Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3efc0e54-d79f-3d11-8871-bc00149b77b4.roa
File:                     3efc0e54-d79f-3d11-8871-bc00149b77b4.roa (raw, json)
Hash identifier:          mPngiuEAXT/cpHJ8dTqqotTvzk8NTB9bQELskegPrXI=
Subject key identifier:   D5:54:83:94:5A:70:FE:B3:48:96:AB:AD:A3:DC:41:0A:45:BC:92:BE
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E2D9F37D921311833913B3F00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3efc0e54-d79f-3d11-8871-bc00149b77b4.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     7342
IP address blocks:        2620:74:a9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:37:d9:21:31:18:33:91:3b:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=04b071d3-003e-4ba2-bd65-d53a1b5d2238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:57:56:3d:bf:0d:e4:ba:8e:e0:d0:62:19:13:
                    a9:da:c5:56:b4:b8:26:89:b9:15:52:7a:b1:e3:3f:
                    fc:59:0c:98:4c:b5:4a:c9:5f:d6:7b:3f:d7:b8:7f:
                    8d:68:f6:b7:da:fb:bb:c6:d1:f3:03:02:ff:dc:bc:
                    a8:e9:39:72:0c:24:e1:25:58:3b:08:52:fc:75:fa:
                    d7:3e:11:ee:fb:c7:27:a7:3a:10:56:d9:db:82:70:
                    7e:ed:83:ab:69:29:fe:87:cb:df:a4:65:29:19:ea:
                    6b:fb:30:29:2c:ab:43:b8:2a:cb:f4:45:68:cd:d1:
                    29:ee:55:28:dd:cc:92:e0:bc:35:9b:19:1a:43:64:
                    38:78:47:e9:d7:54:68:c4:e9:a4:56:92:9c:ea:6a:
                    53:b8:27:23:a8:cb:55:9e:5c:b6:3f:79:10:85:f4:
                    e3:0c:63:fb:c3:2e:41:c0:64:3d:4d:3b:6f:e0:3b:
                    f1:90:55:d9:1c:23:2d:a0:45:82:18:ae:41:71:ad:
                    cc:51:d0:24:a1:cc:4c:76:c0:02:68:32:d5:7e:39:
                    a7:2b:7c:72:77:04:16:1c:16:85:25:37:e9:5c:2c:
                    6a:ed:cd:d9:4c:a2:a4:c8:2c:c2:05:1c:c7:02:a7:
                    3d:67:22:a3:4f:46:9a:48:4b:7c:27:c6:e8:f1:5f:
                    ab:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:54:83:94:5A:70:FE:B3:48:96:AB:AD:A3:DC:41:0A:45:BC:92:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3efc0e54-d79f-3d11-8871-bc00149b77b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:a9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:dd:3f:92:0e:43:d4:6c:fa:29:49:53:bf:7e:ce:44:7c:51:
         6c:79:33:12:6b:62:11:40:78:80:cc:d6:92:1c:27:b0:21:aa:
         29:19:89:ff:a3:d1:09:69:91:0f:d9:c4:e7:2f:68:13:1d:1b:
         40:a0:8d:57:9e:db:07:71:f0:a4:d7:6d:78:fa:bd:4c:02:c1:
         23:6b:07:ef:f4:65:62:e7:bb:3c:8c:4a:fe:90:cb:ee:0a:ca:
         89:f4:85:86:97:19:85:0a:73:4b:71:07:7f:68:bd:1a:42:66:
         b4:3b:6b:82:e1:19:67:35:04:b5:2f:5a:22:d2:7c:7c:ec:0e:
         6d:fc:db:da:44:da:38:a7:e7:5d:32:60:bc:92:5d:35:fd:0d:
         72:88:09:05:c1:54:3a:91:e3:cd:fd:83:f8:d7:e7:2d:30:10:
         4f:54:c5:56:92:c6:92:bf:cc:7b:75:48:de:87:14:44:76:e5:
         95:b5:03:24:6f:b0:25:01:e8:79:11:eb:12:ae:0f:a7:fe:34:
         ef:3b:8b:b9:80:67:94:1b:7e:6b:c7:21:33:84:33:ff:66:02:
         94:09:5a:df:e7:37:b6:d5:3b:52:a9:49:85:59:00:e7:b9:02:
         bc:8a:44:7d:6d:9c:03:03:42:e6:b6:4b:31:97:1b:f8:5d:bd:
         a4:03:a5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 17:18:53 2026 by rpki-client