Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0c574e24-0515-3870-9ee1-144bf07f11b1.roa
File:                     0c574e24-0515-3870-9ee1-144bf07f11b1.roa (raw, json)
Hash identifier:          NMIzXgtGWSA6zK+kwGJ1yFGnx6DRtOW2ZMQLl9OGMM4=
Subject key identifier:   4D:58:F8:DA:28:3F:89:86:B1:6C:8F:70:B0:62:F9:CF:68:73:0A:EF
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584DC29AFA178622477EE811B500
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0c574e24-0515-3870-9ee1-144bf07f11b1.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     32651
IP address blocks:        2620:74:2c::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:fa:17:86:22:47:7e:e8:11:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=40b46c73-eda9-4db6-a179-e63efc091511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e7:29:44:e0:b8:3b:83:6f:f7:ff:75:c6:b8:
                    2f:b1:6f:da:af:03:6d:76:3a:e3:8b:85:99:f6:9d:
                    6b:5d:5d:1e:ea:22:67:11:c3:90:ce:f6:36:36:d3:
                    3f:86:93:d5:1e:e8:e0:40:5b:30:3e:ec:bc:5e:93:
                    38:6e:4c:2d:74:74:65:0b:78:bb:57:4f:d4:75:de:
                    07:2f:72:2d:98:a3:b2:30:87:09:a8:06:4f:5a:0c:
                    7e:ac:31:32:0a:31:5b:73:ca:fb:0d:de:c7:c9:e0:
                    4d:db:83:0d:07:24:5e:fc:29:5e:90:09:66:84:43:
                    77:3a:e4:35:d6:60:70:cb:26:a9:7a:e7:58:f0:78:
                    df:d9:0c:43:3a:91:7d:a4:d0:22:ce:c9:0f:6c:93:
                    dc:e7:4e:0e:25:84:02:7d:63:6d:bc:03:4d:79:75:
                    dc:31:87:46:9d:78:e2:c0:41:f7:e4:76:1d:58:c0:
                    b1:8d:d1:82:be:58:9b:75:14:08:77:7d:f1:e6:c8:
                    85:55:a3:05:dd:d4:1f:17:cc:bc:7d:93:51:83:1b:
                    e5:85:10:66:8f:cd:ef:9c:9a:45:9a:e3:7d:6f:a9:
                    00:81:d5:c4:17:ad:21:11:14:b3:d9:40:a4:d5:8b:
                    50:16:79:89:49:8f:60:32:f6:0f:93:2d:23:17:1c:
                    53:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:58:F8:DA:28:3F:89:86:B1:6C:8F:70:B0:62:F9:CF:68:73:0A:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0c574e24-0515-3870-9ee1-144bf07f11b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:6e:d6:37:6f:75:49:d2:50:6c:7a:1e:5c:d0:16:8d:1d:6f:
         76:50:60:da:aa:70:bd:c3:dd:26:0f:24:14:38:36:e3:1d:63:
         fb:ee:23:22:ec:d2:c1:28:79:11:6b:da:ff:01:3c:74:69:2c:
         a4:49:17:d9:a7:fe:8c:43:72:ea:59:25:9e:0b:2a:ef:f8:10:
         19:fa:df:32:93:9d:1d:0b:de:03:a9:bd:62:e6:0a:33:89:0a:
         08:0c:e4:00:20:45:f0:0b:fe:b6:b5:d4:00:54:48:74:0d:c5:
         6c:74:92:2e:76:87:7d:41:0c:70:77:96:d2:84:30:91:21:41:
         59:ec:0a:04:89:f1:3e:cb:36:55:e3:b4:ac:14:f3:30:5c:a8:
         54:ea:3f:f3:a4:a1:c7:ac:94:4f:67:fa:42:54:35:21:6c:b4:
         2c:85:ca:7c:a8:e6:76:ca:f2:d2:4e:c7:aa:25:74:1d:14:d4:
         a9:60:7e:80:6c:c4:b8:ec:97:1b:9d:4c:44:56:b5:06:59:08:
         87:75:f8:e3:ce:25:d7:a3:3e:a7:e9:fc:9d:c1:49:a2:30:40:
         15:1f:82:6e:d5:78:db:dd:b8:83:ee:9d:c7:e2:2c:8b:53:f4:
         e5:95:bc:2e:14:f6:0b:19:a7:72:7e:fa:44:cb:83:77:93:23:
         b5:90:ab:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:06:02 2026 by rpki-client