Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b27f9224-f2f6-354b-a909-331d9c0d7145.roa
File:                     b27f9224-f2f6-354b-a909-331d9c0d7145.roa (raw, json)
Hash identifier:          wG1+exdXVUNOt2thkb3nrQvylQRNwy6QN4NCoQGwjJI=
Subject key identifier:   AB:4B:51:03:B0:95:B1:97:78:12:91:AB:83:62:8F:1E:02:13:C9:EC
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584DD625C34DF3AD4EE9A1DD34C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b27f9224-f2f6-354b-a909-331d9c0d7145.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     396565
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:c3:4d:f3:ad:4e:e9:a1:dd:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=1f2d88ad-48e1-4248-bfae-de9a48f698b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6f:46:2b:e0:86:e1:88:ad:80:33:d9:be:42:
                    41:e5:1d:f2:59:a1:00:b5:f3:49:1d:dc:a4:af:9d:
                    13:d2:cd:57:9a:31:83:a3:a5:08:ff:56:bf:31:ec:
                    b1:25:69:2e:f8:dc:de:cd:c3:d2:63:3e:b5:c7:a9:
                    8b:c5:7a:ba:4e:08:1c:e0:9c:f9:4a:9d:5f:ed:ad:
                    36:f4:21:c8:0e:17:b3:c9:41:df:79:20:85:d2:0b:
                    6c:b7:79:f8:c3:ab:30:34:5d:40:56:36:73:10:9a:
                    f6:b7:98:43:0d:54:a3:b1:68:ab:9e:86:40:c1:26:
                    67:c8:91:00:38:88:58:20:47:8e:39:da:bf:b1:ef:
                    3c:17:a1:94:6d:c7:fa:c4:7a:76:68:01:2e:f9:36:
                    84:2a:71:db:e8:3a:30:86:51:69:53:40:40:f2:b7:
                    d5:83:7d:4b:54:49:56:f1:21:b4:87:a0:38:47:66:
                    44:fb:25:39:b5:d5:fc:12:3c:3e:dc:45:13:d2:05:
                    88:8f:9c:8d:e4:ed:4d:8d:d9:6c:66:7a:5a:33:77:
                    61:a1:0d:47:41:12:ec:98:04:ef:7f:68:94:d3:23:
                    c4:74:0a:b0:27:04:bc:30:e1:f8:5a:0f:d7:bf:82:
                    7b:58:fc:2e:7d:ed:aa:81:5b:5b:58:46:0d:2f:7f:
                    e1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4B:51:03:B0:95:B1:97:78:12:91:AB:83:62:8F:1E:02:13:C9:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b27f9224-f2f6-354b-a909-331d9c0d7145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:fd:dd:f3:68:d6:a3:91:a5:b8:ae:6f:15:26:7f:03:82:e1:
         c7:d1:68:65:6f:cf:e9:39:40:bd:94:bc:73:27:eb:48:00:e6:
         c5:fe:d4:e5:9b:37:39:13:42:fe:b9:5c:ed:0f:33:4a:75:93:
         4d:e1:08:80:81:ad:bf:53:c9:c6:78:ea:1a:07:be:f1:84:7f:
         6b:d3:2b:35:d2:c1:f3:11:c2:65:74:2e:73:0d:c8:5a:7b:9c:
         ad:7c:04:3c:c6:52:11:80:ce:d1:7d:69:75:5b:d5:ec:de:45:
         8a:34:d5:9f:43:d9:b8:c3:7d:44:bd:66:4b:d0:b6:af:a7:eb:
         77:f1:2d:af:48:5f:d0:1f:fc:96:c7:2c:1d:0e:6a:2d:3a:1a:
         a5:33:c5:c0:2b:5a:4c:55:ed:9b:36:9e:dc:e1:54:0a:09:c3:
         48:93:82:63:23:27:bb:e3:7c:ed:e4:6d:e1:05:88:8c:37:56:
         23:3b:03:12:ce:53:06:31:4f:48:5e:61:26:d9:81:3d:d6:f0:
         d4:69:3e:fa:78:64:f1:57:70:1d:69:37:c9:c0:1e:74:89:2d:
         a2:24:5e:df:e4:1e:55:fe:48:8c:36:98:89:13:1f:68:26:3d:
         7a:ca:33:86:67:9b:cc:4a:4f:2d:d0:48:2c:cf:8d:9b:ba:1e:
         b2:f0:c8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:54:08 2026 by rpki-client