Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8a5e44fb-e0a3-3f67-929b-49c2d660df55.roa
File:                     8a5e44fb-e0a3-3f67-929b-49c2d660df55.roa (raw, json)
Hash identifier:          j9Nb3xhGIvQ0cJ2ntV7HwzZGJBUS84mS7bhK/EUM8gQ=
Subject key identifier:   E1:C6:10:82:11:BB:B0:DD:14:42:13:A6:90:AD:81:CC:82:F9:C9:E4
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F30527EF7D5B577B2B309BA80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8a5e44fb-e0a3-3f67-929b-49c2d660df55.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     0
IP address blocks:        2620:74:94::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:7e:f7:d5:b5:77:b2:b3:09:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=5bf191ce-8a4e-489f-b2f8-9a746c80927d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:97:ce:88:33:cd:51:8c:e9:65:87:2d:1a:2d:
                    76:1d:ab:84:ee:4d:48:40:99:92:f9:2f:bd:08:4e:
                    81:f8:84:49:2a:1a:ae:49:5d:ca:c7:3b:43:3b:f0:
                    8b:89:b0:0b:a8:b0:8e:af:87:2b:7d:89:fa:0e:31:
                    94:51:ec:d7:0a:2a:a2:c6:b0:21:d2:6d:d9:29:fc:
                    fb:a4:bd:18:6c:fc:14:84:12:02:24:9b:a0:6a:4b:
                    d4:2e:c1:57:6d:69:bd:76:b4:a9:e7:8e:82:c8:a2:
                    5c:14:c0:82:d7:fe:bb:64:0a:70:bb:ef:67:f7:c9:
                    c3:eb:f8:32:a6:88:c1:a1:49:42:eb:5c:f4:83:80:
                    6e:80:98:29:60:10:6c:24:87:53:27:c3:d0:da:5b:
                    0f:c5:c5:0b:47:39:ee:14:e8:f3:a3:00:6b:a5:ba:
                    6f:2b:82:24:7a:e6:5e:b7:70:e1:2f:44:ab:b6:05:
                    2b:eb:5f:f8:1d:2a:71:98:34:10:ac:ec:00:05:90:
                    22:0e:bd:78:78:28:4e:ce:f0:f8:ec:b7:5f:7d:8c:
                    f2:5c:91:e4:66:6b:c3:d6:71:54:22:c8:0a:a3:16:
                    63:1d:74:ed:5c:d5:17:f8:2d:50:a1:95:df:f0:b3:
                    d3:c8:f3:2e:0b:a5:8a:9e:5a:4a:c2:3b:aa:67:95:
                    84:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C6:10:82:11:BB:B0:DD:14:42:13:A6:90:AD:81:CC:82:F9:C9:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8a5e44fb-e0a3-3f67-929b-49c2d660df55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:94::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ab:58:e1:a7:38:37:4d:ec:17:0f:b3:b3:10:d6:12:2e:e9:
         6d:dc:e5:91:31:01:8e:05:74:29:9b:8e:42:c2:d6:ec:3a:94:
         b3:de:16:94:b8:c8:af:fb:de:4f:41:e7:e8:67:e7:de:fc:f0:
         29:ab:82:4e:60:54:11:9a:a8:e0:b9:a2:70:3c:9a:1b:a3:36:
         8f:c0:df:86:5f:a5:af:40:13:e6:15:47:4f:5b:59:97:52:e4:
         f9:b8:dc:d9:88:89:0e:f8:d0:bd:24:b6:22:9e:73:c1:77:50:
         31:7b:bc:b4:b2:bd:4b:e6:ec:c9:1e:5f:e9:fc:df:c9:63:48:
         d8:33:65:0e:59:a2:b2:17:40:d4:0a:34:7e:89:6b:96:71:1c:
         9d:cb:34:29:71:91:38:cd:6f:57:af:85:aa:54:b6:62:af:03:
         24:c0:ad:03:25:98:7d:be:da:70:68:b7:29:db:5d:1d:f6:3e:
         5f:91:cf:70:21:5a:3a:fb:c8:36:da:0e:0a:b4:cd:0a:14:db:
         4d:74:33:fa:25:86:34:9b:06:bb:b8:c6:77:76:b0:f4:d0:a5:
         ba:33:c3:59:e4:d5:69:e9:25:00:b1:93:26:0d:dc:fc:b3:34:
         11:6c:38:52:97:6e:e4:47:ec:a4:55:c6:df:d3:49:c8:0f:2c:
         a6:02:98:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:28:28 2026 by rpki-client