Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f50af9e-2962-3c73-891b-2b2f216346f9.roa
File:                     7f50af9e-2962-3c73-891b-2b2f216346f9.roa (raw, json)
Hash identifier:          sn4m5/x60hdFigmUMyXJdSx/QBbBWQASsBkdrY1Tt6A=
Subject key identifier:   2A:32:03:2F:5D:9E:30:A4:6D:DC:D2:19:C1:67:3A:A7:70:B0:78:F3
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E7204CF5B9E2211DF13FFFB80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f50af9e-2962-3c73-891b-2b2f216346f9.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     396608
IP address blocks:        2620:74:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:cf:5b:9e:22:11:df:13:ff:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=481909ee-62a5-46c1-93e4-9ba911214d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c8:a0:c9:b9:b6:77:c5:8e:52:f8:82:a9:03:
                    09:2e:67:2b:55:ed:fc:d7:7f:ac:36:34:4d:6f:97:
                    f8:61:50:70:3f:5b:ee:16:ef:58:f3:44:2d:51:10:
                    cf:16:35:fe:d8:af:d4:21:5d:c9:62:43:de:a9:c0:
                    b6:be:d6:e4:a0:a8:68:6c:53:b0:f9:db:38:d4:0d:
                    e0:03:05:d4:54:80:cd:38:95:84:ad:eb:a5:21:5d:
                    3c:26:c9:99:1f:7c:69:41:5d:13:af:f1:9b:cc:26:
                    69:96:06:75:90:6d:ff:8e:2a:7b:50:76:ee:cd:0e:
                    6d:fc:46:0e:e4:5a:7d:9c:91:2b:8d:a5:c2:63:52:
                    00:de:8a:1d:ac:19:07:4a:49:ac:76:3a:17:2a:b9:
                    3d:42:39:c0:0b:33:78:fb:fe:7e:ac:5e:ed:aa:c0:
                    c2:df:74:49:51:07:b1:6d:ed:13:5a:ad:e1:75:ac:
                    45:c8:31:f9:8d:5b:20:ef:8c:aa:65:dd:64:4d:1c:
                    e0:a2:80:dd:5b:09:6f:27:b8:63:47:20:c9:45:23:
                    60:3d:4c:cf:e9:d9:7f:1f:61:75:62:2b:f7:47:98:
                    a3:d1:5c:6a:d5:28:32:80:84:88:77:e1:8f:af:30:
                    59:02:f5:8f:cd:71:cc:e1:79:b3:bb:47:01:10:76:
                    7d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:32:03:2F:5D:9E:30:A4:6D:DC:D2:19:C1:67:3A:A7:70:B0:78:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f50af9e-2962-3c73-891b-2b2f216346f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:f5:a1:7e:a7:a8:9f:48:82:aa:20:d9:40:9c:c1:d9:e7:22:
         dc:19:00:ca:fc:b7:e4:5b:7f:e9:64:ae:38:1b:19:d6:5c:01:
         8f:0e:92:ef:71:eb:f6:8e:d6:1b:4c:1a:6f:51:8c:8a:e0:75:
         f6:23:fb:5a:49:7d:d8:b3:d7:b3:47:c4:c4:bc:61:08:1b:8f:
         f1:c9:6f:d2:4f:05:d3:cb:53:49:be:08:88:8b:10:b7:0b:fa:
         11:07:a3:2e:21:14:7d:b3:2c:6c:18:42:64:59:33:6d:3c:42:
         3e:b8:a7:df:35:81:13:a7:23:41:f2:48:e5:07:51:82:ac:d8:
         67:3a:9e:80:1c:91:30:7e:38:23:c0:a0:f7:c5:74:52:8a:a1:
         a2:8e:e0:45:2f:c3:f0:02:d7:03:d1:e7:3e:bf:e7:8e:99:88:
         49:dc:1c:6d:60:04:b2:27:33:97:ee:87:ff:12:d9:e2:9e:67:
         53:b4:4c:08:0e:61:58:0f:84:6d:b2:4e:c8:39:d5:75:e0:79:
         2a:2e:be:ef:8d:dd:76:79:a1:c0:80:bc:5a:f5:bf:14:5b:a1:
         ec:60:18:c1:9b:30:12:36:8a:9a:6e:fc:72:46:d2:ce:1c:97:
         ce:f8:17:a7:28:7d:58:88:d3:17:60:02:d9:6e:2a:d4:29:f4:
         87:67:6a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:19:41 2026 by rpki-client