Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2cb70a77-47f5-3367-8eb2-53825d94f412.roa
File:                     2cb70a77-47f5-3367-8eb2-53825d94f412.roa (raw, json)
Hash identifier:          OngCHW19pG7sv4tzrtZycaHlOY3nnOLirs2Yqzck0OA=
Subject key identifier:   51:43:39:04:1C:A9:6D:B9:70:A0:0F:D6:60:B7:AA:63:93:97:58:57
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D32F5AEC41DFA39DB6E464E30
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2cb70a77-47f5-3367-8eb2-53825d94f412.roa
Signing time:             Tue 17 Mar 2026 14:07:01 +0000
ROA not before:           Tue 17 Mar 2026 14:07:01 +0000
ROA not after:            Mon 15 Jun 2026 14:07:01 +0000
asID:                     396605
IP address blocks:        2620:74:2a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:32:f5:ae:c4:1d:fa:39:db:6e:46:4e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 17 14:07:01 2026 GMT
            Not After : Jun 15 14:07:01 2026 GMT
        Subject: CN=6ee7daa2-08ae-4695-9fd8-174a4b310d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:65:bf:da:05:ef:eb:68:2b:c3:09:e5:53:18:
                    d1:3e:e7:80:2a:b4:03:67:81:ba:ad:dd:5d:7f:32:
                    7c:9e:f3:72:e9:52:ee:34:2c:e0:78:7b:9d:92:81:
                    2f:f6:53:ad:76:b2:ef:ae:d2:83:09:a7:07:8f:5f:
                    8b:af:cb:40:32:61:6e:6c:05:3e:c9:9e:43:e6:8e:
                    41:24:17:1e:63:05:21:3c:4f:49:76:05:45:9f:13:
                    7b:6e:0b:c6:01:ff:bf:b4:57:cb:dd:a2:71:e6:12:
                    80:bc:ec:83:d1:af:a9:5c:e8:f7:bc:c4:9c:78:b4:
                    4a:3b:8d:d9:ce:40:bc:06:a6:50:58:1d:0e:2d:bb:
                    37:92:d4:d9:08:8a:4e:ab:54:84:97:d7:0e:95:58:
                    7e:bc:ec:24:a7:65:b1:80:7b:b3:1a:e8:2f:da:48:
                    ab:73:8b:f1:e1:b1:ef:81:1f:10:2c:16:9b:5a:c4:
                    54:e0:66:4e:7e:71:87:0b:d4:38:70:c6:c1:43:6d:
                    34:72:80:f6:53:6d:7e:63:42:43:0e:cc:0d:81:34:
                    a4:c8:cf:b3:f6:1e:7e:43:43:ef:60:e4:a6:5f:f1:
                    aa:05:11:b9:9a:5b:ae:f3:41:37:5d:7e:b3:ca:c8:
                    f2:e9:ef:64:16:38:28:bf:62:53:5e:1f:bd:c5:fc:
                    b7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:43:39:04:1C:A9:6D:B9:70:A0:0F:D6:60:B7:AA:63:93:97:58:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2cb70a77-47f5-3367-8eb2-53825d94f412.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:f2:fc:54:cd:ac:ae:fa:f0:5c:31:c7:b5:fe:98:47:b4:ee:
         74:da:4f:db:0c:02:dd:bf:89:f1:8b:69:99:ab:0d:af:69:bd:
         1f:39:85:09:c7:25:0d:69:92:61:4c:0c:fd:13:0c:1c:ff:38:
         07:d2:75:16:bd:d6:f0:b4:7d:ff:d4:ba:49:8d:3a:63:df:01:
         34:8b:8a:a0:1d:db:f4:31:e2:9f:e9:6a:65:26:a5:2a:da:7f:
         11:82:db:e2:1d:33:45:15:d9:57:47:b8:95:7f:f2:78:92:49:
         de:b8:9c:50:46:09:97:ae:29:4b:50:11:84:63:ab:e8:8c:a3:
         e0:16:5c:18:bf:a3:87:3f:3f:3d:a2:8b:7c:b6:cc:fc:d6:9c:
         ff:7d:1f:cc:44:1e:96:fe:55:10:e7:74:72:86:b3:21:f0:20:
         01:16:37:c9:4d:44:6f:4e:da:6b:c1:86:73:6e:ad:de:84:13:
         ce:a1:6b:7c:18:3a:2f:f4:9d:29:b6:8a:6e:00:1c:59:ea:ad:
         de:1e:6c:53:b4:c9:d8:eb:7f:83:59:31:08:0f:12:b1:6b:41:
         90:30:b8:d2:7d:e0:5d:13:5f:47:79:0d:c6:30:8c:51:bf:9e:
         24:66:b3:b9:ca:8d:5e:d1:f8:78:4d:2e:e2:37:f5:26:d2:88:
         cf:51:3e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:45:44 2026 by rpki-client