Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/77d290ab-aad0-33db-9cb1-0b081e2c7ebf.roa
File:                     77d290ab-aad0-33db-9cb1-0b081e2c7ebf.roa (raw, json)
Hash identifier:          nsZJfz4YyN3SqcyTOQXAgTXuqjW6grsJkwSHJKDvepw=
Subject key identifier:   81:48:40:41:99:3C:ED:67:09:2A:5B:37:44:E8:CF:60:E5:12:B1:C3
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EC7A1E0679DF44CB2F785E380
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/77d290ab-aad0-33db-9cb1-0b081e2c7ebf.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     396597
IP address blocks:        2620:74:2a::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:e0:67:9d:f4:4c:b2:f7:85:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=34c86404-d28f-4d28-9011-85c3ae2e7ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e5:72:30:e8:21:99:9b:f2:99:c6:64:1b:b8:
                    e2:df:81:87:00:d7:12:fb:37:a5:70:85:b0:cf:ab:
                    43:1b:1d:b8:c8:af:32:7a:a7:16:1e:92:fa:5a:bc:
                    55:39:e7:b7:7f:3f:b0:00:6e:45:c3:94:1d:82:f0:
                    3d:33:b3:bc:d8:d3:bb:29:82:b5:10:07:a8:ab:c8:
                    7e:f0:4d:6c:40:2e:b6:45:d1:d8:f2:5f:e0:3a:5c:
                    8f:81:d5:0c:e1:ca:6c:b8:f1:29:a9:1f:14:04:b0:
                    6f:19:da:1c:66:62:f1:58:cf:ff:45:a9:21:c6:91:
                    17:72:73:6b:89:cd:31:b5:25:14:8f:0d:37:dd:8f:
                    a8:bc:0b:d8:2b:a8:b3:3e:35:0c:37:76:42:62:75:
                    a4:21:b3:f4:fe:7e:d8:3c:5e:5e:6f:dc:34:55:13:
                    26:c0:b1:2e:e0:c3:e3:fd:5a:b9:82:26:21:c0:63:
                    1d:e3:2f:05:a5:32:c1:2c:7c:8c:27:72:b3:df:5a:
                    af:07:e9:1e:d4:e1:43:2b:d7:2a:55:6c:ec:ee:b2:
                    9e:e2:d4:e1:9e:ea:c0:f4:dd:a6:e6:b0:3a:97:48:
                    7b:f6:4b:63:c5:e9:25:5c:b2:18:9f:b1:df:3d:c3:
                    ae:ae:a3:59:e1:4a:67:0c:b2:38:f9:34:a0:1f:8f:
                    a5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:48:40:41:99:3C:ED:67:09:2A:5B:37:44:E8:CF:60:E5:12:B1:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/77d290ab-aad0-33db-9cb1-0b081e2c7ebf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:7f:27:d7:82:a6:b9:2d:f7:e2:8b:be:6f:1c:f0:dd:b5:4e:
         05:0b:2d:25:37:1d:08:e3:77:cb:fb:09:63:05:0f:95:ec:aa:
         84:5b:a3:1f:ec:96:4a:56:d7:80:40:de:be:f1:1f:ea:8e:74:
         16:66:86:a9:89:d3:09:8c:18:82:98:42:ad:77:75:43:d2:4a:
         e3:83:18:52:fd:0d:b8:f3:ee:0e:3b:bb:cf:fc:ed:fa:ac:2f:
         4c:e7:c0:85:8b:4c:ba:00:a4:b3:df:0b:b8:93:d9:ab:da:da:
         db:e9:f3:72:ef:46:ca:f8:e3:41:e7:0b:51:b0:74:94:6d:70:
         0e:2a:d5:a9:31:21:06:88:3b:f1:6c:c1:74:65:2a:2e:6c:86:
         a1:8e:75:27:86:0e:b3:b0:5b:29:8b:6d:c9:f3:d3:9c:68:e6:
         b5:6d:d2:ed:3b:26:b9:bc:3f:4c:c4:44:26:af:4f:cc:63:6a:
         1a:16:85:bf:82:28:ce:39:05:3e:0f:94:9f:2a:1a:64:ca:82:
         21:e5:0e:fb:25:0f:53:12:42:9b:ce:a9:12:f3:81:c3:68:ed:
         33:c3:4f:7c:3b:c6:53:d7:8f:a4:34:02:4b:f4:66:69:86:b4:
         1a:ea:1b:ba:7d:ce:26:45:82:73:e7:4e:da:95:d8:70:3c:f2:
         2a:a5:7e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:53:30 2026 by rpki-client