Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51a34908-8ab6-3d61-b68d-2457f1535005.roa
File:                     51a34908-8ab6-3d61-b68d-2457f1535005.roa (raw, json)
Hash identifier:          D7zn4R1HwK1DCrD3o4B97xpapWf+fqIvTEdHqM1dic0=
Subject key identifier:   39:73:5B:C1:BB:58:64:84:52:E8:83:C6:7E:21:72:DD:96:F7:36:AF
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D91C00A3E6F5D61D31B018100
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51a34908-8ab6-3d61-b68d-2457f1535005.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     396583
IP address blocks:        2620:74:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:0a:3e:6f:5d:61:d3:1b:01:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=5c1cb754-0035-4c7f-b9a2-60db8e8b4946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5c:8a:2d:39:3c:c0:43:6d:28:9c:b7:84:54:
                    92:ce:2a:c5:87:b4:06:f8:24:e8:c1:46:16:99:20:
                    a6:a2:73:9a:59:bf:e6:34:11:fd:25:01:e4:6a:42:
                    57:85:5b:61:99:43:ed:72:7e:46:6e:37:01:54:08:
                    f0:b6:48:4e:fe:70:f5:30:a1:6e:66:bd:d2:f4:32:
                    7a:b0:81:d5:a8:a7:8a:66:3d:fc:f3:97:1f:ef:3a:
                    45:8f:ce:67:1b:59:a6:a0:ed:77:0e:c4:2e:63:eb:
                    85:2b:85:af:90:17:68:79:67:cd:ff:e0:b8:15:34:
                    57:77:80:f8:c9:a9:6c:91:a6:f6:a8:01:ca:99:37:
                    3b:36:41:8e:90:f1:0c:1c:1f:2f:ca:f4:37:5f:bd:
                    8b:3d:a6:b8:a8:7a:ed:8e:a0:95:aa:94:3d:8d:a0:
                    b5:cf:15:67:09:d2:f4:ba:7b:14:3d:5e:f8:7e:dc:
                    cc:f1:f2:a1:68:10:52:26:7c:72:06:93:9d:8e:59:
                    b1:c9:3c:0c:d4:fe:fe:58:65:0c:54:64:aa:94:1c:
                    29:71:d3:1e:ae:94:5c:6d:22:86:6a:e4:60:8e:89:
                    6c:6d:17:51:08:dd:a4:ff:08:79:c9:36:18:d0:92:
                    f3:44:38:ca:cc:ea:0e:28:9d:4a:f3:a7:22:16:d6:
                    12:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:73:5B:C1:BB:58:64:84:52:E8:83:C6:7E:21:72:DD:96:F7:36:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51a34908-8ab6-3d61-b68d-2457f1535005.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:61:1f:a4:a9:27:89:67:94:e0:f8:00:fa:6e:aa:f5:b2:df:
         e9:4e:4b:54:e6:d9:1e:20:33:b3:15:39:49:86:7d:eb:14:d5:
         73:52:84:60:f6:75:8e:0d:64:70:02:9f:37:4c:49:09:12:c9:
         0f:b9:86:c9:3f:36:4c:d4:9a:f5:1a:9b:83:6a:16:5f:17:c7:
         53:66:1b:34:2f:eb:71:86:7b:df:a5:04:8f:6d:84:21:41:95:
         b6:ac:f3:5d:1f:09:2c:5e:76:3a:59:94:20:48:a4:5c:64:c0:
         72:82:37:5e:d5:d0:8f:53:5b:e6:80:a8:98:21:eb:84:85:68:
         84:42:b0:8e:57:b2:16:43:99:bc:9d:7e:96:6f:ae:af:91:89:
         f8:32:25:dd:ac:87:b5:1f:af:bb:27:6e:54:18:bc:ed:ca:91:
         64:67:ef:54:f2:30:58:a1:fb:ac:b0:0a:85:c3:af:2a:5e:53:
         a7:b7:94:c7:19:14:f1:af:48:f8:6a:8e:63:78:82:18:db:09:
         59:57:4a:7c:14:dd:cc:81:a4:09:1d:37:b8:b5:be:d8:32:e8:
         18:11:28:19:93:2b:e3:0c:02:f4:44:7d:97:d1:eb:87:71:95:
         09:2c:95:67:9b:e1:71:74:3f:bb:94:2f:8b:00:ba:b6:4f:d7:
         b3:ea:f3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:44:52 2026 by rpki-client