Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b295b1e9-136a-331f-9518-a3269178352b.roa
File:                     b295b1e9-136a-331f-9518-a3269178352b.roa (raw, json)
Hash identifier:          BliWh16DI119j1NxKlGeJw9GAlIkzTkr/0HCAYmW5pw=
Subject key identifier:   83:B1:98:4F:B8:D8:6B:73:40:90:86:84:DC:8A:3F:8A:32:10:0B:0C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F20F7C9153487031F9D1EEC00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b295b1e9-136a-331f-9518-a3269178352b.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     7342
IP address blocks:        2620:74:55::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:c9:15:34:87:03:1f:9d:1e:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=f3632657-5175-4271-906d-e4a4d3fb84ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0e:34:08:95:1d:2e:4a:bc:48:a1:4b:42:1d:
                    a6:eb:8d:7d:d7:2a:b7:99:09:56:8f:0a:44:15:9f:
                    7b:29:fd:93:87:0a:d1:a3:41:78:2e:a7:4a:6e:26:
                    ae:20:50:2c:e9:93:2b:5b:fa:4b:f9:7d:c2:24:4d:
                    74:3c:01:4f:c3:a8:44:f6:a4:bb:cf:47:7b:2e:0d:
                    b5:b2:0e:d6:77:89:5e:14:e1:df:70:d0:98:a2:a0:
                    95:55:84:10:d3:74:39:b8:ee:2e:a8:fa:48:54:51:
                    56:92:d0:69:dc:75:d8:5c:12:0a:63:92:e0:4d:53:
                    6f:d7:10:e8:30:3f:a6:70:84:e0:94:64:ef:be:b8:
                    26:79:2b:c6:bb:43:9b:b9:b1:40:dc:30:5f:a0:b6:
                    da:24:ae:2a:df:62:43:0a:a8:e0:b9:7a:dd:06:4d:
                    0c:27:f4:0a:bd:b3:7e:f6:cf:cb:80:c6:f3:26:0a:
                    8d:a1:73:f0:25:f0:28:25:86:ff:d4:82:98:c1:2b:
                    cf:4e:b3:6c:ce:47:25:cf:fd:a1:a0:a7:89:aa:09:
                    57:b5:e6:de:a1:b8:2c:c3:63:2f:15:1b:e3:3b:3e:
                    db:47:41:05:52:9f:25:16:04:a0:c5:60:f8:43:76:
                    28:f8:55:08:bd:49:3f:24:d8:22:0c:d8:30:39:01:
                    cf:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B1:98:4F:B8:D8:6B:73:40:90:86:84:DC:8A:3F:8A:32:10:0B:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b295b1e9-136a-331f-9518-a3269178352b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:55::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:70:7e:d3:c2:e7:d6:2d:44:4d:74:4d:5a:ff:b5:6f:21:c2:
         4f:f0:17:90:19:5c:ed:ac:9b:57:0b:80:c3:d3:1f:6e:c8:b2:
         f3:50:e2:d7:fa:ce:9f:c0:e0:64:0c:43:1c:23:4f:e3:ba:99:
         5a:d1:cf:d8:0e:f1:03:f4:f9:35:ea:d7:ca:b0:cb:1e:cc:f0:
         54:8d:ab:46:38:5b:a1:3e:bc:74:a1:8c:5a:81:6b:c4:17:9e:
         4d:b3:65:59:e8:97:ca:d3:06:e9:c1:c1:79:4d:a4:68:25:72:
         3e:36:73:fc:15:37:6f:3a:8f:43:83:71:63:62:52:06:b1:e9:
         24:13:39:a6:09:87:79:83:f0:f4:74:eb:e1:30:55:9d:4e:6b:
         db:ab:c4:a3:e1:a8:cc:ff:f0:f9:4a:96:1b:66:4b:81:43:14:
         09:12:eb:35:08:6e:9e:b4:c5:84:a5:ea:5e:16:62:76:5c:6e:
         5a:da:a1:d9:b3:7f:b5:35:ab:b5:16:b3:e1:d4:a1:c5:0f:db:
         3e:bf:6e:73:af:ef:dc:d7:e7:91:4a:5e:56:36:af:0d:23:84:
         dd:f6:d9:a9:ea:62:1f:3d:e7:d1:0e:da:15:6e:ad:a2:bc:1c:
         75:a6:19:75:5a:3f:18:90:3a:a4:f0:9b:76:aa:8e:f3:8d:ea:
         0c:6f:c1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:19:58 2026 by rpki-client