Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20274ef5-a895-4a21-8558-063f5cf922b8/457b6738-f991-3981-8cbb-5f1607a3d8c4.roa
File:                     457b6738-f991-3981-8cbb-5f1607a3d8c4.roa (raw, json)
Hash identifier:          uvjJv+b9rdafA+qoFdOuOsuyjA9rKsrZMJhkOAMHouI=
Subject key identifier:   C8:41:C0:55:2A:AC:29:E3:53:D6:51:0C:1D:53:36:FA:1D:B5:49:68
Certificate issuer:       /CN=20274ef5-a895-4a21-8558-063f5cf922b8
Certificate serial:       010D0C9F4328584D80FFE2C10C6A0A80C9818D00
Authority key identifier: 7D:34:DE:E2:FD:74:12:DB:62:8E:63:C7:28:16:F3:69:0D:82:89:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20274ef5-a895-4a21-8558-063f5cf922b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20274ef5-a895-4a21-8558-063f5cf922b8/457b6738-f991-3981-8cbb-5f1607a3d8c4.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     17172
IP address blocks:        2620:a7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20274ef5-a895-4a21-8558-063f5cf922b8/20274ef5-a895-4a21-8558-063f5cf922b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20274ef5-a895-4a21-8558-063f5cf922b8/20274ef5-a895-4a21-8558-063f5cf922b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20274ef5-a895-4a21-8558-063f5cf922b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:e2:c1:0c:6a:0a:80:c9:81:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20274ef5-a895-4a21-8558-063f5cf922b8
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=510044d1-d3c5-4634-849e-792af6fa26ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:39:15:75:0f:93:31:d3:df:1f:95:7a:3c:ad:
                    57:30:76:e8:01:1f:26:9c:45:62:ca:a1:8f:3d:75:
                    21:dd:80:31:a9:7f:02:8a:95:cc:4a:48:64:6d:05:
                    01:f5:e8:76:1f:fa:48:9f:53:2c:cc:2f:58:72:31:
                    28:77:33:76:30:6b:9a:2c:44:ba:59:65:3a:71:6c:
                    db:84:2e:90:76:d6:95:88:1c:34:9f:1c:71:5d:c1:
                    05:c7:04:06:94:3b:b0:9b:c7:30:e4:02:78:31:f0:
                    47:fe:cd:63:bd:3c:17:55:01:f0:50:28:2a:b8:47:
                    58:61:ea:b3:76:3d:99:1d:fc:a9:8d:3f:93:86:03:
                    55:03:6d:20:06:38:c9:f8:29:49:5b:a0:4b:ed:c7:
                    f7:24:eb:eb:08:5e:69:ac:8e:08:7b:ae:06:d3:55:
                    7f:49:fa:d9:f6:20:af:d0:ad:6d:e2:d8:c4:3b:a9:
                    5b:34:5c:4d:f9:3c:c4:23:13:64:0d:e2:89:ae:0b:
                    ed:11:32:3c:af:a9:7c:71:9d:ed:12:ff:3f:39:fa:
                    0a:ed:ec:b4:45:a4:04:c5:cd:e7:c8:e3:f9:b0:74:
                    80:f6:b3:9d:6d:ba:17:79:86:2d:43:5b:f7:37:8a:
                    21:f9:63:a7:4a:f3:e5:1a:80:8c:d4:bb:16:34:27:
                    84:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:41:C0:55:2A:AC:29:E3:53:D6:51:0C:1D:53:36:FA:1D:B5:49:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20274ef5-a895-4a21-8558-063f5cf922b8/457b6738-f991-3981-8cbb-5f1607a3d8c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20274ef5-a895-4a21-8558-063f5cf922b8/20274ef5-a895-4a21-8558-063f5cf922b8.crl

            X509v3 Authority Key Identifier:
                keyid:7D:34:DE:E2:FD:74:12:DB:62:8E:63:C7:28:16:F3:69:0D:82:89:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20274ef5-a895-4a21-8558-063f5cf922b8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:2e:ae:43:d3:7b:53:a9:21:4b:62:2c:6d:ac:02:cd:5c:ba:
         cc:54:3e:bb:9b:2a:e6:72:17:b8:f8:c3:d8:dc:d8:57:48:16:
         31:85:f8:83:70:96:91:01:b3:34:94:a6:18:fc:10:09:e0:34:
         06:56:26:60:3e:d7:cc:2a:c6:25:36:b3:68:70:06:3d:14:b9:
         77:42:a7:a6:1f:1b:10:82:52:b4:66:61:8e:b5:bb:59:6c:08:
         c2:6f:9f:21:21:2d:99:c7:df:0b:96:3e:3b:9c:91:d3:5a:5d:
         f3:f4:c3:e7:b5:49:62:95:a2:26:88:6f:84:2e:b4:f3:f6:d8:
         4f:1a:36:27:0a:a8:7d:78:66:29:37:40:5a:22:f9:ce:49:c9:
         dc:8e:39:56:7c:03:82:e1:f0:7a:31:87:34:c2:2f:7b:90:88:
         b5:e7:46:f8:b0:0f:b5:ed:71:3b:b2:b8:b3:e0:25:76:16:70:
         8c:a2:bf:d6:9c:1a:f1:af:1f:c7:bb:21:13:4d:96:ad:a2:33:
         01:aa:4c:27:4a:70:31:de:b9:2b:17:da:07:9a:c6:57:6d:d7:
         64:68:06:fe:01:e7:db:51:4e:5c:25:62:b6:84:dd:c5:7d:9c:
         27:bb:62:bb:35:4e:d7:93:84:00:f1:f6:d8:3e:9e:a5:55:2e:
         2f:54:c0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:53:44 2026 by rpki-client