Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/48450ea8-f8bb-3085-8d03-b9e04bd5b762.roa
File:                     48450ea8-f8bb-3085-8d03-b9e04bd5b762.roa (raw, json)
Hash identifier:          IH5x3szV7ZrOQZCQ8Ex7+CGwSIHa2unxKVE+PRij2a0=
Subject key identifier:   B0:18:EA:05:E3:96:81:09:6D:73:31:DF:28:80:24:44:F3:22:CF:64
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F549D89E5131CCDEA0B1EA380
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/48450ea8-f8bb-3085-8d03-b9e04bd5b762.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     36631
IP address blocks:        2620:74:2b::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:89:e5:13:1c:cd:ea:0b:1e:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=75beac4e-45bb-4d5a-9d0b-b90b28fdddc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:59:2f:30:90:0f:a0:0d:97:79:5a:7b:60:44:
                    50:52:86:72:87:e4:60:60:aa:54:d6:74:05:3a:28:
                    00:20:85:c7:2a:44:a8:89:6f:68:4c:e9:05:0e:cf:
                    50:d9:83:f0:e9:15:d0:5b:7e:b1:35:34:2a:8b:2f:
                    0e:42:39:a6:6a:7d:83:21:30:0d:ef:e2:99:a2:a4:
                    b6:cf:99:cd:88:cc:e5:1a:46:26:4a:28:f2:e4:fc:
                    6a:90:a1:0f:85:09:76:45:d0:cd:c9:ff:ac:ba:3b:
                    43:d0:63:52:a4:58:ce:8c:9d:19:8a:4d:04:d4:b8:
                    63:0e:e7:a5:1d:eb:b8:73:fc:d5:08:6c:03:e3:78:
                    06:5a:f7:6a:18:fe:b3:f1:ba:ca:bd:20:37:15:83:
                    18:a5:fe:07:a5:77:2d:d9:33:69:e2:55:cd:ea:66:
                    93:22:6c:6d:1e:46:33:65:a0:06:02:f4:91:e5:df:
                    48:ee:1a:35:d8:4a:52:ae:e1:5b:02:56:f8:47:d3:
                    ed:80:4b:0b:a1:1f:52:7f:ca:06:26:63:29:fb:8a:
                    6f:b8:b0:ba:b1:a3:1c:3c:80:b0:2c:23:c9:11:34:
                    4d:d7:0e:70:60:dd:1f:5d:29:97:c9:85:65:59:16:
                    1c:74:39:81:2f:44:d4:d1:ad:9f:68:25:a7:b0:af:
                    a3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:18:EA:05:E3:96:81:09:6D:73:31:DF:28:80:24:44:F3:22:CF:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/48450ea8-f8bb-3085-8d03-b9e04bd5b762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:c3:9b:20:4e:33:c1:c6:58:3d:dc:76:7a:89:62:b1:f2:1f:
         25:dc:c3:d7:9c:22:ca:e7:53:da:c6:0e:f2:c9:2e:0c:0f:25:
         01:c7:40:b1:ce:ed:d7:3f:11:94:f7:de:f7:84:b6:07:ab:ab:
         53:ec:72:da:bd:a6:eb:d9:ff:06:b5:15:aa:5a:32:3d:c4:d2:
         ec:8b:92:28:d2:62:7b:b6:83:a5:1d:a4:60:3d:83:aa:ed:82:
         05:be:1e:3e:75:c7:1d:f3:0e:31:39:3f:2e:53:32:f6:35:7d:
         d4:07:3e:90:1b:6d:35:11:64:5e:cf:5e:d0:a4:59:2f:be:40:
         47:a4:81:19:57:17:63:7f:86:f6:36:70:1b:57:5e:5e:90:df:
         8a:bf:6a:dc:9c:12:3b:b2:09:cd:0c:80:a0:06:4a:01:ce:c2:
         df:e7:10:50:28:64:9c:20:bb:82:b2:14:bc:d6:b2:7e:64:83:
         05:85:f4:8a:cf:15:dd:fe:2e:f9:41:7d:ce:a7:54:b2:8c:fd:
         75:6e:46:0c:4b:85:ba:8f:16:50:67:a1:00:75:97:e6:ff:86:
         85:75:08:18:28:f7:b3:cd:e4:b2:35:a6:31:9c:27:2c:3a:3c:
         a8:45:22:64:9f:68:e0:5c:c3:b9:22:f8:e3:05:60:c1:94:a5:
         9a:96:59:6b
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9UnYnlExzN6gseo4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
NzViZWFjNGUtNDViYi00ZDVhLTlkMGItYjkwYjI4ZmRkZGM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1kvMJAPoA2XeVp7YERQUoZyh+RgYKpU1nQF
OigAIIXHKkSoiW9oTOkFDs9Q2YPw6RXQW36xNTQqiy8OQjmman2DITAN7+KZoqS2
z5nNiMzlGkYmSijy5PxqkKEPhQl2RdDNyf+sujtD0GNSpFjOjJ0Zik0E1LhjDuel
Heu4c/zVCGwD43gGWvdqGP6z8brKvSA3FYMYpf4HpXct2TNp4lXN6maTImxtHkYz
ZaAGAvSR5d9I7ho12EpSruFbAlb4R9PtgEsLoR9Sf8oGJmMp+4pvuLC6saMcPICw
LCPJETRN1w5wYN0fXSmXyYVlWRYcdDmBL0TU0a2faCWnsK+jVwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFLAY6gXjloEJbXMx3yiAJETzIs9kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDg0NTBlYTgtZjhiYi0z
MDg1LThkMDMtYjllMDRiZDViNzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr
AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBIw5sgTjPBxlg93HZ6iWKx8h8l3MPXnCLK51Pa
xg7yyS4MDyUBx0Cxzu3XPxGU9973hLYHq6tT7HLavabr2f8GtRWqWjI9xNLsi5Io
0mJ7toOlHaRgPYOq7YIFvh4+dccd8w4xOT8uUzL2NX3UBz6QG201EWRez17QpFkv
vkBHpIEZVxdjf4b2NnAbV15ekN+Kv2rcnBI7sgnNDICgBkoBzsLf5xBQKGScILuC
shS81rJ+ZIMFhfSKzxXd/i75QX3Op1SyjP11bkYMS4W6jxZQZ6EAdZfm/4aFdQgY
KPezzeSyNaYxnCcsOjyoRSJkn2jgXMO5IvjjBWDBlKWalllr
-----END CERTIFICATE-----
Generated at Tue Oct 6 14:59:59 2026 by rpki-client