Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2880ef4e-bed0-319b-a093-9a3cf6cc57d2.roa
File:                     2880ef4e-bed0-319b-a093-9a3cf6cc57d2.roa (raw, json)
Hash identifier:          rX0dUQJTYx/RcA4MWcc9iBjdqKUxLW4P16nu6O6Zavo=
Subject key identifier:   DB:0D:85:23:5C:07:B2:7D:BD:78:33:E7:FF:FF:C8:E7:E8:0A:EF:64
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EC7A1E1B12AE39C3217BA4178
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2880ef4e-bed0-319b-a093-9a3cf6cc57d2.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     396587
IP address blocks:        2620:74:2a::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:e1:b1:2a:e3:9c:32:17:ba:41:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=a3d44326-0a60-4070-a793-0c0d1e76bb1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f6:a5:ac:65:ad:66:06:ca:fb:58:61:93:f0:
                    0a:91:db:3c:29:42:46:bf:ca:20:d6:0c:33:f9:0a:
                    08:04:b3:ef:b4:24:41:e2:77:32:eb:e8:22:a8:30:
                    34:c8:d2:54:8f:90:f6:a1:1b:fc:41:a6:78:af:a2:
                    d2:76:ea:5e:6a:11:db:20:eb:df:86:a1:d9:12:15:
                    ad:c3:63:ac:c8:94:9f:88:0b:d0:52:a9:13:7b:83:
                    41:0e:9e:1d:2f:51:33:d0:8f:89:cc:22:5f:70:51:
                    02:30:11:27:23:63:b3:50:cc:6c:a5:c2:42:8f:01:
                    73:80:13:50:89:29:68:c7:dc:52:53:48:c4:4f:56:
                    9c:13:7f:95:0c:c3:bc:49:d1:8e:f4:0a:40:76:1a:
                    f6:ae:21:4a:71:a1:ac:a2:15:e4:22:f8:eb:1b:7f:
                    7b:91:51:e4:4a:bd:62:4c:54:37:21:c5:ca:91:d7:
                    47:95:1b:4f:5f:8d:5e:e9:f8:dc:fa:23:1c:47:76:
                    cd:7f:02:25:64:ce:7f:3f:83:99:f7:f1:06:27:94:
                    d1:df:9d:27:84:49:19:08:c1:66:98:67:ba:74:86:
                    fb:7c:e9:98:49:78:0f:e7:e3:ee:ea:83:50:26:6d:
                    af:49:6c:bb:23:a8:14:a7:26:2a:79:a4:77:2d:33:
                    81:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0D:85:23:5C:07:B2:7D:BD:78:33:E7:FF:FF:C8:E7:E8:0A:EF:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2880ef4e-bed0-319b-a093-9a3cf6cc57d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:2e:0b:91:a2:64:6a:cd:c7:78:58:90:a9:10:65:51:61:40:
         2c:75:69:9c:60:71:4e:70:c2:ae:15:e9:12:94:44:72:34:98:
         af:f3:7d:49:57:a4:0f:3a:17:a8:03:89:98:62:c5:57:05:53:
         5d:7e:4f:ce:c3:06:11:78:de:e9:4a:b2:ad:c3:ea:91:28:1d:
         de:22:f9:8c:ef:3a:a1:b1:e1:5d:49:aa:a3:20:98:77:5e:ea:
         9a:2a:fd:1d:02:61:c7:03:cb:39:90:d2:96:42:40:a2:e2:04:
         ca:6d:b2:a1:27:60:82:5f:25:70:49:ab:52:d7:f3:0d:29:76:
         b2:2f:b7:81:e5:d8:9b:43:e6:df:9a:89:6b:ba:68:0c:64:6f:
         56:10:3b:16:49:8b:20:f5:2e:da:1d:6a:82:36:8d:68:77:ca:
         ee:c5:12:42:e5:8b:c4:2f:45:3e:61:42:5c:0d:4b:65:97:11:
         88:ca:ee:ed:7f:de:d2:57:e0:a6:ae:ac:5b:9e:56:1b:a5:89:
         24:89:84:cb:08:45:3d:2a:38:b1:7f:e0:3b:2e:ab:99:82:7b:
         9c:b8:34:66:5e:fc:00:3b:be:fb:79:c2:0d:25:c5:16:60:8d:
         4e:aa:07:17:0c:08:60:07:61:54:ce:30:3f:aa:41:b4:19:fa:
         b8:86:7c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:53:17 2026 by rpki-client