Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5959967b-2c0e-3796-9f48-074d19d6bdf5.roa
File:                     5959967b-2c0e-3796-9f48-074d19d6bdf5.roa (raw, json)
Hash identifier:          2PSS3EwHZiTX73R8Hr4Am2ezkMVn4TSumpIUyYTsQSg=
Subject key identifier:   A8:01:51:1A:7A:CA:E5:E1:CE:8F:CA:B9:68:F1:B2:A4:D0:5F:81:1C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D44FA52E29A7652F53FC4C280
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5959967b-2c0e-3796-9f48-074d19d6bdf5.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     36620
IP address blocks:        2620:74:2a::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:52:e2:9a:76:52:f5:3f:c4:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=9f7bdd0e-70b9-4d99-9757-9774ad1f00c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:05:2c:36:57:68:9d:73:ea:34:29:a0:ae:6a:
                    b5:9c:39:e2:00:1e:89:69:78:01:d9:1a:e3:c7:d1:
                    98:32:8b:3b:e0:1b:39:c3:65:7a:0d:21:c7:29:8d:
                    77:78:f9:c4:a1:1f:49:3d:17:2d:e5:b4:66:de:b4:
                    63:0e:66:c9:2b:f8:6b:e5:cb:a3:4e:85:d7:c3:40:
                    c4:82:b0:a4:ee:44:bc:3a:46:2b:a0:38:1f:2d:b9:
                    70:c3:3a:80:ac:9a:38:7c:4d:49:1e:3f:ab:f0:6a:
                    08:d1:ea:59:fd:d0:50:b3:f7:31:79:ee:b2:d5:93:
                    7d:2d:27:bb:18:a2:bb:e9:ee:bb:5c:95:31:26:1e:
                    68:c8:3f:80:36:2a:74:eb:8d:5f:8f:53:d1:21:1f:
                    0a:7b:78:c6:3c:29:5a:b7:14:76:8c:3d:45:a2:22:
                    cb:24:c8:63:48:b6:eb:f1:80:18:1e:56:33:ab:a8:
                    75:64:4e:75:61:a1:98:66:66:90:c9:a7:fb:c2:59:
                    da:8d:2e:c5:54:d9:84:38:a4:94:29:9c:ad:3e:4c:
                    a5:cd:f9:fe:5b:d9:59:73:a6:93:6c:3d:24:b6:08:
                    16:97:d2:a5:5a:b1:39:dd:09:46:6d:66:e1:32:32:
                    84:8b:40:a9:f8:02:cd:24:98:d9:ce:a4:52:18:b2:
                    c0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:01:51:1A:7A:CA:E5:E1:CE:8F:CA:B9:68:F1:B2:A4:D0:5F:81:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5959967b-2c0e-3796-9f48-074d19d6bdf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:1d:a7:ce:f0:82:6d:67:d4:db:3f:f2:e1:4e:81:3b:d7:67:
         d6:9f:c0:76:cc:85:ef:1c:ac:06:02:07:8a:e8:14:f1:37:9c:
         2d:ae:00:e7:4b:1f:b2:4c:17:e6:f0:c7:e8:49:fe:9a:8d:cc:
         17:c4:da:d1:17:a4:fa:fb:70:15:e9:37:ea:be:aa:a8:c3:ee:
         52:08:ee:46:c7:3f:a8:53:56:6a:cd:4d:48:5c:a4:d6:ea:7f:
         f9:78:4b:ee:52:f2:d4:fb:27:61:47:c5:cd:6f:80:e7:a8:9b:
         ad:e0:42:c0:e3:ab:ef:6b:0e:f6:3f:4a:8d:c5:92:58:ad:b9:
         3f:84:94:3c:a4:f3:fc:a3:2e:9f:a2:32:37:24:a7:b7:ff:56:
         78:15:82:b6:aa:f8:62:c0:3c:55:06:dd:0c:73:ff:c6:fd:ac:
         bb:76:33:4f:7e:db:1b:3a:5a:f2:1e:8b:f8:12:b1:58:7d:ae:
         b2:2f:7b:10:88:48:48:df:80:68:8c:49:97:3c:26:cc:40:f5:
         61:67:af:a4:f7:41:6c:e2:1a:6e:2a:dc:5a:81:49:d9:75:9c:
         35:32:4d:a0:af:fd:57:45:45:f2:68:50:a7:aa:45:29:df:5f:
         34:ef:a9:2f:eb:bd:d9:36:83:48:15:df:f5:bb:52:69:d8:02:
         6e:11:db:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:02:30 2026 by rpki-client