Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fe205ace-6126-3452-8b1b-18737ec00307.roa
File:                     fe205ace-6126-3452-8b1b-18737ec00307.roa (raw, json)
Hash identifier:          zRyj6ndxJLlvTF5eIygnYtcbQS2NoUWGWSeCI+9iV60=
Subject key identifier:   15:1F:D2:F9:56:AE:B7:AE:00:9C:10:FF:AE:35:11:51:CF:82:C3:8A
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584DC29AF684729C6BF0BA1D7E00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fe205ace-6126-3452-8b1b-18737ec00307.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     396826
IP address blocks:        2620:74:2c::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:f6:84:72:9c:6b:f0:ba:1d:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=1a97edee-17a7-4d87-8c1d-4158c7936846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:34:e9:66:bf:26:f2:02:bf:45:59:e0:23:04:
                    01:f4:17:5f:40:3a:6e:a3:c0:33:cf:1e:8e:97:f2:
                    5d:d7:68:8a:6d:ef:d7:be:0e:ee:97:e4:ba:01:2d:
                    b0:e0:6d:ff:b8:b1:08:af:f0:ae:45:e0:52:86:ca:
                    9f:57:fd:23:b2:95:20:22:7a:16:8a:f5:b7:a4:5e:
                    23:74:04:e2:bf:96:22:cc:7c:33:6f:1d:06:4e:a9:
                    33:97:14:33:5a:84:1a:42:cd:e0:11:48:95:c3:af:
                    ba:bb:e1:2a:b4:e0:5c:5a:10:57:33:f5:79:f6:bf:
                    ff:23:b2:a0:f1:a0:0f:0b:b9:f6:84:64:fe:2e:b7:
                    49:ce:cd:e9:de:1e:25:b3:fb:d8:a3:c2:65:0e:9d:
                    c2:b4:d6:1e:75:00:70:95:83:bd:e2:9a:65:68:de:
                    00:83:23:38:35:f0:72:f6:fe:4d:e8:dd:35:7c:55:
                    2e:be:c1:41:3e:88:16:ee:03:b4:70:05:40:74:c6:
                    84:09:b2:5d:8d:3e:b2:83:62:3e:0c:e2:4e:b1:b3:
                    43:21:8c:d7:d7:4b:2c:65:53:b0:74:ae:0e:ff:dc:
                    dd:e6:e3:69:25:e3:d9:68:10:07:da:91:91:e6:77:
                    23:95:05:0e:3d:03:94:2b:0d:ce:de:bb:81:51:9a:
                    58:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1F:D2:F9:56:AE:B7:AE:00:9C:10:FF:AE:35:11:51:CF:82:C3:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fe205ace-6126-3452-8b1b-18737ec00307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:5a:3c:30:1e:dd:78:3c:cb:54:cf:ea:31:34:15:81:71:06:
         aa:34:9b:0d:e4:c9:fb:4c:4a:59:54:e4:b7:bf:1e:e3:fe:de:
         85:de:66:56:06:00:6e:ad:c0:91:02:f3:0a:00:ac:44:e5:74:
         d5:be:dc:a0:a2:31:00:ab:13:9a:25:66:e8:3f:69:e9:f3:ce:
         54:0e:77:0a:6f:04:de:88:2b:0c:1d:b6:4f:62:c3:67:e7:b6:
         45:4f:ea:1f:86:c3:d9:20:ff:38:4b:6d:a0:02:24:2d:13:0f:
         b3:b3:96:1a:60:ff:e8:f5:41:ff:fc:0f:b0:87:0b:b4:53:a0:
         7f:4e:21:19:a3:b3:ba:42:53:b5:94:0c:1e:77:3c:8e:97:8a:
         d7:0e:dd:08:d0:90:af:d2:1c:21:7a:16:a6:64:93:bc:d2:a0:
         7a:3d:fd:87:6c:f1:26:48:9f:d7:ff:f4:03:3e:e6:d9:bd:df:
         7c:df:80:7b:d0:1a:1e:1f:12:a8:0f:e2:a1:9a:90:fa:74:48:
         25:3a:92:51:de:a6:b4:45:32:d8:84:1e:23:50:d1:cc:9c:33:
         a8:82:80:69:f0:52:68:8d:8b:53:cd:96:73:dd:ef:a1:a9:7f:
         68:09:d7:27:d2:24:b9:bf:33:d6:97:cd:83:8f:16:18:6d:05:
         38:0f:d3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:14:49 2026 by rpki-client