Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec3058cb-cd81-3eba-9345-015fcf8034d8.roa
File:                     ec3058cb-cd81-3eba-9345-015fcf8034d8.roa (raw, json)
Hash identifier:          tYSvh71LzeIZQ/LBE1yjxEHOlhCGU6IHT64OdIxK/Lc=
Subject key identifier:   40:5C:CD:61:A6:00:7F:0E:EB:75:9E:EB:22:91:AB:8C:29:B8:D2:46
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EC7A1E11A7863B110E7FFBCE0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec3058cb-cd81-3eba-9345-015fcf8034d8.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     396594
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:e1:1a:78:63:b1:10:e7:ff:bc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=508f7807-bbc2-4876-95f6-2fcb615caaff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3d:38:31:b3:93:84:aa:95:ef:4e:aa:ed:75:
                    1a:f9:cc:6c:96:ff:4d:e0:86:5a:db:ec:57:4a:00:
                    e0:a5:95:d1:9d:e4:24:ca:66:8a:7b:ed:5c:b0:5a:
                    12:61:5c:a3:f5:f9:fa:85:8d:01:39:a2:6d:1e:b7:
                    2d:be:2a:9d:2f:38:46:0c:b1:ba:6b:22:d2:9e:53:
                    3a:09:95:18:02:36:cd:d5:c8:b2:0a:39:85:c8:1c:
                    a0:cb:b6:a4:c4:3e:c2:f7:a0:e1:0e:3a:eb:0c:bf:
                    2b:74:3b:fe:26:ae:e9:07:eb:12:ac:a4:2f:f0:6b:
                    19:a4:f9:8b:57:28:44:95:8c:73:9f:4f:c7:63:d2:
                    46:ec:65:47:a7:85:86:dc:62:59:7b:1f:bf:3b:de:
                    f9:97:c0:f3:fd:02:14:39:c7:e0:ff:18:b7:08:08:
                    6c:72:82:68:e8:a0:5a:e6:8f:96:ad:e8:18:3d:28:
                    ab:45:6a:00:4f:74:c0:c8:a9:b5:8a:f3:b9:86:ad:
                    84:85:85:75:2f:0c:8d:d1:15:ea:0d:7e:30:32:51:
                    d0:e2:5f:0b:12:48:2f:e1:69:59:29:ee:29:b6:db:
                    11:d8:b2:6e:bf:1e:61:82:bc:0c:01:1f:ba:65:70:
                    b7:32:49:4b:a8:f2:bd:ce:d6:9a:f6:44:23:19:b1:
                    b1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5C:CD:61:A6:00:7F:0E:EB:75:9E:EB:22:91:AB:8C:29:B8:D2:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec3058cb-cd81-3eba-9345-015fcf8034d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:85:4c:f5:8d:86:be:33:1e:10:e4:c3:97:03:1d:42:81:90:
         68:7d:16:0d:ed:dc:ca:36:b6:e6:ae:4a:5d:f1:79:de:c9:be:
         52:90:b4:30:3c:4e:9f:be:d1:6e:79:c5:b5:75:1c:da:3d:bf:
         89:f9:7c:34:d5:0b:eb:c9:f4:69:19:41:e0:21:56:07:a5:b0:
         e4:c9:7b:8c:c5:2c:36:55:ac:2c:83:2a:35:a8:7f:b6:f5:51:
         ae:ca:19:13:8d:f3:b7:4e:fd:92:2f:ed:02:42:c9:4e:b3:9b:
         33:53:25:42:40:ee:fd:e0:35:b9:55:11:f2:d0:71:bf:52:be:
         4e:1d:bb:2c:c7:7e:63:da:67:08:f3:60:9a:b9:bf:9e:0e:cf:
         33:48:82:4b:f5:ba:e3:cb:c3:a4:ce:16:62:a8:a4:d5:dc:9c:
         c6:d8:94:77:ca:f5:d8:53:59:cc:8d:8a:d9:e8:2c:e4:40:c5:
         b8:44:16:c7:cf:65:ec:16:e4:8f:14:31:da:9c:a4:cc:c0:ce:
         4b:37:b9:a7:a5:8f:29:8c:5d:20:8f:4c:da:e7:fa:0e:aa:16:
         63:54:85:bc:2a:b8:4f:a3:cc:30:a7:58:5d:1c:05:a9:68:f7:
         c3:c9:72:90:cf:89:75:e8:83:de:90:79:0e:48:f7:cc:0e:ee:
         4f:cb:dd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:54:58 2026 by rpki-client