Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/13efd986-5647-3d48-abdd-29fe104d2b8f.roa
File:                     13efd986-5647-3d48-abdd-29fe104d2b8f.roa (raw, json)
Hash identifier:          9PvG5Y+6q18l9NzP6qRqAI+Z0ysmGV5TkbYSP1oufUM=
Subject key identifier:   3D:53:58:77:66:BC:09:30:C7:E2:11:8D:24:1F:7F:DA:70:13:F7:0E
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F698D915BCA540FC0C4F6E480
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/13efd986-5647-3d48-abdd-29fe104d2b8f.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     396582
IP address blocks:        2620:74:2a::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:91:5b:ca:54:0f:c0:c4:f6:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=88c0c1c3-74e9-4db3-8811-5bfb00a82a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:37:5b:e6:5f:64:a7:79:ba:f7:a5:2e:42:ce:
                    7d:3d:b2:51:d3:4a:2e:42:59:8c:b8:23:a8:c7:6e:
                    d0:f6:38:78:9d:dd:19:84:81:8a:cb:f8:7b:cd:d9:
                    ce:5e:be:d7:64:7f:20:7f:49:12:5b:13:78:ab:02:
                    86:fa:56:57:55:ff:11:a1:6e:18:bb:0d:bd:aa:09:
                    0b:bb:cc:d6:6b:dc:35:97:ee:22:db:cb:92:5a:5e:
                    3c:a8:6d:8e:d5:a0:75:4d:b9:a9:3d:f4:bd:60:2d:
                    3f:75:1c:b6:aa:f1:30:af:3e:c2:69:78:3f:2e:73:
                    1b:d2:21:2d:94:a6:e2:44:04:50:f5:4c:ce:9c:36:
                    a1:46:9b:58:18:15:bd:66:d1:76:19:da:59:0c:4d:
                    01:79:c9:8e:92:a6:18:0d:44:54:48:b3:38:e8:a0:
                    c0:a0:99:b2:0a:f0:ab:93:91:41:e6:b7:c7:6d:ae:
                    8f:a4:43:fd:cf:67:3b:fe:9c:a8:7e:84:5e:05:4c:
                    e8:4c:ef:f9:26:e3:11:b2:8c:4d:6d:eb:06:5e:ba:
                    69:52:78:d7:ea:e5:f3:40:bd:ec:63:72:09:a1:bc:
                    dc:ef:00:b8:52:97:81:5c:5b:d8:ca:b8:64:56:84:
                    2b:a6:3a:a8:93:ef:2c:91:17:c1:77:3b:58:f6:90:
                    6e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:53:58:77:66:BC:09:30:C7:E2:11:8D:24:1F:7F:DA:70:13:F7:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/13efd986-5647-3d48-abdd-29fe104d2b8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:79:5a:3f:7c:76:79:1e:07:33:cc:5e:18:73:66:ec:f0:81:
         99:91:52:39:25:e8:64:f0:3d:2a:fe:4f:4e:1d:8a:df:be:da:
         ff:11:13:84:84:20:a2:76:6d:ba:c5:ab:77:1d:f2:ce:33:39:
         70:4c:2b:4a:2c:a8:5f:0c:85:37:60:17:39:6f:86:69:22:2b:
         89:2b:19:30:7a:67:30:fc:9e:12:79:ee:df:3d:ba:fd:4d:51:
         a8:53:db:82:a7:c2:d4:37:13:7e:55:be:c9:8e:2e:c4:d2:ea:
         23:aa:14:c8:f8:0b:54:4b:f1:a4:00:73:ab:e2:c9:8d:16:c3:
         3b:40:b1:29:96:d0:f8:fd:ae:9c:ce:7f:10:04:ec:b2:83:ce:
         f0:37:e0:b9:56:7e:fb:ab:d8:63:43:3b:1a:49:a8:49:b1:42:
         b8:6f:97:7d:83:8a:16:59:4a:24:93:a5:5b:f1:74:47:6d:23:
         3f:e4:60:24:42:e5:be:ed:09:26:ba:43:a7:e1:c9:ab:b9:6d:
         58:1f:36:75:23:11:f2:f3:7e:53:f8:fb:09:d6:74:2a:b0:f8:
         05:3c:a0:9d:77:8b:89:da:90:f8:94:6a:22:0a:5f:77:7d:29:
         bb:9c:dc:ac:81:7f:4e:5a:f7:ab:57:6c:65:0b:fb:b6:2a:3c:
         20:86:60:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:56:07 2026 by rpki-client