Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c13b104c-2b18-34f7-b4a2-00ae77811bdc.roa
File:                     c13b104c-2b18-34f7-b4a2-00ae77811bdc.roa (raw, json)
Hash identifier:          Qv1ULtW+uwpdbIlsfCpJioQNhfCi7fRzBNzvPEAn93M=
Subject key identifier:   75:D1:F1:C3:EF:9B:DB:42:54:FB:DB:D0:04:73:CF:1B:9D:43:7C:97
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F14678DD4694DDD9C623F0F20
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c13b104c-2b18-34f7-b4a2-00ae77811bdc.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     397204
IP address blocks:        2620:74:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:8d:d4:69:4d:dd:9c:62:3f:0f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=4daa0423-b4e2-40c5-ae86-685ec4e2712e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:82:63:01:32:9d:9a:d9:0e:7a:16:4f:f2:dd:
                    12:e3:55:a5:06:49:89:c1:eb:28:bb:0e:2f:e4:48:
                    42:f8:09:9a:dc:1e:52:cc:0d:6c:7f:bb:4e:36:65:
                    7a:e3:12:57:ed:1e:d1:1e:3a:5b:e1:0f:38:8a:3b:
                    7b:2f:8a:e6:d2:51:55:86:b0:91:e0:5f:1a:53:4f:
                    7f:bd:83:4c:d3:38:90:45:a1:05:5d:ab:59:11:30:
                    d9:eb:e2:cb:28:d1:36:b2:14:9c:7e:cf:ea:68:6a:
                    0a:34:88:5c:6f:9d:3a:71:34:21:41:bb:1d:0b:1c:
                    e3:91:11:eb:21:3e:b3:fc:85:05:fa:7d:64:c6:3b:
                    8b:1a:88:1f:59:91:9c:25:51:40:d7:24:5f:be:40:
                    fb:42:ca:ec:cb:dd:06:5a:1b:11:3e:d3:9c:ab:68:
                    bc:72:0a:0c:3c:dd:05:9d:0c:fe:c4:7a:a6:33:1d:
                    49:2c:3b:a0:45:d9:bd:b1:68:98:1f:91:a1:25:4d:
                    fe:e2:f7:f0:d9:8d:9f:c4:72:24:4e:cf:7d:f2:0d:
                    87:16:c5:20:ad:d6:b8:b9:0b:7c:15:c7:ce:61:dc:
                    96:c5:8b:a7:a3:43:27:0e:b2:b7:52:59:3c:6d:4d:
                    81:ce:79:3d:f1:a5:19:f3:e3:19:5b:5c:58:7b:d8:
                    18:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D1:F1:C3:EF:9B:DB:42:54:FB:DB:D0:04:73:CF:1B:9D:43:7C:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c13b104c-2b18-34f7-b4a2-00ae77811bdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:8e:e0:b5:00:07:4a:51:4a:54:80:f9:87:0a:87:ec:6b:7a:
         58:ba:2e:61:17:b6:68:8d:88:c7:4e:40:51:59:1d:12:c6:b1:
         26:75:53:e1:10:8b:f0:7c:0f:73:24:7e:73:fa:d3:06:bf:af:
         6c:66:08:0e:1c:81:87:22:b3:66:47:e2:f2:9f:de:38:9e:42:
         bf:2a:01:1b:2f:cc:4a:b4:99:6e:8a:33:85:48:d7:8a:b2:62:
         c3:4c:87:5c:76:78:90:cd:17:7b:c5:86:82:02:f1:91:d1:63:
         ce:85:5a:93:23:8e:7c:1e:f8:14:08:29:46:5f:e3:4a:09:85:
         1f:a5:f4:3e:8e:b6:83:e2:be:aa:b0:c5:18:a7:4d:c7:60:39:
         5f:d0:f9:84:e6:1f:12:11:ff:64:5c:00:f2:51:b7:b1:9b:28:
         2d:8a:99:33:57:24:06:c7:c8:06:2b:eb:0f:99:20:aa:e8:db:
         bd:8e:2f:2c:a9:76:7e:53:d9:2b:8f:3c:19:45:3d:a1:25:9a:
         7f:7a:ec:c8:cc:c9:93:76:4e:d5:d7:22:34:ff:cf:e0:0b:5d:
         22:ab:c0:6b:86:68:a6:68:8d:ae:f4:77:ed:75:73:d3:59:8b:
         38:a9:d5:f7:ba:75:92:00:07:48:e6:17:c1:c8:d0:50:23:05:
         e2:1e:08:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:05:37 2026 by rpki-client