Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8a5e44fb-e0a3-3f67-929b-49c2d660df55.roa
File:                     8a5e44fb-e0a3-3f67-929b-49c2d660df55.roa (raw, json)
Hash identifier:          fLeSMij+84gFWIwSKWneFn/aiY1rAfd7/moMhtxD2gI=
Subject key identifier:   E0:A6:0D:2A:79:A8:72:E7:4B:06:E3:A4:A7:EC:F7:A1:E5:92:2E:EA
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584DADAAE0A6E025C9594C299900
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8a5e44fb-e0a3-3f67-929b-49c2d660df55.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     0
IP address blocks:        2620:74:94::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:e0:a6:e0:25:c9:59:4c:29:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=a90f9bad-03a8-4931-adc5-0133f3ef0cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:19:dd:02:f4:cf:07:23:a5:85:42:6f:9b:5a:
                    91:df:36:89:9d:09:56:4b:95:30:90:4f:7c:76:3a:
                    f0:3a:31:51:40:56:46:93:3b:55:1b:f6:68:ae:f7:
                    24:f7:fe:53:37:60:73:ab:2b:3a:1c:cf:36:e2:77:
                    94:c8:3e:77:ae:4e:f7:b3:5b:ff:ab:86:ed:01:ac:
                    64:df:c3:91:c3:f6:a8:ef:33:f6:9d:12:3d:13:cc:
                    03:21:32:ec:e4:7d:bd:d3:fa:59:19:0f:f7:18:8a:
                    90:c1:02:16:b3:a3:b3:d1:25:08:60:28:96:b4:45:
                    e6:ea:51:0c:68:d5:dd:a7:93:83:52:7f:82:4f:8c:
                    3a:a9:6b:f5:e2:86:66:2a:ce:68:34:bf:70:db:fc:
                    1c:88:b0:32:df:72:a8:7a:76:0a:90:7e:be:2c:d9:
                    90:fc:c9:a0:50:31:5b:1e:83:15:6d:8c:90:3d:dd:
                    a3:58:13:79:e4:79:8b:cd:4d:03:45:9f:60:26:c4:
                    b1:ca:35:2f:55:ce:aa:9f:35:ae:82:bc:1d:3d:fc:
                    d3:3b:da:25:b9:b6:3e:af:a9:e2:ae:ac:6c:ce:ab:
                    dd:85:68:a4:9c:da:aa:d3:44:75:3b:c9:4b:ff:99:
                    6b:89:2e:2f:3b:3c:d4:c6:68:07:16:40:20:c7:91:
                    78:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A6:0D:2A:79:A8:72:E7:4B:06:E3:A4:A7:EC:F7:A1:E5:92:2E:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8a5e44fb-e0a3-3f67-929b-49c2d660df55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:94::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:c5:90:0d:42:0b:c0:a9:a2:db:1d:3e:b9:16:97:9d:1e:90:
         6c:cd:24:f2:5d:81:64:9e:4d:51:50:0f:e4:af:43:97:47:2f:
         96:1d:e3:b7:a0:73:32:a7:94:4a:f1:90:35:73:b0:ad:b4:ce:
         55:e6:15:b2:a3:cb:5f:00:fd:36:41:a7:94:dd:60:c3:4f:7a:
         41:6f:9a:7b:0e:36:2a:3a:d0:64:b0:5a:05:27:c7:a2:6d:45:
         ec:be:c1:16:96:9f:14:43:58:b3:81:21:b4:e2:3d:9e:f3:e6:
         2e:e0:4e:cf:e4:44:5f:08:58:21:cc:21:46:cf:0c:c8:0f:eb:
         3b:8f:58:8b:73:eb:2c:d8:84:8b:59:1f:00:43:b0:58:36:80:
         23:64:0b:03:85:18:81:ab:55:1f:76:bd:00:e5:76:94:d5:83:
         8c:1c:0e:12:f7:d4:6b:9c:c1:11:8d:50:82:ee:a6:c8:9b:99:
         26:24:46:37:a1:b6:7f:d4:7f:41:40:cd:76:f2:e6:62:05:2c:
         47:c0:aa:57:94:ab:3e:73:61:ae:ca:76:3b:2a:aa:cd:7b:e8:
         95:9e:fa:28:06:00:d4:9f:6f:27:45:db:73:98:0b:bb:6c:97:
         27:62:db:8a:a5:73:6f:45:2b:d0:95:2c:44:c7:5c:95:66:54:
         66:95:f5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:13:35 2026 by rpki-client