Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b70ff48e-885a-3b2c-b27b-6d9217437ab6.roa
File:                     b70ff48e-885a-3b2c-b27b-6d9217437ab6.roa (raw, json)
Hash identifier:          MU68vT1eP34yHWMsVzV1jYgXqeCTTV8Xh+BdFohklUY=
Subject key identifier:   E5:F1:86:32:C1:5E:8E:13:54:70:66:9F:2D:76:3F:78:05:34:B9:4F
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F698D928A496D5DB2E9D61440
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b70ff48e-885a-3b2c-b27b-6d9217437ab6.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     36630
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:92:8a:49:6d:5d:b2:e9:d6:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=799968cd-adef-4073-9e8f-7060d36a3d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fd:88:df:d0:bf:9f:2f:1a:8a:0a:9a:30:4d:
                    a0:a3:33:d8:df:a9:e7:ef:21:f5:e4:97:9c:19:3d:
                    83:c3:ae:d5:b7:31:80:ed:c9:12:79:1f:82:c1:a4:
                    8f:8b:95:6e:b1:a3:06:ea:cd:c6:7e:a1:92:8a:83:
                    e0:29:6b:53:bb:d4:bf:df:f0:6f:55:7a:10:0c:db:
                    fd:6d:68:5c:ab:ae:0c:10:55:4b:49:42:df:63:9d:
                    52:29:cc:7c:c9:67:97:4f:a2:d7:c2:87:d5:c2:ec:
                    e9:84:99:90:a1:7f:a3:ac:99:e3:2a:60:ad:3c:f8:
                    3b:4d:aa:dd:50:3b:fa:88:b2:10:68:27:4d:c2:2f:
                    76:2c:2c:00:77:1b:56:7f:58:8a:4a:bb:66:d4:a5:
                    ed:31:4b:96:b7:c9:62:d6:99:b2:17:30:b8:4a:ed:
                    f2:27:71:7a:1a:3c:3f:e4:b1:20:65:5c:80:ba:82:
                    06:2d:69:eb:5c:a3:1a:62:d0:27:0b:c9:c7:4e:41:
                    86:67:68:40:12:48:cc:d3:84:7c:7d:49:1f:af:9e:
                    eb:b2:7c:39:6d:cb:c4:4e:84:b4:97:b9:d0:cb:e9:
                    ed:16:95:5f:df:9c:ec:14:ae:90:79:cf:b4:b8:47:
                    fc:e7:d3:a8:c6:5d:11:a1:5c:9f:ad:cd:06:8d:a8:
                    ed:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F1:86:32:C1:5E:8E:13:54:70:66:9F:2D:76:3F:78:05:34:B9:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b70ff48e-885a-3b2c-b27b-6d9217437ab6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:be:fc:ea:f5:6f:49:a2:d3:62:1c:3b:b9:58:b8:49:40:89:
         ac:3d:be:09:30:36:b6:bb:e9:d1:82:fe:aa:0f:05:09:95:ea:
         79:88:30:90:e2:07:62:02:41:18:d8:d9:c5:20:92:81:40:14:
         62:91:48:a2:63:84:f8:05:91:fb:7c:79:e1:36:cf:1c:5f:c9:
         35:dd:22:b3:c7:cb:23:78:f1:35:08:b7:e6:01:2d:cd:8f:94:
         5b:f6:a8:50:70:2e:a1:05:c7:40:94:c4:58:12:dd:ff:41:b5:
         e4:f3:1f:77:86:69:1c:54:6f:6f:2b:a7:e8:ca:c3:ea:5d:c2:
         fa:37:02:0d:d3:3b:4d:8d:01:eb:97:08:d0:dc:55:8f:84:a6:
         95:cb:97:1d:92:de:6f:d2:61:25:01:4e:33:d8:f5:da:dc:97:
         4a:0a:b2:c8:e0:69:30:f9:48:7e:e9:b8:45:38:2a:16:9a:8e:
         f5:36:58:06:ad:d7:e8:cc:6a:e4:79:7c:de:40:dd:23:67:67:
         dc:9d:89:70:d8:c4:1b:39:85:86:bd:5c:64:8d:12:97:9e:c1:
         11:b9:58:de:63:a8:52:63:c1:02:c2:f5:ee:84:30:85:2b:ac:
         6f:24:12:24:dc:35:06:68:0d:3b:b7:95:b9:8e:5d:e2:2f:da:
         24:31:4c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:10:10 2026 by rpki-client