Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/460c15a7-53df-3ad1-b4ec-1c1309288cd8.roa
File:                     460c15a7-53df-3ad1-b4ec-1c1309288cd8.roa (raw, json)
Hash identifier:          sRXwh2+iaqhAcIsv0DrW04XhAEbGQH0zivrVbj2rbVw=
Subject key identifier:   E2:B0:DC:E1:DF:DC:22:19:C7:43:E6:4B:53:E4:17:33:A3:73:C5:23
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584CF587AA0DEB9B9F578E217000
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/460c15a7-53df-3ad1-b4ec-1c1309288cd8.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     36629
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:aa:0d:eb:9b:9f:57:8e:21:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=096fb4bc-32df-47da-8522-12350c6fc584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e7:26:8f:1a:58:c6:a0:25:57:14:3a:6a:a2:
                    fc:ac:ca:bf:ab:cb:fc:0c:9a:e3:cd:41:ac:17:0a:
                    a7:c6:35:1b:70:e2:39:65:35:82:4b:40:c9:29:02:
                    e5:fb:db:24:bf:49:0a:c6:2f:d7:15:9f:98:1d:28:
                    2d:0e:d8:de:3c:d8:2c:b7:2a:82:7b:2e:a6:55:4a:
                    04:87:36:43:95:65:8b:3d:9a:58:d9:99:15:98:d4:
                    48:23:e7:0c:c2:9d:47:b3:2c:8f:f9:f1:f8:af:51:
                    83:26:b8:55:10:08:68:75:f8:9e:58:d7:98:d2:6e:
                    9e:cf:9e:13:25:be:11:c3:43:be:08:1d:7f:37:b4:
                    dc:13:32:41:a4:81:77:3c:6d:2d:57:b3:0b:c6:ec:
                    2a:5b:99:3b:2e:3b:f2:85:50:ee:65:da:b5:02:11:
                    74:eb:17:91:b2:03:2e:31:00:37:b5:d5:6f:a2:e1:
                    d6:06:21:35:85:95:86:5b:dd:62:ab:b1:a8:68:d8:
                    be:73:fe:dc:6c:b5:66:42:45:66:95:b2:ae:4c:cb:
                    ad:69:4c:7c:46:16:16:07:29:7a:4b:be:34:03:ed:
                    96:ba:29:00:19:fc:35:17:a6:99:8f:c6:6b:68:e7:
                    d2:77:02:e9:5a:1a:89:c2:6f:2f:63:a2:d8:47:f2:
                    b1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B0:DC:E1:DF:DC:22:19:C7:43:E6:4B:53:E4:17:33:A3:73:C5:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/460c15a7-53df-3ad1-b4ec-1c1309288cd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:c9:58:01:d6:63:72:8a:c5:f8:6f:0f:bc:e2:57:4f:87:26:
         21:be:07:cb:3a:9d:3d:a9:6c:8b:1c:dd:b9:49:3f:34:6c:9a:
         e5:61:6d:9d:1d:7c:a8:c7:ee:09:06:d2:3a:31:3d:03:0b:43:
         71:e9:7f:45:05:9c:14:70:21:23:e3:78:9c:ba:d7:57:fb:98:
         6b:58:32:c3:87:62:1f:7c:f7:90:ce:89:97:a2:7f:75:a5:3c:
         47:01:f0:d2:3f:6e:77:34:2a:a0:4c:2f:f3:c7:e2:05:82:5f:
         9d:b6:90:b9:0f:53:de:24:3d:b9:06:ef:c8:fa:13:ba:c4:12:
         8c:a2:e8:de:d5:6b:48:90:0f:b5:b8:4b:34:42:e4:f2:37:c2:
         00:c8:63:de:49:b2:f1:ab:94:7f:c0:d5:3c:96:35:08:e4:a2:
         f3:66:11:64:dc:b2:b5:34:26:15:dd:c6:14:3b:dd:59:73:25:
         08:36:da:5a:b2:86:fc:7b:ee:67:ef:ff:27:26:fc:1e:bc:9f:
         2a:26:75:b2:3d:46:b6:ea:79:b6:e0:c6:22:9f:42:c2:41:5e:
         26:2a:46:8a:e1:10:65:03:de:d6:2a:34:89:33:9e:c0:ee:84:
         78:dc:f7:73:c6:d9:ed:51:75:5b:d7:f4:63:cc:e2:f5:4e:0a:
         b1:eb:a5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:59 2026 by rpki-client