Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d6c0b4a6-ac76-36db-a2ea-db4685d26601.roa
File:                     d6c0b4a6-ac76-36db-a2ea-db4685d26601.roa (raw, json)
Hash identifier:          W3bc0e3vBzVnrVLaNba8mezTPcOAJRL7XwT0X6lDakw=
Subject key identifier:   8D:75:04:0C:60:30:9F:71:27:53:FE:F9:C7:BC:98:E9:33:A1:42:A0
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E7204DD18BACA0B166DA01C50
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d6c0b4a6-ac76-36db-a2ea-db4685d26601.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     396540
IP address blocks:        2620:74:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:dd:18:ba:ca:0b:16:6d:a0:1c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=3522c20e-9cbf-46d9-b5d4-0fd96951dcee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:81:6e:3b:1c:8e:98:c2:1a:28:81:d7:e4:f6:
                    dc:ff:c6:56:4d:c4:88:15:10:f3:1a:6c:30:63:e8:
                    7b:d8:20:52:1e:2d:90:2e:f9:ae:b4:3d:f3:6a:8b:
                    e2:99:49:2b:28:e4:e5:4f:87:a0:82:7d:99:51:96:
                    fb:9f:a6:5e:5e:4a:44:f6:30:f9:78:e3:9e:91:a7:
                    25:d6:22:df:c1:b1:a4:4a:7f:7e:53:bd:55:bf:d4:
                    45:9a:13:c7:87:11:10:ee:50:22:24:57:0f:48:9a:
                    43:35:69:31:37:48:5a:75:d0:86:a3:2e:a7:a7:46:
                    e9:2b:91:81:24:5c:fb:02:e1:ce:ee:83:3d:be:b2:
                    2c:84:b7:d1:1a:af:e0:2a:43:fa:b0:d6:9c:f5:b8:
                    ba:2f:4d:36:7d:98:a6:3c:1b:3b:b5:cd:1d:b4:b1:
                    79:7f:b8:b7:a2:85:7d:58:87:ef:4c:c0:14:49:b9:
                    ab:a0:ab:93:d1:95:cf:db:34:34:26:fb:c0:78:64:
                    b1:68:3b:56:49:f5:ba:c6:74:76:2a:41:08:d6:ba:
                    a2:3e:c2:35:91:53:1d:37:50:c9:8b:ff:99:bd:1b:
                    db:5f:8f:0c:ee:0e:0c:af:39:0f:2c:6a:14:cd:74:
                    a5:6d:01:9a:80:1b:93:45:10:9f:f3:35:cb:89:fc:
                    94:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:75:04:0C:60:30:9F:71:27:53:FE:F9:C7:BC:98:E9:33:A1:42:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d6c0b4a6-ac76-36db-a2ea-db4685d26601.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:fe:cc:db:a2:67:0b:73:80:64:63:3a:60:97:9f:bf:a6:0f:
         3a:d1:d8:84:8f:2b:4b:28:de:5a:e0:6b:7c:cd:2a:21:95:c3:
         db:ff:24:22:78:74:fa:8f:1e:6d:21:4f:7d:7e:f2:8a:38:d2:
         d8:18:7f:e1:c0:ed:7e:3e:6f:e7:9f:f2:b0:34:2d:09:e5:87:
         97:07:1f:dc:6e:e6:54:17:ef:e0:32:69:06:6a:52:a6:77:9a:
         de:d6:7e:e7:95:08:81:a7:78:1d:08:18:79:a7:04:24:98:3c:
         91:a3:e7:32:70:a6:a9:bc:07:e7:3a:92:2d:2c:7e:69:fd:26:
         83:98:e3:58:d8:f1:0e:93:b8:93:50:fb:54:14:06:c2:3f:77:
         a3:78:08:1a:eb:43:70:38:16:b1:3c:dc:54:bd:43:64:92:da:
         9e:5a:8a:81:57:c1:3c:4c:03:ab:bd:08:2a:a6:b2:cc:67:72:
         e7:b5:d5:7c:22:81:25:cf:2a:cb:9f:09:3f:5b:77:71:78:ad:
         f8:76:1f:91:c3:f7:29:0b:d2:92:a3:b6:ba:6f:1e:2b:ff:e0:
         0a:53:a8:b7:eb:9c:58:f6:32:af:6b:f0:ba:d4:27:f7:60:3f:
         12:bd:ea:58:a9:bd:cf:3c:a8:55:42:a2:2f:e8:15:7d:05:d4:
         d3:f7:2b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:50:45 2026 by rpki-client