Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f5f4830d-b46c-357f-8794-790eece8ddba.roa
File:                     f5f4830d-b46c-357f-8794-790eece8ddba.roa (raw, json)
Hash identifier:          eZZMe9hiyS5YfwJL9cm07/yh26zZbyCynOr1UQY60YE=
Subject key identifier:   21:E2:5F:F6:1B:FF:A9:A7:DF:7C:6A:00:01:9A:1F:C3:A9:21:45:12
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584CF587AB344303F024E26A2B40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f5f4830d-b46c-357f-8794-790eece8ddba.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     397206
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:ab:34:43:03:f0:24:e2:6a:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=6557f224-25ec-4aa0-bf49-1ec2dbb31607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:50:14:31:b5:d7:2f:39:72:a1:6e:17:57:b5:
                    64:08:2d:0d:f6:f1:0a:28:b2:1a:1c:3a:10:b8:c9:
                    a6:25:73:10:ce:3b:19:59:bd:6c:ce:a0:32:57:94:
                    57:7f:9c:5c:24:10:47:33:2f:15:6e:98:b3:62:73:
                    71:d2:8c:94:8e:b8:b3:f7:80:e7:b9:e3:8b:26:72:
                    25:a3:e3:e4:f1:16:8e:d3:1d:8d:58:2f:73:40:27:
                    b0:ec:c7:20:76:6f:32:32:b5:a8:03:7c:bc:c5:c8:
                    4e:41:94:ef:36:e4:a3:2f:6a:e7:82:b7:86:25:6f:
                    9f:66:d1:15:49:18:91:0e:a8:6a:05:08:e6:67:db:
                    de:9b:d9:e4:a1:0d:10:38:45:18:6a:9a:37:c9:57:
                    66:b5:61:d8:18:24:01:35:cc:21:bb:44:11:59:f4:
                    5d:45:22:78:95:91:68:20:0f:22:15:1d:88:1c:74:
                    c4:91:64:fc:d3:47:2c:f2:4f:31:1f:95:d5:f1:22:
                    e2:11:e1:4c:71:6b:8f:62:26:fe:b8:48:90:9b:09:
                    92:02:a3:df:4f:e5:4e:e6:16:83:ba:74:68:6a:ed:
                    28:37:d8:cd:40:81:4d:ba:db:df:e5:15:1a:8b:09:
                    d3:07:40:72:5f:a6:ed:2f:df:71:3f:ad:cc:7d:78:
                    6d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E2:5F:F6:1B:FF:A9:A7:DF:7C:6A:00:01:9A:1F:C3:A9:21:45:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f5f4830d-b46c-357f-8794-790eece8ddba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:0e:9d:43:9d:87:db:27:e4:db:2f:3a:e0:ad:07:1f:89:cb:
         a4:b2:43:7c:87:4f:db:09:7d:e1:cc:9c:1e:ba:74:8a:0d:fe:
         30:57:96:d8:69:7d:34:d7:9b:57:fc:5e:ff:61:52:3a:11:19:
         dd:78:4a:b0:b1:d1:12:f3:10:bd:db:65:df:20:3a:f4:68:4a:
         8a:6c:4e:f1:12:38:ce:3b:18:64:d0:12:48:d6:24:f8:36:cb:
         81:f4:f9:ca:ad:08:7f:54:df:dc:2c:ce:0a:99:a4:95:53:0b:
         7b:7a:56:b7:65:41:c4:7d:c1:a0:42:d1:54:fb:7a:4a:69:cf:
         98:73:94:bb:1b:75:61:c7:36:9c:e1:9f:9b:63:62:0b:68:1e:
         e9:06:7c:26:de:94:e2:24:08:9b:65:3a:5f:0a:6d:b0:78:e6:
         75:31:af:b3:76:ea:b5:ed:9b:f3:82:e2:1f:55:a5:2d:0b:a3:
         12:3f:07:4f:63:2d:86:d1:c5:3d:09:8b:91:82:9e:b7:1d:69:
         f5:f4:14:aa:fe:fb:76:96:37:2f:37:5b:07:c0:33:67:d7:41:
         6a:ce:cc:a3:ea:a5:6f:40:bf:67:9a:e0:f2:4f:c3:08:b2:24:
         94:46:6b:3c:13:21:30:e1:ea:93:dd:1f:de:d8:c2:6f:b6:83:
         b2:25:7d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:40:07 2026 by rpki-client