Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cbf177a7-912c-38c6-9f18-dba4109318b2.roa
File:                     cbf177a7-912c-38c6-9f18-dba4109318b2.roa (raw, json)
Hash identifier:          lk9HsjrjFpEGklVEGIuUGUA/AK0nMe/yoWVJmG/FGoE=
Subject key identifier:   43:94:05:84:4D:AE:D9:1D:5A:55:94:FF:E3:BA:30:19:BA:D5:FD:83
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EB57C5EEE0A9A50F8317F5600
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cbf177a7-912c-38c6-9f18-dba4109318b2.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     396589
IP address blocks:        2620:74:2a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:5e:ee:0a:9a:50:f8:31:7f:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=51ef15d8-341e-4f6f-8de6-1e3fde2ed329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7e:26:f7:c9:3a:d8:6a:a7:ef:be:12:69:26:
                    ec:19:96:7c:52:56:fe:e4:b9:46:4f:bc:01:58:fa:
                    24:df:5f:c9:69:68:92:58:47:c0:dd:36:45:6e:c7:
                    5f:57:29:59:91:19:92:64:6f:b2:4d:13:7c:88:db:
                    1a:41:0d:0f:ee:23:ec:39:f0:08:65:eb:81:c2:f7:
                    7f:12:7c:c4:3a:1d:17:42:91:5d:b9:b3:09:b1:29:
                    01:34:7b:94:b8:c7:bc:1e:47:d5:95:72:a1:8d:b0:
                    34:32:25:52:9e:3a:c4:59:19:68:8e:c2:03:a1:16:
                    10:35:23:65:e4:fa:b6:39:fb:ca:d1:06:2b:1c:35:
                    89:dd:ad:44:67:30:66:72:28:ce:b0:f7:a2:0e:93:
                    5c:5d:80:74:26:38:03:45:26:e8:7a:fc:ba:a4:21:
                    f5:52:a3:cc:89:31:c8:9a:e8:16:66:9c:c3:d5:27:
                    a2:83:81:36:3d:a0:cb:a4:1c:65:1d:86:1f:85:cf:
                    ec:6b:84:7a:07:57:81:76:cd:2b:99:d1:b1:a4:77:
                    8d:aa:74:13:a3:95:70:64:b2:cb:c0:27:20:da:19:
                    6e:c4:ac:1f:cb:1c:22:52:e8:7f:a4:d7:cd:40:6d:
                    e1:b1:16:45:72:81:2a:5f:6b:0e:cf:d5:0c:e3:96:
                    7a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:94:05:84:4D:AE:D9:1D:5A:55:94:FF:E3:BA:30:19:BA:D5:FD:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cbf177a7-912c-38c6-9f18-dba4109318b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:fc:14:bd:e0:18:1f:28:f4:86:83:91:0a:93:34:09:27:1b:
         f2:23:b4:74:ce:d8:5c:45:9f:2d:79:a3:ac:b1:1c:3b:17:65:
         83:80:59:b4:39:7e:82:38:a8:0e:98:e5:70:c4:51:12:0a:3f:
         48:7b:ca:f4:ec:7f:f8:8f:5b:08:eb:b8:5d:66:c1:4c:b1:9d:
         89:90:d2:78:18:78:0f:a9:91:0d:41:60:37:32:64:8a:7b:e9:
         f1:b6:6f:79:a3:dc:4e:35:cf:0c:0d:de:15:34:45:1c:5c:e8:
         0f:dd:f4:25:bc:c4:f2:44:4f:0c:57:f3:4f:96:ff:6a:25:ee:
         96:c4:83:9f:3b:3c:a8:96:04:b7:47:2d:41:f5:5b:9c:40:2a:
         2c:7e:1e:aa:71:e4:db:a1:84:76:8c:fb:f3:de:89:28:b9:fd:
         e7:1d:e5:40:84:63:6f:2a:7e:e8:ef:10:0f:be:26:e5:cd:3f:
         38:13:1c:cb:57:60:1f:64:d7:ad:ff:57:47:e0:00:0b:4a:cd:
         57:b2:dc:46:22:5c:4f:b5:5f:22:a1:95:cd:c0:58:a7:69:a8:
         a1:80:10:ce:4f:fe:21:7d:f7:c3:a7:f3:f2:56:20:36:61:21:
         c7:a6:b5:0c:2b:a8:d1:1f:ba:05:39:9e:a9:a9:05:60:1f:b5:
         93:d4:63:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:56:01 2026 by rpki-client