Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/3b99ee43-f098-35c7-9306-150f345d04e1.roa
File:                     3b99ee43-f098-35c7-9306-150f345d04e1.roa (raw, json)
Hash identifier:          sO2VoyLwUfrsYO+OjHddxi1EeeW9Mkd2GLKRg2IKIUs=
Subject key identifier:   C6:63:F1:35:77:61:38:98:49:CD:B5:0B:3C:7D:CE:1E:AE:EE:67:93
Certificate issuer:       /CN=6a30b207-de04-425f-94e9-ee12d4529f56
Certificate serial:       010D0C9F4328584D3DFFADB183DC881F9791CC00
Authority key identifier: 4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/3b99ee43-f098-35c7-9306-150f345d04e1.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     14618
IP address blocks:        2601:9200:2000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:ad:b1:83:dc:88:1f:97:91:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a30b207-de04-425f-94e9-ee12d4529f56
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=b25aa078-7708-44ec-b704-fb216a72f95e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:64:2b:98:bd:80:47:b6:b1:f2:53:96:84:b5:
                    ed:06:8e:a2:2d:ad:2a:ab:ce:b7:05:a9:c8:9c:d7:
                    da:e8:0d:54:63:27:c9:a2:f8:d1:48:6c:74:be:70:
                    6f:05:db:17:66:1d:44:b0:08:3e:ae:ac:58:6e:fd:
                    62:7e:22:bd:30:7a:8c:f7:d2:c8:a7:dc:1f:90:4a:
                    98:cc:94:cc:3e:40:03:71:80:75:94:bf:f0:3d:7a:
                    e3:9f:1c:8e:6f:e7:c1:5c:63:29:f0:47:c9:ca:87:
                    69:ac:9e:11:16:8a:48:e8:27:6b:6f:5a:df:5a:3f:
                    82:74:3f:52:29:ce:0f:f7:84:39:f8:bb:60:d3:78:
                    ca:c1:90:79:d8:c3:c3:1c:b3:ef:96:59:11:3a:a0:
                    0c:25:dc:90:a2:ff:ab:1e:cd:fa:19:ae:b4:b6:3f:
                    3f:9b:23:16:47:77:4c:66:b3:e9:5d:e7:9c:e8:4b:
                    ee:6d:f5:4f:9f:86:10:82:e6:46:b6:bd:0f:50:70:
                    ca:3d:0b:7c:79:42:47:35:da:4a:ab:52:04:8a:22:
                    18:e3:b7:97:1c:07:6a:31:03:c0:a7:29:52:4e:55:
                    20:a8:d5:9d:39:dd:94:3b:1d:7e:70:81:f8:f9:8d:
                    e2:e7:85:4d:59:cb:11:cf:53:f3:81:14:0d:34:6e:
                    f8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:63:F1:35:77:61:38:98:49:CD:B5:0B:3C:7D:CE:1E:AE:EE:67:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/3b99ee43-f098-35c7-9306-150f345d04e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:9200:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:31:95:38:d9:6a:a7:11:3a:eb:3e:5d:d8:17:dd:ba:16:1e:
         95:f1:42:f1:1d:c2:42:59:f1:85:31:e0:73:ac:b7:51:14:34:
         b3:80:9a:aa:31:b2:b1:b4:fc:20:7d:38:5d:56:ed:e9:0f:2e:
         c9:7e:3b:21:02:39:8f:9d:7d:d4:bf:0e:73:b3:ed:29:61:55:
         b3:77:aa:e1:2c:a9:da:67:5e:55:85:9e:7e:8d:1b:eb:64:a0:
         02:dd:ff:34:cd:05:99:fd:ed:79:77:c4:43:82:c4:3a:6f:f8:
         d4:3b:ad:71:bd:ac:fb:94:2a:86:d1:02:30:0b:3f:e4:52:5b:
         5c:8a:01:01:d0:ab:48:2e:99:c6:03:23:7f:a1:a3:9f:c3:78:
         54:78:82:c9:00:e8:19:4f:1f:ab:d0:f2:eb:2c:aa:91:09:7a:
         2f:70:c9:1a:19:13:d7:7d:68:90:d9:a1:d2:3d:57:e4:b1:53:
         1f:ac:f3:50:2f:36:65:3d:b9:f7:11:7a:6b:5d:6b:e8:57:3a:
         a9:cc:88:79:dc:57:31:01:72:ae:a2:d1:79:cc:7d:fe:20:25:
         08:b1:fc:19:b6:71:d3:91:ca:78:69:97:f3:cb:8f:27:39:06:
         83:d1:18:b0:bf:2d:45:2c:18:12:07:d7:15:ef:e3:d4:67:9d:
         80:df:e7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:51:16 2026 by rpki-client