Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9c0ab9e4-1bc6-3e91-8518-6ced68a2131a.roa
File:                     9c0ab9e4-1bc6-3e91-8518-6ced68a2131a.roa (raw, json)
Hash identifier:          LK0vQ/wMr/ssBH/jPrSlGOgk7rk6Ch9G71/lhFbirhM=
Subject key identifier:   E3:F1:7B:46:34:6E:78:90:66:98:1C:AE:3E:80:B1:10:CF:94:94:4E
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D7B6A95DB7D7C0F95B7C83C70
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9c0ab9e4-1bc6-3e91-8518-6ced68a2131a.roa
Signing time:             Sun 12 Apr 2026 13:00:30 +0000
ROA not before:           Sun 12 Apr 2026 13:00:30 +0000
ROA not after:            Sat 11 Jul 2026 13:00:30 +0000
asID:                     20431
IP address blocks:        2620:74:20::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:6a:95:db:7d:7c:0f:95:b7:c8:3c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr 12 13:00:30 2026 GMT
            Not After : Jul 11 13:00:30 2026 GMT
        Subject: CN=c9900cbb-9e60-45f5-84a2-2a964915f00a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:42:b4:67:7d:e9:a6:f2:f3:2e:d0:b3:07:9a:
                    8c:5b:54:77:27:3b:46:2a:2a:18:97:6a:df:c7:ea:
                    d3:da:e5:6c:e9:34:77:ac:3d:85:fd:17:16:82:ed:
                    47:fd:7c:d1:f2:c5:aa:22:ec:24:09:c2:07:e5:b2:
                    ee:8c:97:76:bf:db:4e:1d:da:c1:5e:6c:bc:95:94:
                    c2:6e:b2:57:af:0f:85:0f:b8:c6:7d:03:61:16:fd:
                    e7:f3:9c:0e:5c:51:38:71:52:5e:c3:f7:13:9e:22:
                    a5:ba:4a:94:1e:95:8a:bc:9e:9e:20:4c:46:f3:cb:
                    6c:ec:a2:eb:65:fe:72:cf:bc:0a:1e:38:c2:ec:ed:
                    f4:e3:81:97:4d:7f:1b:94:a7:a0:cc:84:56:17:ad:
                    be:e5:09:e2:7e:06:2c:90:ae:8d:d1:84:27:c5:50:
                    de:48:d6:73:f4:03:50:1d:be:07:83:26:12:71:17:
                    63:9e:42:74:8e:0a:47:3c:f1:5f:04:fb:ff:e3:e5:
                    46:70:84:fc:f8:9c:08:ae:8e:7c:36:0d:d8:0d:79:
                    b7:fd:6e:fa:26:60:cc:40:24:c5:03:1d:1c:b4:71:
                    25:d9:d2:d7:95:19:77:2b:3c:bd:22:3e:99:b0:26:
                    58:46:62:9f:47:31:df:85:d3:24:d3:a8:d2:46:fe:
                    af:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F1:7B:46:34:6E:78:90:66:98:1C:AE:3E:80:B1:10:CF:94:94:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9c0ab9e4-1bc6-3e91-8518-6ced68a2131a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:ee:ea:4e:a2:d0:36:3a:db:e2:f4:c8:e8:b9:b8:3c:4e:3d:
         6c:de:73:fe:72:3b:db:9f:67:c8:c9:02:3f:3d:3f:34:75:11:
         a0:6a:15:2b:0b:c3:82:69:73:80:da:7b:df:65:c4:5e:69:f8:
         8a:a8:d5:e4:6d:58:4f:2f:8b:4c:2b:fc:17:c7:7c:6f:26:5d:
         bb:ff:ec:86:f0:53:f5:49:51:8f:f1:b9:d7:11:52:d1:5c:9a:
         e2:9e:60:a0:7a:eb:74:71:2c:4d:8b:a2:72:56:65:fc:40:be:
         ff:9d:6c:8d:c6:af:b5:2f:95:54:4b:73:b2:58:7b:90:e2:0a:
         17:52:71:60:68:66:e6:02:81:3a:a0:df:ec:6e:6f:1b:f5:c4:
         a0:c7:3b:4f:72:6c:5d:05:f3:33:a5:f8:06:2f:ca:86:ce:46:
         98:8f:c8:74:e2:a3:ca:41:90:b6:3e:9d:25:82:46:f3:92:47:
         fa:76:70:61:a5:56:8a:8c:22:ec:b0:c2:35:7f:6d:dc:ef:75:
         65:68:f8:a9:c6:82:be:34:3a:a2:a1:d4:7d:71:c9:67:08:d9:
         66:d4:51:d5:48:92:f3:9b:35:85:f7:81:4f:66:9b:78:e0:ed:
         c3:76:e9:d1:62:16:ad:be:20:d5:44:8a:0e:bf:3e:5b:4b:d8:
         61:9c:89:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:04 2026 by rpki-client