Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f5f4830d-b46c-357f-8794-790eece8ddba.roa
File:                     f5f4830d-b46c-357f-8794-790eece8ddba.roa (raw, json)
Hash identifier:          CVi4cDTjD+Nxv7qSNWFhLSDTPj9Z1Col/8QEBfRH/gk=
Subject key identifier:   AC:6A:C1:50:41:86:4D:4C:4E:7E:9D:0B:0C:6F:C0:3D:A0:57:27:99
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F49858834DEE89B27BF2C9940
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f5f4830d-b46c-357f-8794-790eece8ddba.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397206
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:85:88:34:de:e8:9b:27:bf:2c:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b064c350-4e36-47cc-98e6-f080106c2bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:60:fb:d6:43:3c:b1:f0:4b:b8:96:99:38:00:
                    8d:b9:25:af:b7:60:cb:16:27:39:58:08:37:bd:01:
                    63:1a:4a:ea:75:2a:e8:be:63:44:36:4c:9f:bd:99:
                    17:fb:9c:23:67:59:9c:ce:8b:81:15:d4:0d:91:4b:
                    cc:13:96:99:e9:8f:ba:88:55:2b:2c:f2:80:1d:a1:
                    d9:a0:c3:39:3a:4d:75:2f:69:46:59:03:ff:4a:f1:
                    bb:bf:d3:9f:03:d3:5f:1e:f5:a4:dc:ba:83:4b:a3:
                    ad:dc:b6:5f:85:b0:13:e3:0d:ea:28:c6:f0:49:5b:
                    80:3a:b6:cc:7c:19:7c:3c:0e:70:db:f5:91:98:18:
                    69:ad:0f:9a:38:c3:36:eb:c4:b9:02:0f:6d:c5:6d:
                    43:d8:20:24:1e:ce:df:6b:f5:44:54:7d:16:f1:34:
                    58:7d:a9:c6:8b:ca:7a:6b:78:72:6c:63:93:22:85:
                    fa:43:6e:37:04:fb:2a:47:21:e5:6e:a3:36:ac:91:
                    8f:7e:8d:e5:39:1c:7e:a1:c9:79:3a:be:bc:17:2e:
                    f1:e1:e0:df:2b:af:8c:48:a4:13:04:1e:d0:78:f1:
                    dc:05:18:12:af:58:b4:ba:4e:48:1e:f1:d8:35:d3:
                    60:66:88:32:38:3a:ab:f7:6f:b2:39:54:ca:ef:38:
                    5f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6A:C1:50:41:86:4D:4C:4E:7E:9D:0B:0C:6F:C0:3D:A0:57:27:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f5f4830d-b46c-357f-8794-790eece8ddba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:bf:5f:7c:07:6e:cd:9e:7d:37:6f:d0:3e:61:f2:b9:a0:bc:
         f0:eb:7d:d1:f6:c6:86:37:3f:ea:e7:1e:77:78:62:94:9f:55:
         c1:e0:d4:59:44:8d:08:5e:aa:c1:46:d7:6c:29:48:8d:20:bb:
         80:79:33:0a:b2:15:1d:e5:2e:3e:7c:e4:5e:e8:85:c9:43:dd:
         ec:1d:0c:ed:0a:7c:d8:ef:f1:30:22:15:fa:02:25:bf:be:d3:
         e5:c9:d8:6c:2b:b5:f7:20:3b:6a:fb:59:18:3d:18:cb:d9:db:
         cf:92:5e:12:d7:85:56:e4:6a:07:93:e6:db:38:9c:75:96:fe:
         3c:7f:ba:96:cb:b1:62:7c:83:0c:53:39:4a:8c:65:66:8f:d1:
         11:d6:25:af:0b:e9:83:fa:e2:d7:b4:14:9e:57:7b:0c:f8:f2:
         b1:cf:7e:c5:3b:19:d6:75:63:e8:b1:71:e7:99:cf:88:e8:43:
         52:97:b8:fd:f6:73:4f:ff:e1:6e:ae:02:6c:1d:43:26:a6:c6:
         ae:fa:b2:a9:0b:78:92:0d:ed:16:db:74:86:91:2f:f0:43:c9:
         6e:32:6a:41:3e:1f:d5:03:f1:47:e3:b3:6e:f7:2e:f0:a8:b2:
         3b:01:fe:d3:97:f3:e3:f6:5f:61:d6:80:7d:50:5d:21:28:c6:
         42:54:ce:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:48:26 2026 by rpki-client