Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/005da65d-6cff-3e56-8b54-a46847b3c730.roa
File:                     005da65d-6cff-3e56-8b54-a46847b3c730.roa (raw, json)
Hash identifier:          4QI3ZBK2Eb8lWBqgY6jf+cDKCEE4IBxMuSHJq2Wxhcw=
Subject key identifier:   48:33:EA:EF:5D:AA:E0:50:10:8D:F8:84:3B:62:AE:F0:79:2B:DC:75
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F549D84C38C9835CE038E2340
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/005da65d-6cff-3e56-8b54-a46847b3c730.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     397194
IP address blocks:        2620:74:2b::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:84:c3:8c:98:35:ce:03:8e:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=b2eaaa17-8654-4df2-b8f0-a9d75ef465d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4e:00:3e:3d:a9:ab:36:ad:aa:a3:04:07:36:
                    9e:44:82:ad:5d:3e:54:fa:cf:f1:65:c6:51:39:fe:
                    a0:8a:18:a7:66:ca:0b:c6:58:a9:7a:16:b6:d5:9a:
                    ee:8d:7d:b7:c2:aa:49:ea:aa:d0:ba:3b:96:2e:82:
                    5a:21:69:4d:b9:4d:8e:e4:ff:a4:5d:61:4b:83:6a:
                    be:a1:24:6d:34:29:68:93:ff:0a:df:fe:63:c6:3f:
                    84:c3:5a:07:f1:ce:78:d0:26:3a:9b:bb:db:d3:4c:
                    f7:12:65:b8:91:33:49:38:28:43:85:fa:6f:85:0b:
                    89:20:a0:05:24:a4:69:e4:14:1b:3e:5a:be:44:1e:
                    83:55:f6:43:6a:34:35:62:b3:2f:27:00:b5:b4:19:
                    83:12:2b:10:c8:84:f9:91:e7:f9:24:33:57:f4:93:
                    0a:f2:91:a5:11:f5:31:e0:e2:dd:8d:12:69:5c:07:
                    00:d7:05:9c:90:7a:d1:e5:50:df:83:a1:d5:f5:65:
                    60:0f:8a:fa:39:28:c2:93:10:fb:14:86:de:eb:72:
                    a0:3c:a8:fc:be:f6:93:1d:a1:7f:ea:23:3a:b4:8a:
                    c2:75:08:4a:d1:2d:ee:9e:7f:10:55:89:50:b3:91:
                    24:20:aa:5d:70:2a:1c:0d:98:6e:1c:0b:bf:4c:c1:
                    ee:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:33:EA:EF:5D:AA:E0:50:10:8D:F8:84:3B:62:AE:F0:79:2B:DC:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/005da65d-6cff-3e56-8b54-a46847b3c730.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:31:10:19:02:07:6e:cd:97:36:5a:f0:47:d5:9b:9c:95:19:
         3b:d1:7e:d6:b0:f0:5d:9d:6f:fc:4b:27:a4:2b:75:af:e2:f8:
         04:81:e8:d8:0a:8f:79:e5:b8:3f:85:64:ef:24:ec:fc:ba:21:
         c8:f7:14:9d:6b:b6:16:c9:ce:c3:41:99:7a:3b:ba:7c:14:02:
         52:00:c9:fb:a9:87:9a:44:0e:8e:f2:23:c7:10:5f:e2:67:57:
         ea:1e:db:40:ce:b6:c6:13:af:b9:ec:d6:bb:69:88:4e:d0:a1:
         30:be:be:cc:0c:71:40:e7:eb:f0:e9:de:2a:9d:b3:e2:d3:88:
         66:5a:f3:7e:24:a6:4a:57:5a:c6:1c:3a:ab:b1:83:c9:59:78:
         c9:55:bf:73:32:18:96:8a:bf:83:6d:1c:75:b8:a9:90:68:6b:
         ef:e8:44:4b:08:6b:5c:d8:60:ab:75:85:02:cb:7c:73:ca:97:
         98:12:ee:8c:f5:1b:ca:c0:bf:50:cd:fb:f7:56:78:d3:89:a9:
         ac:40:62:16:89:c3:61:d8:ed:40:8a:c2:49:67:5b:36:cd:6a:
         22:d5:85:7d:5c:cd:4f:06:0d:3a:f1:9e:74:d1:38:b7:cf:86:
         fd:0e:6c:01:00:52:14:3b:16:86:b5:b5:84:f4:0c:71:de:fe:
         59:6c:70:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:54:55 2026 by rpki-client