Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7389d174-0f7d-3d33-977d-7d6fbf0ac73c.roa
File:                     7389d174-0f7d-3d33-977d-7d6fbf0ac73c.roa (raw, json)
Hash identifier:          dNzGY4dn1ZbFWw7IRWIZPulMq7CKrWlwDlP6851TLY8=
Subject key identifier:   B9:7C:CF:6D:5F:BD:6D:28:B8:9D:AA:93:87:73:95:0A:00:65:91:2B
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E131992D212BBC1DFD074E480
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7389d174-0f7d-3d33-977d-7d6fbf0ac73c.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     396586
IP address blocks:        2620:74:2a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:92:d2:12:bb:c1:df:d0:74:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=c997c882-c7aa-4bc0-ad53-b5e20410d510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8a:e2:f0:f3:d4:4d:aa:70:ad:24:bc:73:96:
                    34:67:2c:bf:4b:a7:de:df:34:08:e0:c6:56:0b:e3:
                    69:bb:87:c4:56:b8:ee:28:a2:71:83:d8:47:e9:d6:
                    63:79:f6:e4:fc:a5:66:b0:e5:e2:4d:28:d3:9d:4b:
                    38:c6:2f:51:cb:59:7e:e5:65:69:dc:6b:92:32:07:
                    a3:13:a4:ea:cb:45:7e:fd:68:8f:99:9c:40:1e:40:
                    93:a5:a6:47:ff:62:38:03:7d:3e:37:75:16:6d:42:
                    8f:89:64:ca:90:5f:60:21:85:55:d7:a7:4f:d4:42:
                    2f:61:3d:75:66:be:63:67:4e:cb:54:6a:45:59:a9:
                    b5:19:20:67:0c:68:24:4e:5a:7f:21:91:78:f3:ab:
                    77:ac:a1:bc:28:bf:74:a4:12:a7:73:86:78:70:d8:
                    17:14:4e:cd:e5:e2:6c:de:07:5e:7d:31:f5:d9:ae:
                    b2:94:f6:cb:90:13:19:e2:7e:e2:e9:7e:40:6d:b6:
                    3b:52:81:4b:96:95:b7:32:f6:6d:6b:9c:97:80:d5:
                    74:53:f2:ff:70:f6:49:51:0c:e0:b4:29:24:92:81:
                    8d:3e:38:a3:ad:da:96:5d:2e:12:f0:48:22:9b:a9:
                    72:ab:fd:a6:a7:c1:f6:15:04:0c:77:65:cf:31:b6:
                    1a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7C:CF:6D:5F:BD:6D:28:B8:9D:AA:93:87:73:95:0A:00:65:91:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7389d174-0f7d-3d33-977d-7d6fbf0ac73c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:73:f1:a9:56:7f:d7:26:f5:9b:04:77:56:b9:02:f1:28:85:
         75:54:49:a1:9e:4e:0a:d5:05:84:7c:0b:e4:41:f8:08:cd:fc:
         a2:5d:0b:f4:79:97:81:89:b5:e9:30:d2:09:a4:8d:51:1c:93:
         92:38:0e:6f:7b:2a:26:12:9a:7b:2d:af:19:a8:2e:f2:6a:e6:
         d6:12:31:df:55:30:84:ce:3e:d9:34:28:9c:49:d2:5b:b1:a9:
         8b:af:c5:56:98:12:44:d4:e3:d5:3b:bb:cf:08:fd:f5:43:41:
         1b:94:ca:80:18:6b:a1:f0:a2:ad:75:f8:97:a6:b4:db:76:a2:
         58:d1:e0:15:5a:16:5b:15:c9:bc:89:43:8b:50:d2:10:72:a9:
         ba:f0:92:6e:79:e8:eb:1b:dc:e7:ee:29:8e:bd:5a:6b:94:bf:
         a0:4d:e8:27:4b:a6:69:80:43:90:6f:2a:2f:84:a8:38:77:fe:
         7e:ee:46:f3:5d:78:1b:9d:01:7b:9c:52:d3:6e:51:3f:46:62:
         a6:32:22:b4:01:f0:03:2b:9f:9f:95:9c:8d:d2:91:9c:47:ac:
         2d:fa:83:21:e5:4c:aa:3e:c1:da:a3:e2:d4:fe:38:78:03:bb:
         fc:53:4a:7f:62:ae:b5:57:b5:3b:f2:10:57:a7:14:8d:0d:1f:
         c5:f4:24:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:29:07 2026 by rpki-client