Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/374f4f62-4a83-3f53-9021-7cbf0de83fe9.roa
File:                     374f4f62-4a83-3f53-9021-7cbf0de83fe9.roa (raw, json)
Hash identifier:          mtObbnYTOULQsT2kjG3ASEwsxf+8Q4/PMLYCjCbCtjk=
Subject key identifier:   85:63:1E:5F:E9:4E:DD:62:14:D8:B7:C1:19:59:96:EC:8C:23:80:31
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584DB4A5947C120E894F58845080
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/374f4f62-4a83-3f53-9021-7cbf0de83fe9.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     54113
IP address blocks:        2620:11a:c020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:94:7c:12:0e:89:4f:58:84:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=75811c65-127b-4a36-8b23-b0dffbc30cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bc:e2:21:cc:aa:f8:5e:7d:b3:79:51:9f:6e:
                    1b:64:c7:e3:3f:34:9b:dc:45:12:6e:d8:a8:6f:34:
                    a1:65:29:12:38:ed:6c:5d:d1:60:79:a5:1c:eb:25:
                    8e:4e:e5:01:8f:fd:45:65:aa:99:99:6d:44:ed:f1:
                    b1:47:f6:5e:bc:05:29:14:7d:dd:2d:0b:d5:80:e2:
                    fb:a7:a8:d3:94:72:c9:74:a6:d7:e5:86:be:82:52:
                    78:16:00:5e:d9:e2:f8:99:62:c0:fe:ae:d5:1e:c7:
                    e8:be:a0:38:99:df:24:94:d9:bc:82:85:4e:db:05:
                    ea:f1:4f:5a:b1:f5:87:00:0d:bd:8f:64:65:82:7c:
                    c6:23:32:18:2c:a5:be:7e:8a:78:e7:c5:2e:53:ce:
                    30:21:a3:2a:b9:c6:4f:26:08:ad:56:b4:6c:ae:08:
                    68:1a:99:a8:37:7e:a9:d6:23:01:1f:3d:9b:53:21:
                    03:35:26:12:b0:9d:e2:3a:b7:09:5d:f5:01:b9:df:
                    b0:d9:4c:a2:04:c2:ca:09:68:7a:28:2b:e3:d5:e7:
                    83:21:16:5b:53:3c:49:4f:f7:37:4a:f7:87:32:c2:
                    43:bc:75:f8:93:8c:ae:fd:04:8e:e2:d1:93:af:5b:
                    d8:01:94:25:fa:19:4e:58:08:ac:9f:79:9b:c5:44:
                    a8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:63:1E:5F:E9:4E:DD:62:14:D8:B7:C1:19:59:96:EC:8C:23:80:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/374f4f62-4a83-3f53-9021-7cbf0de83fe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:c020::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:a8:03:5b:73:3b:66:a5:82:4e:2c:57:7e:1d:dd:91:02:99:
         c6:fa:f0:a2:1f:e0:33:da:8e:09:11:f1:c1:1d:8a:a0:fc:33:
         e1:81:73:16:4b:06:57:2d:10:d6:2c:87:23:a3:0e:21:fb:d0:
         f0:ef:b2:bf:84:f5:bd:9b:49:63:97:f1:27:4c:e4:a6:ff:da:
         66:e9:54:b2:97:df:a9:bc:72:c1:97:bf:34:0c:39:14:62:9c:
         80:19:70:38:33:ae:bc:01:26:6a:e2:41:43:b8:18:e3:21:44:
         e8:24:f3:b5:20:ee:ea:89:56:a5:d7:7f:8e:85:50:50:f6:85:
         24:b7:6d:79:82:cb:b6:d1:47:ed:d4:07:16:e2:3e:44:35:54:
         61:2c:29:89:d2:d9:7a:40:ed:3b:4b:0e:73:9a:d1:87:1b:f4:
         39:a4:2c:0f:ad:92:25:93:1d:f7:bf:be:af:cd:49:fb:28:06:
         21:19:34:cc:01:c7:84:f8:0c:7e:55:df:01:64:38:ea:2b:d8:
         58:1e:05:11:73:03:f5:2e:07:5e:61:a0:d9:ec:9d:e5:68:17:
         d1:6f:be:63:af:b7:6d:3d:b9:e8:0e:6c:88:c5:66:f2:bf:73:
         f3:04:39:26:82:2c:90:43:74:a9:e8:a2:0b:b1:5f:a8:3c:73:
         91:07:42:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:55:38 2026 by rpki-client