Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d4a9113f-c31c-3f0e-b3a7-ada28a4c86d6.roa
File:                     d4a9113f-c31c-3f0e-b3a7-ada28a4c86d6.roa (raw, json)
Hash identifier:          t2t7zi1hFHQDo0KpCUEffnvIldZuax1mC+yUxxYdjto=
Subject key identifier:   5A:E9:A5:4D:07:C2:94:CC:02:8B:E1:A5:22:04:7C:DC:CB:53:C4:04
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584D44FA51047941E73EA6FF4980
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d4a9113f-c31c-3f0e-b3a7-ada28a4c86d6.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     36625
IP address blocks:        2620:74:2a::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:51:04:79:41:e7:3e:a6:ff:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=a6a2f6e0-fa74-4b25-9c46-54c5bba1e5e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d1:14:82:69:a7:75:5e:30:af:41:e5:34:20:
                    82:69:77:d5:c6:62:af:ba:47:e8:04:2d:22:07:af:
                    6f:73:90:ab:db:01:a9:47:5f:84:ef:50:83:1a:86:
                    61:91:fd:ea:fe:50:ad:b0:fe:1d:95:b9:29:3d:e0:
                    32:3b:de:ab:8d:ef:64:d2:48:9e:6a:28:b2:f2:18:
                    47:42:fc:e1:a0:91:14:5a:4e:d0:b1:ce:85:44:25:
                    52:dd:40:c3:19:3d:85:56:20:a9:b8:33:4c:65:5b:
                    cd:b5:25:90:fc:70:73:5a:8e:37:b2:bb:28:9d:e1:
                    34:4e:a4:8e:84:84:c9:02:00:f0:83:1d:7e:a6:6a:
                    6c:04:b1:b8:4a:72:a8:bd:ee:60:00:0a:5e:e8:27:
                    2b:a0:ef:c4:18:59:50:dd:d2:d2:ba:e6:d0:35:36:
                    fb:9c:ba:69:f2:9a:45:81:6d:73:c6:7e:76:bb:af:
                    e7:19:3f:70:76:63:0b:25:45:fa:46:45:49:35:77:
                    7f:31:09:12:29:24:05:0e:57:46:f4:6b:c0:32:5b:
                    5a:e4:d2:55:36:ac:24:73:da:73:7f:e1:88:ce:8e:
                    da:12:5e:75:a3:2f:47:4e:4f:bc:2f:65:20:09:73:
                    2b:17:27:72:5b:2d:29:15:fe:63:92:eb:e0:00:c9:
                    b3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E9:A5:4D:07:C2:94:CC:02:8B:E1:A5:22:04:7C:DC:CB:53:C4:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d4a9113f-c31c-3f0e-b3a7-ada28a4c86d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:10:02:ed:15:6b:e9:a5:43:2e:2a:78:bb:21:1b:2f:fb:84:
         66:d8:ba:2a:3c:39:05:d5:e6:5a:52:4f:d7:44:c8:e4:b5:97:
         0d:a9:41:f2:32:5c:02:ea:02:5c:7c:83:5d:86:ec:65:b0:7f:
         5e:81:cb:a3:b4:1f:fb:79:18:8d:60:f2:a4:28:a2:82:f6:d5:
         ac:11:46:6d:ac:9d:2c:a5:ac:0f:a8:b2:b8:86:a3:4c:38:0b:
         f6:25:f2:89:1f:68:e0:cf:b7:a4:e4:e6:84:7d:1e:ee:ff:84:
         74:18:6c:e4:a9:6f:66:f7:08:56:fd:db:7a:ac:8f:2f:3c:99:
         27:d1:b7:15:d0:d0:44:3e:2f:81:b1:c8:37:94:07:0c:7a:5f:
         83:6d:9a:84:37:a8:9d:f5:08:d0:c5:44:f1:72:78:b3:69:02:
         66:e7:f6:5c:ce:49:99:f5:d6:1d:aa:ef:e2:58:50:ed:75:e3:
         e9:61:9c:33:f3:6d:1f:7e:b2:7a:03:b3:eb:2f:4f:11:d5:35:
         82:f7:dd:f8:c3:5c:bc:55:c0:6c:8a:4b:55:15:33:d6:31:d9:
         db:22:26:e9:a3:f6:01:0a:59:ff:c3:17:6b:90:56:d6:47:b1:
         92:d8:d3:0f:dd:75:f2:30:86:d5:4d:a1:6c:99:ce:2b:b0:01:
         13:55:e1:1f
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lEEeUHnPqb/SYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk
YTZhMmY2ZTAtZmE3NC00YjI1LTljNDYtNTRjNWJiYTFlNWU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9EUgmmndV4wr0HlNCCCaXfVxmKvukfoBC0i
B69vc5Cr2wGpR1+E71CDGoZhkf3q/lCtsP4dlbkpPeAyO96rje9k0kieaiiy8hhH
QvzhoJEUWk7Qsc6FRCVS3UDDGT2FViCpuDNMZVvNtSWQ/HBzWo43srsoneE0TqSO
hITJAgDwgx1+pmpsBLG4SnKove5gAApe6CcroO/EGFlQ3dLSuubQNTb7nLpp8ppF
gW1zxn52u6/nGT9wdmMLJUX6RkVJNXd/MQkSKSQFDldG9GvAMlta5NJVNqwkc9pz
f+GIzo7aEl51oy9HTk+8L2UgCXMrFydyWy0pFf5jkuvgAMmzWwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFFrppU0HwpTMAovhpSIEfNzLU8QEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDRhOTExM2YtYzMxYy0z
ZjBlLWIzYTctYWRhMjhhNGM4NmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBPEALtFWvppUMuKni7IRsv+4Rm2LoqPDkF1eZa
Uk/XRMjktZcNqUHyMlwC6gJcfINdhuxlsH9egcujtB/7eRiNYPKkKKKC9tWsEUZt
rJ0spawPqLK4hqNMOAv2JfKJH2jgz7ek5OaEfR7u/4R0GGzkqW9m9whW/dt6rI8v
PJkn0bcV0NBEPi+Bscg3lAcMel+DbZqEN6id9QjQxUTxcnizaQJm5/ZczkmZ9dYd
qu/iWFDtdePpYZwz820ffrJ6A7PrL08R1TWC9934w1y8VcBsiktVFTPWMdnbIibp
o/YBCln/wxdrkFbWR7GS2NMP3XXyMIbVTaFsmc4rsAETVeEf
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:17 2026 by rpki-client