Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/78061b29-d846-3107-a526-47fd5a8d4b89.roa
File:                     78061b29-d846-3107-a526-47fd5a8d4b89.roa (raw, json)
Hash identifier:          +2rc+SbISQWW7WQ1ITvEUZssa1efHHF7Ew4c4jNLLZw=
Subject key identifier:   E0:17:81:BE:74:21:4D:BD:77:85:24:AD:FF:9D:F2:88:E6:97:7F:00
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584F49767DBAF5E5080EB9D64BC0
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/78061b29-d846-3107-a526-47fd5a8d4b89.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     3423
IP address blocks:        2602:fbdc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:7d:ba:f5:e5:08:0e:b9:d6:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=540f835f-9d40-4a1c-baea-ecdac5b23058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b0:89:56:79:e2:eb:40:2f:54:09:57:81:e1:
                    c5:32:53:cf:2d:c2:f5:17:17:a7:b6:26:6f:65:65:
                    2d:48:f9:78:d8:ae:72:85:ad:9d:63:7b:c8:13:ad:
                    cf:b8:fd:b0:50:9a:ff:60:e1:31:38:37:97:a1:34:
                    d3:d8:10:ec:fe:c2:37:73:fd:21:f6:1f:f3:f0:b8:
                    23:e3:b4:43:de:d7:1f:b8:0f:80:99:04:e9:aa:c7:
                    7f:3b:80:a8:b5:6e:00:2f:f0:91:e4:8a:05:77:0f:
                    f6:31:46:fe:4c:14:fc:7f:ed:bc:4a:ed:23:06:83:
                    ee:1d:1e:9e:47:12:2c:d5:54:78:bf:ff:df:72:5f:
                    b1:e0:77:f2:98:52:5f:bd:5f:65:45:4e:09:38:e0:
                    40:9c:16:17:a7:93:5d:0b:28:57:ac:8e:d3:30:a8:
                    80:a6:4f:2e:62:e4:de:d8:e7:a3:cd:99:5a:4f:c7:
                    9f:d0:c6:45:70:7b:34:36:39:f2:35:3b:22:a8:97:
                    20:79:2e:9d:61:42:5f:51:26:e0:e8:6c:16:8f:8e:
                    d6:f1:09:1d:e0:2e:ac:98:92:2f:f1:c3:25:56:70:
                    40:55:b3:4d:9d:ad:b9:1d:96:c2:29:2f:50:49:88:
                    fd:29:3b:41:76:65:d9:5b:0a:88:28:28:7e:56:0c:
                    48:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:17:81:BE:74:21:4D:BD:77:85:24:AD:FF:9D:F2:88:E6:97:7F:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/78061b29-d846-3107-a526-47fd5a8d4b89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:54:18:82:a8:3e:13:81:ac:75:73:04:ad:e2:c3:20:c9:23:
         44:2e:1b:84:ef:53:be:50:af:93:fd:c2:68:39:cb:32:36:a6:
         87:8b:80:38:26:0d:0d:8e:0c:96:f8:19:bf:2c:fe:0a:d8:64:
         b0:7d:d8:24:19:84:6e:0f:98:60:a1:63:27:51:43:1f:91:cd:
         4a:8d:48:f4:fa:a7:b0:25:be:63:1b:d9:74:1c:5b:97:e9:ae:
         d4:b1:f8:38:89:4c:25:51:61:86:d9:95:ac:b1:d3:27:01:4a:
         9c:32:f4:48:9a:c2:84:30:bf:d7:90:d6:b4:4a:b9:4d:1a:26:
         4b:22:6f:d6:8d:e7:95:36:0a:a4:ce:87:ee:bc:3b:6a:17:48:
         b6:2d:d7:78:b0:e9:24:01:4b:e2:57:9d:00:17:43:d7:36:42:
         a0:9b:5c:65:11:e4:d6:b6:c8:4c:e9:b1:d0:1e:20:9e:fa:99:
         a1:1d:ab:b1:94:b4:fb:6f:1f:5a:42:db:1e:5b:5f:cc:8d:02:
         28:ed:57:de:2c:c6:3f:0a:f9:80:f7:1b:59:5e:24:5b:26:4b:
         8d:8f:43:8a:26:7e:6b:98:20:2c:a0:2f:22:4b:e2:71:ce:16:
         af:a8:79:d3:6d:50:5e:15:61:d0:4d:76:6b:11:48:67:b2:39:
         ce:71:06:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 00:51:56 2026 by rpki-client