Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/77a0e0c5-f8f2-3639-b146-2095fe80a3c1.roa
File:                     77a0e0c5-f8f2-3639-b146-2095fe80a3c1.roa (raw, json)
Hash identifier:          usghFarQ6IyPM7y2AjoaiLY52jfm2RILw4v3oQ+2khE=
Subject key identifier:   DC:38:47:84:BF:E1:F8:DB:45:D9:05:91:8D:71:33:64:9D:3E:7D:75
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EB2B1DAB01BD2213ED5C8DA80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/77a0e0c5-f8f2-3639-b146-2095fe80a3c1.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     396602
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:da:b0:1b:d2:21:3e:d5:c8:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=d8d9183c-6558-4a0c-8189-2ffbfb4d2521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:80:a1:fe:60:e2:1b:00:45:fd:85:e9:fd:c2:
                    3f:72:2c:c7:55:9e:cb:89:26:43:12:08:91:d7:6f:
                    dd:98:31:87:09:52:10:1c:c3:a8:74:f0:e7:27:ef:
                    05:29:3b:45:3d:ff:d9:ad:5e:60:07:a4:67:5d:e1:
                    61:2e:a0:fc:2c:9a:ba:19:d0:a2:42:d6:a1:6e:90:
                    76:7a:aa:a6:6b:f9:d0:98:3d:54:c9:08:1f:a5:5c:
                    24:01:cd:da:54:ae:b2:93:94:dc:f6:4f:a9:33:50:
                    94:a1:22:a4:73:f1:76:74:51:0a:fb:5a:6e:3f:d8:
                    7c:30:d0:e6:0c:5e:6c:fe:f0:13:dc:3e:d5:ad:5c:
                    a2:3d:2b:2a:54:a1:85:68:b6:fb:22:b8:c1:9e:c3:
                    74:90:5d:d2:af:ea:63:aa:31:32:26:34:02:6f:21:
                    bb:56:3f:ec:2a:0e:f9:a3:44:e7:e2:2b:61:59:e4:
                    02:0c:d3:bd:a9:68:db:21:0b:f7:d6:b2:bf:31:de:
                    b9:a7:c8:51:e8:d2:9b:38:0b:90:7f:90:80:27:11:
                    4b:f9:2e:2e:ae:46:7b:bc:bb:74:b9:bd:ec:b6:c2:
                    9e:88:25:b5:05:2c:32:50:f9:e5:70:13:fe:aa:f3:
                    05:4f:68:0e:18:8f:29:2a:30:2a:2d:c5:c2:bd:21:
                    91:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:38:47:84:BF:E1:F8:DB:45:D9:05:91:8D:71:33:64:9D:3E:7D:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/77a0e0c5-f8f2-3639-b146-2095fe80a3c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:78:b6:c3:89:29:08:ef:c9:bb:c7:17:cb:10:34:6d:39:df:
         42:bd:9e:da:c2:6a:4f:17:ea:28:d3:e3:a7:68:0e:54:5e:f1:
         8f:13:b5:8b:ed:e3:21:8f:ff:42:6b:30:34:18:7d:db:15:cf:
         f0:4d:0e:91:61:1d:14:97:f9:8a:b3:19:f6:f6:b4:e0:93:b3:
         04:17:64:d7:26:e2:45:ed:62:42:7f:71:80:60:35:eb:b5:fc:
         a7:c8:2a:c8:78:07:4d:cf:5a:cc:ca:4f:87:e3:f0:ca:e4:32:
         ac:16:59:c8:1f:37:30:02:64:43:55:e6:24:98:e1:52:07:29:
         00:ce:d1:1b:6e:0f:54:19:06:92:aa:6e:0f:b4:3d:e3:f9:44:
         e2:09:8c:06:27:14:22:f9:6b:09:cb:39:1e:8a:25:90:3f:81:
         64:46:7f:6f:e8:de:df:3d:5e:6c:b3:d9:19:7d:85:77:5c:71:
         db:c6:33:f9:5d:14:b0:fc:14:23:43:1d:73:d4:e4:71:20:8a:
         d5:ed:ef:1b:0d:b9:1a:a2:6a:54:4f:e8:9f:cb:2f:f1:cd:91:
         e8:58:bf:3b:91:69:6a:db:f7:87:a7:11:9e:fa:de:d5:b7:00:
         e7:64:7a:40:5e:aa:91:13:6f:27:db:2b:8a:e3:92:d5:4f:93:
         2d:ec:ca:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:57:27 2026 by rpki-client