Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b2013b5-afa7-327a-a1d5-35bad6fdf646.roa
File:                     9b2013b5-afa7-327a-a1d5-35bad6fdf646.roa (raw, json)
Hash identifier:          NOD5ra3YJJxBPaz3guoTkJwcBskcVOqj1cY5mB0EjjQ=
Subject key identifier:   EA:A0:A5:CF:94:62:B9:2E:A7:82:2A:77:9E:88:89:5E:F5:B3:71:E5
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EA78859515AD3B6B1FBFCE980
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b2013b5-afa7-327a-a1d5-35bad6fdf646.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397211
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:59:51:5a:d3:b6:b1:fb:fc:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=da77cec0-05e2-4c3d-b772-a37ddc5c9004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ba:e1:c8:3d:9a:b9:04:63:f0:f4:6e:e1:3c:
                    b1:0b:56:8e:1c:a2:bd:39:f1:a9:f3:71:55:83:d8:
                    99:8d:c5:25:62:2d:07:1e:2f:36:85:90:31:cb:b9:
                    53:92:ec:0d:26:d0:50:5b:aa:46:f0:dc:36:47:3f:
                    4b:85:b4:82:59:45:2d:1d:fa:de:79:51:5b:c6:d2:
                    01:d5:43:78:6c:cb:94:03:f3:c4:48:1d:a0:f8:d1:
                    c3:4c:2e:ca:22:41:8c:89:0f:98:9b:af:7f:24:44:
                    fd:bf:12:3d:2f:1c:53:5f:4b:62:60:c4:8a:2e:ec:
                    d6:b0:45:b6:f5:4d:92:b3:e5:5c:47:3f:19:ca:08:
                    fb:be:14:59:f7:32:67:20:81:a9:2e:4f:33:a7:6e:
                    aa:fc:b1:8b:c7:df:f5:c0:60:d8:c1:66:41:36:f3:
                    26:99:a0:74:fe:55:ee:47:d0:ee:29:98:72:77:d1:
                    31:e7:94:df:16:8b:a6:b4:aa:87:a7:83:23:fa:04:
                    e2:08:09:af:60:b2:cc:b1:04:79:1d:1b:f6:10:d7:
                    bd:2c:ec:a8:f2:05:36:ce:ca:d4:22:17:67:f5:b1:
                    4d:59:52:5c:56:bc:cb:dd:08:5d:d2:eb:22:67:7b:
                    8d:fd:5e:2f:d7:80:8f:9d:81:7a:0a:91:b6:ce:18:
                    33:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A0:A5:CF:94:62:B9:2E:A7:82:2A:77:9E:88:89:5E:F5:B3:71:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b2013b5-afa7-327a-a1d5-35bad6fdf646.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:b7:16:5b:d6:3d:9b:c5:17:6c:7d:6f:f3:d8:2d:4f:c0:07:
         62:e0:bd:44:83:af:4a:0e:4e:25:9f:8d:7f:b9:e4:c5:5c:4d:
         b1:fb:9a:1e:a6:5c:63:3e:59:b7:75:a8:10:a9:b6:c4:0c:ec:
         88:83:a6:90:58:7f:c7:56:32:ec:5c:79:7c:bb:38:f9:ae:b8:
         3b:a5:44:d3:3d:39:9f:7a:55:ec:a8:22:d3:8c:75:27:c9:a5:
         a3:db:de:cc:01:1f:0b:8f:3a:b2:7c:ad:47:b4:10:62:f6:d7:
         a8:6b:a6:c9:dc:fc:d7:84:7a:91:d0:64:26:cf:57:30:81:c6:
         60:11:68:33:a0:29:67:24:49:1d:5c:cb:0f:b9:5c:40:63:ab:
         c6:bb:aa:3f:4d:0b:5d:d1:6e:2e:08:b9:28:e2:67:8c:81:20:
         31:db:b4:ae:4b:36:2f:89:d8:7a:f9:38:c5:ea:15:30:01:03:
         86:8a:60:33:7c:18:63:02:06:87:50:5b:09:87:f1:ac:97:a8:
         50:12:d9:8a:2c:28:a4:57:2c:93:0a:0a:5d:75:e7:a5:5f:68:
         f6:0c:30:a1:da:6a:fd:28:fe:ec:c5:d4:d5:65:f9:45:72:ea:
         a6:f1:46:78:06:79:9f:08:d4:ce:2c:83:0d:65:77:ef:a2:9c:
         04:9d:61:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:55:11 2026 by rpki-client