Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/337e0faa-4d30-32d4-9ad2-c198cb59177c.roa
File:                     337e0faa-4d30-32d4-9ad2-c198cb59177c.roa (raw, json)
Hash identifier:          WVJ+wB9jAj3rz/o+xFQtUI0hGHZs3gWvMwX3bTKXWkg=
Subject key identifier:   97:90:14:37:7D:EB:D0:45:03:73:DA:FD:49:42:16:A3:8C:08:4D:44
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E131991A7EC2DD2E854433C80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/337e0faa-4d30-32d4-9ad2-c198cb59177c.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     36621
IP address blocks:        2620:74:2a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:91:a7:ec:2d:d2:e8:54:43:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=a95d7007-b8b0-475d-8822-97d705a037c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6e:8d:e5:51:8d:97:ac:01:3d:74:19:32:0a:
                    a5:88:96:86:68:04:50:c5:4b:71:44:a8:8f:cb:c3:
                    8b:bb:65:c0:49:56:1a:73:1e:fd:c0:35:e6:6d:d5:
                    2a:d1:f5:ce:8b:c1:65:06:04:a9:5e:83:19:9c:7a:
                    7c:d8:14:d1:3c:2b:49:a1:bb:bd:95:13:9d:41:10:
                    53:d4:d9:b2:62:9a:13:94:8e:ad:78:e4:25:19:c2:
                    66:3c:b0:0b:81:80:9b:ae:e4:51:60:2f:79:96:d5:
                    9c:b7:dd:8d:b0:31:28:8e:87:be:94:7b:41:00:ae:
                    51:c8:e6:76:47:ed:2c:8e:6a:47:22:89:b3:77:70:
                    d2:8e:c8:fc:cf:a6:ca:50:2b:39:50:d9:d1:f7:8f:
                    00:ac:9b:e6:df:03:5b:81:83:b5:82:be:80:7d:0f:
                    e5:13:74:44:2f:9f:65:8b:94:f4:83:28:66:bd:9a:
                    00:77:b7:66:74:ec:62:16:51:3f:7d:ce:6e:98:37:
                    ed:f3:03:78:63:36:0d:dd:96:08:d2:e0:64:f7:02:
                    1c:99:28:95:37:f2:bd:ff:e1:81:85:3f:f2:5d:41:
                    bd:1f:e4:5e:4b:5b:a2:bd:62:26:29:c9:b0:72:2c:
                    14:3e:f5:27:25:6a:a5:d5:63:dc:2f:90:e0:74:de:
                    af:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:90:14:37:7D:EB:D0:45:03:73:DA:FD:49:42:16:A3:8C:08:4D:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/337e0faa-4d30-32d4-9ad2-c198cb59177c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:db:df:f4:6f:af:d9:42:65:5f:e8:67:29:ed:46:ee:01:2a:
         3a:39:11:53:cb:23:ed:c7:88:c5:d8:7c:df:d1:f9:ef:c3:83:
         60:66:28:83:3a:b2:0e:2d:41:af:be:6d:af:49:36:f8:64:cb:
         60:9b:b2:99:37:a6:b2:1d:af:fb:ab:f8:97:34:cc:e8:10:ae:
         6c:47:4f:d2:c4:f6:32:b4:98:f9:ac:18:f0:5d:dc:0b:29:06:
         9e:7f:8f:4f:07:d0:08:1b:f3:2d:6d:39:50:b2:17:3f:92:06:
         2c:89:90:0d:3b:4a:97:b5:97:e1:ce:40:62:3c:e3:83:e3:a9:
         ef:da:5f:40:c9:d1:bf:0a:9f:72:dd:ee:9e:c9:d6:9b:4e:ca:
         7d:bf:e1:1c:29:66:96:50:fc:80:15:c7:50:bb:c4:32:a1:03:
         7e:42:62:1f:bc:71:5c:a7:a7:be:df:81:c4:10:f0:7e:4e:c6:
         15:2f:7f:f4:78:3b:38:21:0a:1a:62:06:f5:28:00:1c:04:b7:
         ed:86:78:a0:84:f7:9f:5d:9d:14:2d:2c:95:cd:0c:35:9c:f0:
         3d:76:81:2f:b2:b8:01:02:8f:04:d8:ed:ee:b4:50:d1:05:c1:
         28:0b:4a:a4:47:ce:18:0c:a1:3a:b1:64:67:3b:b1:bd:ed:97:
         ab:05:a4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:33:06 2026 by rpki-client