Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/384920e2-45b6-3a50-85d7-5525abb96d6f.roa
File:                     384920e2-45b6-3a50-85d7-5525abb96d6f.roa (raw, json)
Hash identifier:          MT4kC+aXh8RKDxtqc/8JDxZ0c65Z1AM7PGBPI2HfLRc=
Subject key identifier:   31:8E:8C:E9:71:DB:D9:AD:C1:0F:F6:8D:6A:43:91:64:0F:0A:05:8C
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584DAC4591C68DA69CD1691B5900
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/384920e2-45b6-3a50-85d7-5525abb96d6f.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     11232
IP address blocks:        2604:7a00:e800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:91:c6:8d:a6:9c:d1:69:1b:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=ee09f844-37d2-4c7b-8648-df58a040727c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:90:c1:e4:7e:9e:04:12:25:74:f6:d9:a2:69:
                    53:43:5e:88:7e:28:14:ea:3e:d2:5c:56:4e:cf:d6:
                    8e:1d:af:22:50:65:c1:ed:85:a9:c9:1a:44:1f:f5:
                    c6:fc:69:dc:74:c5:70:3f:a1:20:e6:85:24:90:98:
                    f5:0f:95:6d:ee:46:cf:36:9e:13:e8:03:bd:9b:fa:
                    c9:18:4c:47:17:19:94:9e:c8:39:22:2e:1f:c2:f0:
                    34:13:00:24:ff:2c:75:92:41:9c:1c:c6:27:3c:87:
                    87:51:31:d4:b7:44:9a:ba:75:13:7f:0f:fa:40:23:
                    cf:0e:53:6d:80:3b:a3:ff:d4:f9:bc:92:08:9b:c2:
                    93:1b:d4:a7:34:0a:5d:56:ec:bd:04:6b:80:7e:e5:
                    93:28:28:00:d0:15:ee:7e:c1:4a:8f:70:84:97:3d:
                    79:80:2e:b2:f2:66:75:a2:dd:86:f5:4d:e3:cc:30:
                    6b:88:ff:28:26:e2:13:d3:68:ec:e7:9b:73:b2:d1:
                    b3:87:d8:cd:13:82:37:8d:ca:72:16:5d:d3:c1:6e:
                    f9:b5:d6:68:bf:fa:88:ea:1d:84:14:17:22:07:5a:
                    ef:62:dc:c0:04:fc:87:74:77:b2:3f:c1:22:b0:35:
                    4e:e1:7c:da:5d:88:f4:31:41:2d:dd:ca:99:13:aa:
                    31:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8E:8C:E9:71:DB:D9:AD:C1:0F:F6:8D:6A:43:91:64:0F:0A:05:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/384920e2-45b6-3a50-85d7-5525abb96d6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7a00:e800::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:b3:d7:f8:79:27:12:e8:b6:7e:0d:a1:ac:f9:fd:ff:50:a6:
         9b:22:33:42:9e:8f:98:91:86:af:44:fa:a3:0d:36:32:51:7e:
         17:fb:8f:fc:cd:18:4c:e2:52:2c:2a:31:fe:95:a5:6f:be:ec:
         6e:a0:e4:6f:db:15:34:18:25:19:8b:be:d2:e5:a8:30:a2:a9:
         e5:b7:3e:4c:88:17:e2:79:ab:c1:df:69:fd:f5:16:03:d7:03:
         4d:19:88:df:97:da:9f:ec:56:36:49:6b:1c:fd:05:82:a6:0e:
         8d:71:6b:53:ad:cd:e9:95:04:a5:f7:a8:f5:c2:01:13:b7:89:
         05:bc:e4:a9:e4:8d:51:18:8e:5d:e0:8d:2b:f4:b2:79:4a:06:
         48:09:10:82:2a:86:e0:2d:23:c3:7c:10:03:ef:87:c9:4c:16:
         fb:c9:c0:46:1f:85:19:07:04:95:b3:63:26:97:21:c3:aa:7e:
         38:13:7b:37:34:f5:6a:a2:fc:64:f0:f6:59:e8:46:fd:9a:7b:
         84:6c:f9:b5:9e:c1:4e:55:5e:f5:0e:10:df:4d:72:e3:74:4b:
         60:23:85:47:2a:cd:d9:dd:ae:c7:37:82:51:4f:4e:c9:5f:97:
         e0:50:3e:d2:7b:db:9b:2e:cc:7c:09:db:0c:15:bf:6f:9e:72:
         47:30:d7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:34:33 2026 by rpki-client