Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5b3f3b74-52cc-388e-985b-78ed55f76062.roa
File:                     5b3f3b74-52cc-388e-985b-78ed55f76062.roa (raw, json)
Hash identifier:          2ZLvy+Y2eeAGD96ViPv+xyLz9Jbr0MQeE25CaaD99ik=
Subject key identifier:   2D:32:B5:B4:88:14:9A:76:6F:61:1F:40:62:88:74:25:BB:F6:2B:A4
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584EB14C3E8746F66D8CB13E6E00
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5b3f3b74-52cc-388e-985b-78ed55f76062.roa
Signing time:             Sat 01 Aug 2026 13:00:12 +0000
ROA not before:           Sat 01 Aug 2026 13:00:12 +0000
ROA not after:            Fri 30 Oct 2026 13:00:12 +0000
asID:                     1288
IP address blocks:        2620:171:bf::/48 maxlen: 48
                          2620:171:1fe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b1:4c:3e:87:46:f6:6d:8c:b1:3e:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Aug  1 13:00:12 2026 GMT
            Not After : Oct 30 13:00:12 2026 GMT
        Subject: CN=b396953b-1934-4012-95b4-e5bb0abb9c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0e:5a:24:69:34:6d:fb:5b:a4:e5:1a:31:36:
                    6d:12:ca:22:c4:0c:0d:a9:bd:73:06:50:65:b5:f8:
                    57:48:99:51:6e:8c:85:d7:03:16:b7:12:69:58:7e:
                    85:b5:50:15:e0:65:55:6c:95:42:ec:23:69:b0:fd:
                    fc:42:da:a2:2a:24:be:f6:88:af:2d:a8:8c:e0:8f:
                    aa:9e:d6:af:ba:25:a1:af:b7:51:4d:66:91:0c:e1:
                    c8:78:fa:52:b5:f4:af:3f:bf:b4:05:f2:99:32:fe:
                    48:64:30:ef:aa:1e:fe:af:d3:5c:ec:10:90:be:00:
                    8c:8b:7e:bc:af:e9:a3:48:9d:ba:c7:9c:df:bc:78:
                    46:fc:0d:c7:52:7f:ec:ac:d0:a9:4c:7f:fe:41:f4:
                    a2:15:65:77:11:4c:6e:25:c3:17:35:b7:a0:20:dc:
                    07:0f:21:e4:c5:65:14:7d:90:85:68:00:fb:13:14:
                    e0:43:4f:99:58:57:85:c1:52:f4:1f:8e:2c:bd:8a:
                    b0:4e:90:b5:ed:7f:74:59:bb:c9:cb:bd:fd:83:e0:
                    46:0a:50:ad:f6:8f:06:8c:95:21:5e:fa:8c:fc:8d:
                    3e:ab:73:ad:69:17:32:c9:aa:c8:c3:9a:89:a4:77:
                    a5:37:74:56:8a:c3:f9:43:38:7a:b3:2c:f0:9f:52:
                    f6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:32:B5:B4:88:14:9A:76:6F:61:1F:40:62:88:74:25:BB:F6:2B:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5b3f3b74-52cc-388e-985b-78ed55f76062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:171:bf::/48
                  2620:171:1fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:7c:08:1f:fc:8f:3d:4c:70:f7:6a:e2:0e:9b:d7:5c:2d:48:
         af:c4:56:56:c2:42:bb:0a:03:10:28:41:e9:46:ea:a4:c0:12:
         c5:f4:37:da:01:15:c5:a0:d7:06:d2:f6:aa:35:a8:08:2e:9c:
         2f:1a:b7:a1:49:f0:bd:89:30:e3:a4:6a:f9:e8:79:63:46:24:
         7c:4d:e4:a3:cb:8f:0f:6c:41:6f:fb:e7:82:e1:93:07:16:27:
         24:27:39:86:d2:9c:69:f1:2b:d6:cb:eb:b8:37:aa:f8:8c:8f:
         2f:14:1a:53:45:11:93:36:64:92:25:cf:a7:95:24:3f:d6:3f:
         aa:db:8f:5d:2b:a1:f5:60:0a:c1:6a:82:23:3a:a4:5e:a9:31:
         d1:30:ab:24:57:c3:b7:8f:ac:59:2d:00:25:52:66:d6:4c:f0:
         b3:24:8c:ac:3a:16:e1:9d:19:98:87:6a:8b:04:2c:2b:24:9c:
         89:b3:b1:58:ed:47:08:13:ea:fe:cf:07:5d:8d:f0:d7:79:e5:
         33:b9:5e:43:bf:fa:79:f2:70:14:ee:76:be:cf:2e:49:6c:13:
         ef:73:7d:8a:f6:ce:5c:eb:21:14:5c:5c:98:57:e1:b3:8b:0f:
         c1:17:0c:22:65:c8:61:65:d0:d6:e0:d7:52:24:ef:1b:f0:31:
         20:f6:85:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 11:27:49 2026 by rpki-client