Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/35e61007-fc7e-3733-a105-5e5e8c2cb239.roa
File:                     35e61007-fc7e-3733-a105-5e5e8c2cb239.roa (raw, json)
Hash identifier:          ynkXYnSYPwL3jiEugqCW0tdIh0TiBRHRyrN7AN/5CR8=
Subject key identifier:   AA:A1:98:AC:A2:49:37:DF:4C:F1:D3:94:F4:29:51:07:EA:3C:29:6B
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584DA6B0320F6995791B8000B380
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/35e61007-fc7e-3733-a105-5e5e8c2cb239.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     13778
IP address blocks:        2620:147::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:32:0f:69:95:79:1b:80:00:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=b1cd2ba8-3869-4158-bc11-9976e235d638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9c:13:fb:a9:d9:e1:3d:9a:fe:27:a5:47:74:
                    98:7d:7c:0b:2d:44:6b:25:5c:48:5f:a1:cd:ed:e2:
                    b8:1b:e8:1f:6f:ab:e8:fc:24:79:b0:8a:d4:1f:86:
                    03:25:00:f0:51:ff:5c:8f:b1:cd:1f:bb:2e:a0:09:
                    78:8a:e1:97:f5:6a:72:2e:dc:40:3d:4c:7d:14:99:
                    a2:f6:07:66:3c:c8:80:ac:89:2e:e2:47:84:83:03:
                    6f:ae:89:c2:6f:21:f1:ae:30:3e:e3:16:c1:24:1c:
                    7d:0f:fb:bd:fc:c2:8d:48:8b:bf:d2:62:63:62:94:
                    5b:81:f1:3c:1e:ee:4e:35:7b:87:67:1a:27:9f:1b:
                    60:af:c5:5c:a8:cb:d8:eb:c9:f7:31:bc:cb:5f:be:
                    cd:f7:fc:b4:52:0c:a3:f9:0d:e1:1c:cd:9a:63:0c:
                    5e:d4:0e:f2:7a:df:bb:20:22:68:7e:3b:42:3a:1c:
                    4a:3b:97:10:c0:e1:d7:2c:7a:86:11:71:67:a1:78:
                    fa:e3:8c:2d:f2:21:89:75:5e:49:d2:01:c3:fa:90:
                    44:d0:d0:7d:2b:6b:99:51:30:70:b9:18:19:8d:0f:
                    ce:e0:53:40:83:30:2c:cc:e3:b8:b0:b1:62:fe:da:
                    51:2d:0d:1a:8a:07:c4:c5:84:a0:75:77:2b:34:1e:
                    77:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A1:98:AC:A2:49:37:DF:4C:F1:D3:94:F4:29:51:07:EA:3C:29:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/35e61007-fc7e-3733-a105-5e5e8c2cb239.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:9a:da:bc:b2:07:28:68:62:d8:d8:76:69:46:df:07:d1:43:
         6c:cb:0e:06:5b:f0:d3:1a:36:ea:7b:e8:a7:96:04:17:18:65:
         70:6a:a6:e7:a2:c5:44:d0:ad:27:ad:48:13:19:90:aa:83:87:
         48:e3:0d:75:04:4a:98:da:3c:78:8a:bf:b8:dc:bd:33:1c:af:
         80:46:de:e8:57:6d:b8:e7:84:90:8c:53:f4:5a:08:0d:f5:01:
         18:a5:4c:e3:4f:fc:73:91:fa:77:e1:2f:65:52:7d:4b:1d:f9:
         6f:80:51:e4:18:29:43:84:8c:4f:c7:5e:3e:89:8f:9f:09:c5:
         ce:fa:8a:90:de:e1:d3:0d:85:1d:6a:39:6b:24:a6:f7:34:5c:
         c6:94:50:76:d4:ba:d4:f5:27:f9:81:b7:05:b3:ee:5b:b4:dc:
         c1:10:99:99:3d:63:a3:06:88:6c:b1:40:23:b6:48:35:bb:e0:
         68:ff:a4:ce:bd:ae:89:ea:46:a4:d6:ee:05:cf:d2:1f:f3:df:
         6b:f8:46:2e:3f:d2:0f:ed:99:ec:10:04:08:82:5c:10:b0:e2:
         29:8d:c6:2b:b2:2d:01:58:4e:f2:b4:05:d6:4e:ce:e7:af:4f:
         e6:12:99:ee:eb:20:66:09:09:cb:66:96:78:b5:c7:b0:d8:55:
         09:52:47:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:13:12 2026 by rpki-client