Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e0ca5f44-c099-3884-be7d-18399124b7ca.roa
File:                     e0ca5f44-c099-3884-be7d-18399124b7ca.roa (raw, json)
Hash identifier:          BaKIBh3ijSwh2tSkMcpHjmCebqNPLjAukDQegQQ8zu4=
Subject key identifier:   02:AC:61:81:91:80:99:00:EF:A5:A3:EC:64:14:65:13:BF:E6:E8:0E
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D7470189026D6344703B73F00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e0ca5f44-c099-3884-be7d-18399124b7ca.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397228
IP address blocks:        2620:74:1b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:70:18:90:26:d6:34:47:03:b7:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=474448bc-3dee-40e9-bd80-2bad71008dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:72:d0:06:dd:b5:30:31:3f:69:54:ed:aa:02:
                    20:59:09:2d:45:3d:01:bf:54:48:f3:0f:be:d9:42:
                    49:ab:07:73:62:4b:cd:7a:6f:07:20:e4:f6:c8:85:
                    60:41:31:85:83:f5:b0:f9:7a:44:55:7b:65:4d:0a:
                    e4:6e:62:3a:99:15:0d:59:b0:6c:c6:2f:b4:d6:c5:
                    ee:4b:dd:0a:5a:17:66:8f:16:06:e3:09:54:fb:f0:
                    0b:73:f0:34:09:03:32:54:1a:94:92:a2:57:3d:6c:
                    74:21:a1:2a:da:38:69:a8:42:11:c5:33:6c:36:21:
                    c0:c3:d3:27:bd:b0:2a:bd:4b:fd:9b:76:9e:8b:c5:
                    45:cc:24:a3:f0:b2:a6:c2:12:ee:bd:f0:49:af:0e:
                    1b:a4:75:d4:6e:aa:e4:76:fa:53:54:ce:12:9d:be:
                    c1:2e:cc:49:0c:50:1e:e6:f3:ff:db:b6:b6:54:fe:
                    cf:1d:38:b5:12:5b:5e:07:e6:0e:d6:b4:62:d4:07:
                    bd:11:02:ea:56:39:1f:cd:6a:e3:79:af:c9:03:55:
                    6c:b4:70:98:1e:70:cc:ec:09:29:fb:96:fc:95:ac:
                    e1:94:9d:2b:08:df:be:73:5d:2d:6a:5e:08:7e:95:
                    79:29:c1:30:03:03:7e:f5:6d:b5:a5:0e:be:e6:70:
                    cb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AC:61:81:91:80:99:00:EF:A5:A3:EC:64:14:65:13:BF:E6:E8:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e0ca5f44-c099-3884-be7d-18399124b7ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:1b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:97:cd:87:c6:33:ba:dc:1a:cb:58:71:4b:07:1b:f3:03:39:
         36:75:62:70:4a:e9:a5:de:36:89:3c:a0:3f:36:79:cf:35:b1:
         3b:2d:e2:e0:a8:25:7e:41:f5:ef:8e:1d:64:35:8e:e0:42:97:
         52:ca:64:74:27:d5:9b:98:91:07:64:6f:04:bd:07:98:d3:a8:
         01:55:06:27:be:0f:29:7b:5a:70:76:97:ce:12:a1:1e:53:a8:
         e7:a3:72:70:97:27:b4:25:6d:5c:fd:9a:87:89:9b:70:5c:5f:
         6b:61:09:60:cb:89:80:da:4f:9b:d5:60:8e:e9:d4:0c:24:95:
         1b:9e:29:78:3f:54:21:2b:ac:0e:8d:19:20:d4:75:2d:3a:dd:
         2c:39:04:3c:fd:84:d0:94:35:e5:34:fa:b7:6d:5b:94:5b:b8:
         1b:4e:6d:16:1f:fc:e1:56:d7:d2:3c:0b:42:96:cf:1f:6c:02:
         de:93:bf:ee:60:45:ec:1c:5f:7f:77:b9:81:d2:2d:0e:4d:a9:
         f1:1e:70:7c:a5:14:db:87:61:78:ef:4b:77:c0:52:77:2e:9a:
         82:60:82:be:56:ba:0a:2a:75:61:35:e4:6b:a0:dd:93:8b:39:
         09:14:cd:14:84:90:91:68:7d:31:7c:43:48:c3:88:80:26:d9:
         2e:66:7e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:53:22 2026 by rpki-client