Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/e75537cb-8282-3417-9c8e-d117bed01f75.roa
File:                     e75537cb-8282-3417-9c8e-d117bed01f75.roa (raw, json)
Hash identifier:          8oqOLGOUdZE5CHTWk3AvvVHcDu5z40aGgnQ5ggk6uOE=
Subject key identifier:   BF:C3:7C:37:F8:5B:31:E5:9C:01:CB:A5:1E:22:88:FC:F0:5A:06:AC
Certificate issuer:       /CN=d00749ed-70ef-447c-b17c-da6be8d7f312
Certificate serial:       010D0C9F4328584D91C003E0591DE71C46840080
Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/e75537cb-8282-3417-9c8e-d117bed01f75.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     36236
IP address blocks:        2620:49:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:03:e0:59:1d:e7:1c:46:84:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=54ca5739-41bb-4ff6-aa99-bdc596029230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:98:3e:ae:8d:ca:db:82:5f:63:54:86:5f:2e:
                    48:59:38:de:41:1d:32:0a:88:b3:b5:b4:56:76:d1:
                    45:c5:ee:e4:c8:82:dc:11:9b:a4:aa:6e:38:c7:72:
                    f5:e4:19:5c:3f:bb:d1:20:37:93:14:a5:3a:df:82:
                    0b:e3:f9:46:1c:a6:e2:5c:9d:4f:5d:cc:8c:51:d0:
                    49:80:eb:64:c8:cc:4b:7f:b5:74:b6:73:00:27:bd:
                    08:6d:45:2e:a3:5f:e2:3b:77:20:ad:1f:bf:88:f3:
                    c7:72:6e:a3:42:b7:45:9d:5d:d7:16:55:80:d5:f3:
                    c6:07:0d:10:64:9a:65:9e:4d:d8:d8:65:38:2e:b4:
                    5e:ae:dd:83:4e:ca:a1:94:76:29:65:01:1d:fc:3d:
                    2a:97:9c:da:8a:98:06:78:c1:2b:3b:e9:d2:b2:db:
                    79:3f:bc:f1:81:d2:cb:cb:d5:a1:45:3d:bb:fb:88:
                    45:b0:64:11:86:83:fa:97:e0:53:f1:fe:d4:d5:77:
                    e3:ab:72:a0:a8:a8:26:bc:36:d5:2e:f8:b2:8d:3d:
                    2b:45:81:5c:b3:0e:c4:5a:f0:71:07:b2:1c:44:01:
                    70:80:3a:c6:bd:86:76:59:3a:a5:d3:60:0e:0c:a9:
                    4e:1f:4c:a8:7f:57:3c:55:54:18:87:a7:49:5e:c7:
                    14:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C3:7C:37:F8:5B:31:E5:9C:01:CB:A5:1E:22:88:FC:F0:5A:06:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/e75537cb-8282-3417-9c8e-d117bed01f75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl

            X509v3 Authority Key Identifier:
                keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:49:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:ea:91:de:19:e7:be:13:12:9e:1c:7b:e3:28:fb:15:d0:2d:
         f9:8d:a3:fa:6a:0a:fd:93:02:b1:83:6d:b6:5c:f8:70:cd:9f:
         76:e7:90:e3:56:0d:50:74:bc:03:10:1c:40:8a:4a:a5:c3:dd:
         53:f3:ca:f4:45:dd:42:c0:68:86:4e:fb:99:9d:96:af:f2:6f:
         ee:e3:1c:2b:40:8e:84:cf:98:3f:c9:38:e7:ff:14:8a:8c:ba:
         d8:37:ab:66:07:e9:3b:85:f4:d7:e0:d5:cd:2a:1b:e8:f2:c8:
         0c:5f:85:24:9a:e4:04:4b:a3:7f:47:2e:f3:17:75:ea:7e:7e:
         60:58:74:10:cd:58:64:6b:98:42:a1:05:44:df:91:25:3f:fb:
         53:8d:5c:8f:9d:30:e3:73:fa:d4:20:b2:24:14:22:86:3f:80:
         e6:a8:cc:f1:f1:bb:ce:61:49:62:c3:cc:92:7d:84:76:36:ee:
         f7:99:dd:1c:b3:c4:82:8b:15:83:4e:e8:3a:6d:c6:6d:73:e6:
         48:e6:d9:24:2f:b5:53:ac:88:85:27:b4:87:b9:e2:da:1c:25:
         be:53:68:fb:a8:b4:29:c6:07:17:ae:3e:1c:14:bb:70:2a:6c:
         ec:63:b6:50:71:2d:42:05:8a:10:c2:bd:b6:e4:c9:9d:ab:82:
         df:df:50:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:40:38 2026 by rpki-client