Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/002ab075-89b5-3972-9a0c-7bf53d237fc2.roa
File:                     002ab075-89b5-3972-9a0c-7bf53d237fc2.roa (raw, json)
Hash identifier:          ynWWWhkvkcwf2rOjELLjJrKrVcPj+sYiB1RvtT78W9s=
Subject key identifier:   F8:65:78:BF:D5:76:8C:63:87:7B:68:20:60:3C:05:A8:93:67:9C:69
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EC7A1DAA2E496C9163D6211C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/002ab075-89b5-3972-9a0c-7bf53d237fc2.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     396542
IP address blocks:        2620:74:2a::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:da:a2:e4:96:c9:16:3d:62:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=4f379ef8-138f-45f8-bef3-5e00ad4e45be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:89:ed:f0:66:00:53:32:ad:8c:ea:5d:33:0f:
                    1f:b4:69:c4:38:09:d9:c6:7e:63:58:c9:68:03:08:
                    46:62:d7:95:b2:ac:b0:97:3c:06:dd:25:1a:40:b0:
                    64:42:cf:66:e3:52:9e:d5:44:56:2c:39:ef:3c:73:
                    3f:50:14:3d:36:5c:c2:df:e8:92:f5:5d:a8:48:c4:
                    aa:c4:b5:ab:8f:8e:92:fc:6c:d0:d6:5f:44:b3:ae:
                    a7:c7:c5:5a:6b:44:bb:ea:5c:21:6c:36:14:7a:77:
                    eb:c7:db:a3:8f:f3:e7:f7:ca:9e:ba:14:5f:0c:81:
                    d9:21:fb:be:f6:dc:9b:b2:aa:07:39:e6:ab:57:09:
                    06:16:b4:d1:9a:32:a9:20:35:c5:62:8b:35:a7:90:
                    f2:fb:14:e3:81:7c:d8:34:cf:ea:45:d8:a5:3e:da:
                    1c:3b:a9:a2:32:b7:bf:dc:9d:cf:de:52:86:8e:dc:
                    e3:7a:3b:a3:59:f8:69:90:0c:5e:b8:81:b1:cc:23:
                    e4:b3:5b:86:b6:e5:67:b6:d2:ab:6f:7b:0f:20:70:
                    6d:1a:92:56:21:8b:63:96:f0:2c:39:41:4b:93:cb:
                    da:97:5d:98:5a:56:31:da:f4:26:e6:49:92:3a:c6:
                    73:97:55:a1:d7:10:b6:c0:7c:0b:a0:50:a0:dc:95:
                    32:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:65:78:BF:D5:76:8C:63:87:7B:68:20:60:3C:05:A8:93:67:9C:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/002ab075-89b5-3972-9a0c-7bf53d237fc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:df:f8:54:50:06:d1:9c:d7:4a:f6:0d:0b:2f:e5:51:f9:ea:
         99:c9:cc:9a:b7:1f:a2:04:76:99:f4:37:b6:3b:18:7a:b6:2f:
         f1:60:ee:d8:1b:3d:7a:67:8e:c6:06:8b:f1:f5:fa:a1:68:df:
         59:40:0e:5b:c5:11:9c:60:48:85:32:fe:eb:10:6c:c0:9b:28:
         db:2f:fc:b7:03:44:01:32:1c:bd:92:01:92:e3:b8:7f:1f:85:
         19:f5:42:95:7f:8a:7b:00:03:dc:f1:28:1e:6f:7e:07:42:c3:
         77:d5:e8:a8:c6:c2:2f:4a:18:0e:ab:16:25:3d:17:a0:26:cc:
         d6:62:e5:57:0b:21:e3:74:d6:6c:13:ad:f7:42:06:ea:44:67:
         af:40:52:ac:b4:37:68:af:60:ec:ee:86:30:44:5d:9e:17:1b:
         06:e3:f8:4b:ad:89:ad:a6:a0:a0:73:9d:b5:90:4f:b5:be:d1:
         0d:29:64:0e:7e:71:89:60:52:f8:8c:7c:54:3b:2d:00:c6:f7:
         1f:12:2c:70:2b:98:2e:4e:72:15:7a:73:cc:f8:7f:54:f8:43:
         d2:ec:be:08:66:50:3c:d7:42:42:ba:75:85:ea:dd:cc:fa:46:
         8b:8f:0c:62:c3:c4:50:cb:51:0b:e4:be:4f:af:de:9d:eb:fe:
         a3:fb:44:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:55:49 2026 by rpki-client