Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5f8c9260-8b6d-3a10-a2bd-9fee063de9ab.roa
File:                     5f8c9260-8b6d-3a10-a2bd-9fee063de9ab.roa (raw, json)
Hash identifier:          X3tbqymhAAkvh2DGpARuUEBHNX6+Zn0wWJsT0lby9XQ=
Subject key identifier:   45:E7:14:16:17:8D:8F:EC:A2:89:D1:FB:30:49:39:45:50:4F:4F:4F
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D7B6A941B2D02201BE6E6AE60
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5f8c9260-8b6d-3a10-a2bd-9fee063de9ab.roa
Signing time:             Sun 12 Apr 2026 13:00:30 +0000
ROA not before:           Sun 12 Apr 2026 13:00:30 +0000
ROA not after:            Sat 11 Jul 2026 13:00:30 +0000
asID:                     396603
IP address blocks:        2620:74:20::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:6a:94:1b:2d:02:20:1b:e6:e6:ae:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr 12 13:00:30 2026 GMT
            Not After : Jul 11 13:00:30 2026 GMT
        Subject: CN=9f2a4395-7685-421f-9674-bbcc64f14f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e5:32:ad:d6:8c:ef:87:fa:1c:5f:9e:a8:b1:
                    95:3f:ea:12:76:83:16:ac:c3:b7:42:e3:34:9e:58:
                    e3:b4:ed:8a:de:75:68:27:78:8f:20:23:75:08:6e:
                    a7:f6:1d:f2:44:e8:b0:5a:c8:b4:e3:52:21:0a:4b:
                    41:4e:80:94:a0:ff:ea:fb:d3:4e:3e:95:b6:c3:c7:
                    86:f8:d5:fa:61:8e:8b:cb:80:c2:ea:7c:e7:02:52:
                    20:87:65:28:3e:56:ea:12:5f:b7:47:9b:d0:e5:88:
                    ea:ee:7e:70:24:37:e1:11:9d:51:f8:f0:3b:d8:4f:
                    fe:43:0c:5a:6f:b8:68:b2:56:1a:c5:56:8c:71:28:
                    de:01:22:74:28:1d:6b:e7:66:12:74:77:33:cd:9f:
                    ea:56:c8:68:8a:1d:a1:d2:1c:3a:7a:ad:6e:73:6f:
                    1e:3e:c7:5f:61:5a:07:96:23:d8:c5:d6:3f:7a:d5:
                    4a:c3:d8:55:78:b7:96:17:91:5e:90:32:84:50:5c:
                    0a:8e:da:ec:5b:b1:a9:7f:d4:52:ca:d6:62:74:6b:
                    12:cd:d5:ba:64:d3:6f:44:b5:86:62:de:1b:5f:0c:
                    42:29:4f:70:61:f9:ac:a7:df:fd:91:ab:1a:8a:1e:
                    a1:82:9f:8a:a9:f6:f2:92:d8:fe:2c:12:30:f4:95:
                    9a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E7:14:16:17:8D:8F:EC:A2:89:D1:FB:30:49:39:45:50:4F:4F:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5f8c9260-8b6d-3a10-a2bd-9fee063de9ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:dc:7c:25:0c:67:7e:21:19:39:e7:9e:18:00:8a:87:d3:de:
         22:6c:c3:03:ea:7d:60:89:e9:e3:27:e5:1c:34:5c:ee:3e:12:
         33:0c:36:de:40:b2:48:33:d2:bd:9b:ba:7d:ce:56:33:13:45:
         9e:dd:8d:90:78:d5:e4:91:71:62:bd:42:09:7e:e3:a3:58:b8:
         06:e3:6d:8a:f9:d7:32:5a:c8:f0:b7:1b:73:84:97:8e:b1:7c:
         84:6b:fa:99:c5:c6:12:c9:7c:c8:a4:d6:45:cb:a3:7b:a9:09:
         22:ab:94:35:6b:f6:f3:56:93:89:1f:89:d3:40:6b:32:1b:d1:
         07:a5:2b:50:ce:32:02:90:62:f1:b6:25:a6:ed:c0:9b:e4:c3:
         05:6a:f7:80:4f:70:30:5c:0e:83:f9:e2:b3:e7:3a:a6:6f:cb:
         1b:51:73:d9:71:fa:0e:41:be:67:5f:93:79:a6:72:bc:d1:01:
         7e:4f:01:e8:24:90:0e:c1:92:36:42:72:57:d8:45:d3:81:52:
         e7:65:9c:95:d9:e1:02:9b:b3:3e:29:57:6d:9f:c4:e9:3c:fc:
         fd:ae:4e:f2:e3:55:6e:83:13:a7:2e:cf:8c:98:02:af:14:a8:
         13:7e:ac:1b:71:24:9a:95:b0:11:3c:cf:ff:ae:c7:ed:a0:23:
         9b:0d:dc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:26:28 2026 by rpki-client