Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b83d6a07-74f7-335a-b14f-c7bcadc4889b.roa
File:                     b83d6a07-74f7-335a-b14f-c7bcadc4889b.roa (raw, json)
Hash identifier:          V7cXTWm61BFDjJ9PgnRG0nSDniMmbrSjPyK3vGIl8CQ=
Subject key identifier:   47:C8:3E:E1:51:1C:EB:52:3E:3F:7C:40:8D:F6:4C:57:E2:71:42:EC
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D59EA9862B72F38FAE6E9EE80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b83d6a07-74f7-335a-b14f-c7bcadc4889b.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     397195
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:98:62:b7:2f:38:fa:e6:e9:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=9c18ce83-0c99-4933-b485-a3b4bbc56467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:30:c6:fa:7e:12:47:65:43:09:05:66:e4:29:
                    0b:46:85:9d:d3:18:0f:8b:2d:4a:11:22:a5:3a:0d:
                    be:9d:9e:be:69:eb:57:c5:a2:d8:25:58:35:d1:10:
                    b9:d2:71:b1:b9:ff:3c:ea:df:98:4e:f8:d5:d6:f9:
                    c0:1d:ca:db:4c:5f:77:6c:0e:92:da:09:c1:3c:e6:
                    8b:ac:39:bf:36:35:17:99:54:4d:b1:2a:ed:c4:0a:
                    f5:11:95:9d:81:47:41:b9:0f:4b:ba:a0:dd:93:bb:
                    9c:6c:5a:37:37:e4:4c:43:d2:52:42:29:6b:9f:c9:
                    02:1d:e9:f2:18:cc:de:b0:29:43:7e:7e:69:b7:d4:
                    b4:67:0f:8b:2c:b5:a3:62:3d:93:6d:61:3f:04:a7:
                    24:2c:25:f1:d6:c0:9b:8f:0e:25:4a:71:76:f8:59:
                    c8:a3:f4:df:5d:cc:ff:0a:98:94:d4:1d:a0:a1:44:
                    61:aa:92:b3:0f:39:1f:bd:1f:32:39:aa:93:67:62:
                    4b:36:80:7d:82:83:6a:91:99:37:ad:c1:9d:c9:06:
                    fe:19:fe:95:5a:2d:f9:9f:07:7f:a8:9f:d7:f3:b9:
                    77:e2:cb:41:16:87:2c:74:d8:85:e9:aa:c5:5a:88:
                    3a:71:c3:9e:fc:88:d0:1b:93:a0:2e:f0:23:9c:c0:
                    05:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C8:3E:E1:51:1C:EB:52:3E:3F:7C:40:8D:F6:4C:57:E2:71:42:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b83d6a07-74f7-335a-b14f-c7bcadc4889b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:90:ea:e5:85:73:b0:a4:3d:08:1e:87:2c:b7:a6:c3:dc:e4:
         3d:c9:9d:b9:37:d0:16:5a:fe:43:b5:96:8e:be:9c:d5:34:35:
         5b:97:52:08:ce:ea:0a:af:7d:c7:1c:a0:a6:ec:e4:7c:2a:b4:
         5a:5d:44:8d:c6:6e:f7:31:92:ed:6a:54:90:5f:d2:5d:66:30:
         04:6d:74:23:df:96:52:ab:57:fb:52:8a:fe:70:8d:60:f5:2b:
         a0:7d:eb:0f:ce:41:7b:84:28:4c:64:48:41:ab:18:29:de:5a:
         ae:3c:1e:c3:57:00:68:6b:6f:20:37:56:36:50:5f:c7:92:80:
         f6:a4:89:4a:cb:da:f0:50:e4:21:2d:82:58:f9:ee:11:c6:7c:
         7d:63:0d:59:df:c3:74:f0:cd:ba:db:b4:c1:cc:95:10:13:68:
         f1:4d:65:3d:3e:54:ad:44:6d:4a:89:85:72:b7:50:66:af:4a:
         16:16:f5:00:b1:87:00:14:27:fc:94:5f:ac:a6:7c:77:79:2c:
         42:2c:cf:77:77:69:6d:1b:67:4c:fd:b0:b8:d7:26:9b:9e:cc:
         53:f9:75:76:a9:66:75:60:9a:0b:31:f7:6a:d0:c5:98:97:2c:
         15:28:d8:df:c1:dd:3f:39:8d:b9:48:3f:86:e8:5e:13:64:f1:
         0d:98:e3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:22 2026 by rpki-client