Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4badc54b-260f-3a2b-98a1-9bf081d5e15d.roa
File:                     4badc54b-260f-3a2b-98a1-9bf081d5e15d.roa (raw, json)
Hash identifier:          2q8tfVJn9rN433YxNJsyGKDehuJE6KD7QTsEjREP3Bk=
Subject key identifier:   D3:3A:39:20:5F:B7:92:51:D7:11:26:B5:D4:DF:B7:2F:86:01:D5:A3
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EB57C5168B6FF08EE65CD4600
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4badc54b-260f-3a2b-98a1-9bf081d5e15d.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     27544
IP address blocks:        2620:74:2a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:51:68:b6:ff:08:ee:65:cd:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=c73620a5-d6fb-434f-9905-ad18f11cf66c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ea:df:92:09:cc:a6:9d:b4:82:f7:10:88:be:
                    08:f8:fa:03:ab:e2:12:a8:2d:40:0c:64:16:5f:24:
                    47:a7:b1:d5:35:e4:a9:ee:83:ba:5a:eb:1a:82:62:
                    79:9b:94:dd:10:52:b5:cf:57:75:f0:bd:de:ae:86:
                    f4:ec:9e:b1:66:49:76:ff:f3:79:a3:92:b2:68:fd:
                    d9:d8:7d:a2:f3:5f:94:0e:f8:42:2e:c2:9e:b2:c5:
                    c9:97:fc:4c:13:46:f1:e0:46:0a:8a:b4:8a:46:b1:
                    b7:d1:c3:c3:f6:1f:9b:f4:7b:48:31:ea:e9:0f:cc:
                    0a:bd:5c:47:c6:ea:e4:5d:a0:7a:cf:2b:1b:4e:dd:
                    1b:1d:4a:b5:b4:6a:93:85:4b:5d:78:a0:43:62:d8:
                    af:a8:59:41:9b:b5:99:4d:61:e4:6c:93:55:54:38:
                    83:5d:16:0d:65:7c:b6:eb:73:25:5f:55:79:4a:b1:
                    b1:46:be:32:14:e8:15:cc:2f:1b:32:e0:41:67:98:
                    80:30:98:da:34:88:3b:91:bd:c7:25:c3:15:2e:89:
                    be:05:50:3a:5a:7d:79:82:d6:d3:3b:2a:bf:1a:5b:
                    6f:d1:5c:d3:be:bd:73:5e:a6:0b:b2:ee:57:62:b1:
                    78:17:66:21:29:5e:ba:1d:30:e0:45:4a:bd:51:78:
                    bc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3A:39:20:5F:B7:92:51:D7:11:26:B5:D4:DF:B7:2F:86:01:D5:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4badc54b-260f-3a2b-98a1-9bf081d5e15d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:25:72:f8:1e:8b:e9:9c:03:ed:44:14:8f:35:7b:95:12:c3:
         72:c0:26:25:5e:3f:18:50:07:38:90:7f:ce:6a:f0:da:b5:ee:
         20:0b:72:01:4d:d5:71:3f:0d:e5:d3:e6:cd:65:e3:8b:35:12:
         7d:aa:b3:48:54:57:ac:06:fc:01:ce:36:10:3d:6c:42:ab:e0:
         ef:f4:c8:37:f6:97:75:62:51:ca:f1:e9:da:8b:d7:3f:07:8c:
         80:5c:f4:cf:df:ac:fa:8e:99:3e:79:4b:17:19:38:c3:c9:4d:
         e7:47:45:ad:02:80:68:74:be:f3:22:17:00:e4:81:18:12:8a:
         cf:e5:60:5f:a3:e7:a8:59:46:5e:fe:20:e4:ae:b0:22:2e:34:
         fd:18:3d:71:6f:2f:1e:d8:2e:4e:06:a4:66:39:47:4d:fc:fd:
         d2:26:3b:a3:42:36:f3:56:0b:67:16:f2:87:b0:e8:5e:4f:4c:
         10:39:ce:9d:74:07:0a:b9:a0:bc:af:d7:e4:cc:86:e1:ab:63:
         14:17:5e:5e:52:bc:89:fd:08:cf:c7:29:55:55:c3:11:93:0d:
         d5:e9:f2:81:1c:f5:ab:32:f1:41:25:7d:48:d1:12:c8:94:98:
         a2:16:84:d4:33:9f:47:4e:01:8b:c2:5a:ca:d9:59:42:77:fa:
         3a:34:0d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:55:18 2026 by rpki-client