:0d:98:67:aa:96:41:7e:e1:22:56:5f:81:4e:cd:
         27:9b:c4:9f:0e:03:d2:9a:0b:57:dd:55:66:e5:95:9a:5e:62:
         0e:ab:6f:99:29:ec:fe:56:82:ee:4d:15:62:1d:f1:58:f6:cf:
         4e:8e:8d:cf:90:44:ae:da:56:0d:86:cb:53:3e:2f:02:f6:79:
         67:05:ac:3c:4c:87:8c:fa:d3:08:12:81:26:96:b1:1f:d7:3d:
         89:91:25:01:e4:c0:83:a8:f8:f7:da:a3:c3:2a:7b:a7:ad:be:
         46:a3:45:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:32:24 2026 by rpki-client