Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c185af99-3f85-496d-a078-52eadb18008c/24f3e911-5943-3ec7-805e-10634a3ecb15.roa
File:                     24f3e911-5943-3ec7-805e-10634a3ecb15.roa (raw, json)
Hash identifier:          YiWFnGTY8n81PnQnvyxyXblrzCzvgmcktZAjjJVbdK0=
Subject key identifier:   37:2F:B9:78:00:E5:3D:76:5F:C3:B0:9B:DE:5A:7B:A9:CD:7E:0F:D5
Certificate issuer:       /CN=c185af99-3f85-496d-a078-52eadb18008c
Certificate serial:       010D0C9F4328584F4974163A39CCC5A46C711380
Authority key identifier: BE:13:36:0E:05:45:FC:AD:F8:F8:95:DB:9A:2C:A4:50:5A:C0:09:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c185af99-3f85-496d-a078-52eadb18008c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c185af99-3f85-496d-a078-52eadb18008c/24f3e911-5943-3ec7-805e-10634a3ecb15.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     402428
IP address blocks:        2602:f3eb:100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c185af99-3f85-496d-a078-52eadb18008c/c185af99-3f85-496d-a078-52eadb18008c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c185af99-3f85-496d-a078-52eadb18008c/c185af99-3f85-496d-a078-52eadb18008c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c185af99-3f85-496d-a078-52eadb18008c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:16:3a:39:cc:c5:a4:6c:71:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c185af99-3f85-496d-a078-52eadb18008c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=98f1d4a3-c4d9-44ee-891b-a22d52a542ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:85:b8:bb:c4:58:2d:00:94:21:2a:b6:7f:7a:
                    78:f3:a8:ca:fb:cd:87:b8:de:82:a2:c1:52:05:fa:
                    19:bf:60:73:79:ae:91:b7:da:ea:5e:f5:ed:7d:e7:
                    06:8a:0a:1e:b4:4c:eb:40:fe:92:22:90:b7:fe:ee:
                    ba:a5:22:f8:d9:f3:ea:20:20:5b:ed:e7:84:56:8b:
                    87:dd:4f:57:93:f3:6f:58:f7:8b:ff:db:ea:a8:e8:
                    8c:c6:17:bf:88:83:21:db:c1:c6:37:8f:69:c7:50:
                    02:b0:b2:9e:aa:2f:3a:5f:9e:f8:1c:0a:a2:6a:bb:
                    a7:53:2e:f9:83:6d:b5:8e:14:82:d9:78:b4:fe:8e:
                    e3:46:6d:c2:89:05:e9:ef:53:3f:cb:4f:a9:6d:3c:
                    bc:37:c5:79:4d:58:c8:81:e5:37:aa:87:b1:86:1b:
                    f1:db:2d:01:23:ca:d1:a4:9d:b3:11:94:56:5a:b5:
                    10:9d:d7:f9:02:a4:bf:98:9d:da:93:ce:56:da:c0:
                    81:9d:d7:f7:bf:99:bd:38:e5:d6:3e:a9:b9:0d:58:
                    5f:81:ed:d2:32:ac:b1:bd:e5:98:60:64:43:a7:37:
                    a1:47:cd:3b:1d:bd:c4:1e:5f:df:f8:3e:b5:5e:c8:
                    40:f0:9b:1b:ed:01:7e:19:91:08:c7:60:0c:fa:3e:
                    02:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2F:B9:78:00:E5:3D:76:5F:C3:B0:9B:DE:5A:7B:A9:CD:7E:0F:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c185af99-3f85-496d-a078-52eadb18008c/24f3e911-5943-3ec7-805e-10634a3ecb15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c185af99-3f85-496d-a078-52eadb18008c/c185af99-3f85-496d-a078-52eadb18008c.crl

            X509v3 Authority Key Identifier:
                keyid:BE:13:36:0E:05:45:FC:AD:F8:F8:95:DB:9A:2C:A4:50:5A:C0:09:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c185af99-3f85-496d-a078-52eadb18008c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f3eb:100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:9a:92:c2:96:2a:4a:ef:51:05:c1:89:f9:ce:ae:d9:a8:09:
         24:d8:34:72:59:b1:54:21:06:1a:15:41:25:0d:0a:8c:7e:6d:
         72:b4:f4:e0:d2:70:b7:9b:e3:c0:10:fe:3f:3e:4b:a1:c1:a3:
         aa:05:ab:ba:0b:8d:64:18:d5:2d:cf:6e:f9:0b:f9:7d:dd:55:
         f7:c1:1e:b4:ee:ce:09:16:84:c2:67:2d:15:4b:a6:44:05:2b:
         dc:19:84:ea:74:75:89:c0:d8:e3:41:0d:63:21:d2:5a:ff:ee:
         f5:1e:65:09:5d:36:cb:11:ac:9f:b9:e5:1e:f9:02:fe:d8:9b:
         40:7a:54:3a:d4:ea:81:e5:2b:00:9d:f9:63:fe:c6:4c:29:75:
         e4:c4:81:f2:46:4a:06:e0:cf:64:db:21:d6:6c:51:8e:75:b9:
         df:31:60:7d:8a:c4:27:ed:4f:90:94:e6:93:52:4f:5f:f8:bb:
         36:19:2d:bc:30:4b:37:02:ad:58:78:8c:11:1b:7b:4e:6e:47:
         19:2c:42:44:ed:3f:f9:70:f7:ed:73:2d:fa:e4:05:c2:7e:68:
         fc:97:84:ef:89:ea:3b:f2:74:fb:f5:76:83:64:27:e2:81:16:
         70:95:b2:37:17:f7:83:18:1a:9b:4c:47:70:22:c8:c3:08:a8:
         12:8a:94:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:18:10 2026 by rpki-client