Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/a3c8c1ab-06f2-3c28-b813-61e398b5b9cd.roa
File:                     a3c8c1ab-06f2-3c28-b813-61e398b5b9cd.roa (raw, json)
Hash identifier:          Nut7wQxSojWmp5riyV/O0qgDVz/uQaV2Q3iBa3GJXCM=
Subject key identifier:   E9:25:FD:2A:DA:A3:D7:BE:BE:44:3C:A7:3E:07:B0:D0:FA:5C:9F:18
Certificate issuer:       /CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
Certificate serial:       010D0C9F4328584F454289F7D684915A02BD79E8
Authority key identifier: 8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/a3c8c1ab-06f2-3c28-b813-61e398b5b9cd.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     30690
IP address blocks:        2602:f99b:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:89:f7:d6:84:91:5a:02:bd:79:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=1826a318-a5b4-446a-8bd0-210b4e8aaab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:7f:8c:2c:b8:a1:9a:9b:ea:03:fe:17:63:9d:
                    22:a2:19:74:61:71:f8:60:42:b3:d0:9d:40:14:3f:
                    ea:11:3c:d8:a2:12:e7:95:84:a9:73:0a:12:dd:6b:
                    67:d1:c8:d9:8b:3f:bf:77:98:d5:e2:44:4a:c1:b3:
                    1d:fc:23:c3:de:c8:3d:a7:1a:99:ad:f4:1a:d7:55:
                    88:68:8b:51:0d:c0:ed:08:d9:aa:97:f6:ff:61:3d:
                    70:44:6e:0b:85:fe:cd:e0:91:d2:d2:82:14:c3:ea:
                    d2:83:d4:62:a2:4e:f6:78:ac:85:4a:d6:e9:ee:69:
                    ca:cb:83:48:8f:3a:d7:58:54:99:c0:29:44:0a:85:
                    3a:4f:aa:8d:aa:23:74:23:a1:c0:2a:dd:cc:56:ec:
                    84:c7:79:ef:2b:39:2d:da:6d:1c:78:79:0c:c1:12:
                    a5:03:53:e1:fd:b8:c8:29:91:94:1e:5d:98:62:65:
                    59:61:7e:e9:24:36:3d:59:93:df:81:ae:e0:4e:a1:
                    fb:e2:83:30:38:ac:31:c2:39:55:a2:e5:d1:2c:cc:
                    53:a9:36:0d:06:70:65:33:f5:e8:15:bf:4b:16:af:
                    ad:90:b6:1c:f0:7d:6a:5d:fd:7a:8e:02:51:7f:26:
                    33:03:f8:23:b8:ff:59:c2:ba:3e:4f:29:49:a4:26:
                    21:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:25:FD:2A:DA:A3:D7:BE:BE:44:3C:A7:3E:07:B0:D0:FA:5C:9F:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/a3c8c1ab-06f2-3c28-b813-61e398b5b9cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl

            X509v3 Authority Key Identifier:
                keyid:8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f99b:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:fc:a3:98:9a:2b:e5:9e:00:79:72:4a:e9:e6:40:75:5b:55:
         45:62:25:77:ab:21:60:2b:ca:eb:e7:9a:96:37:88:6a:86:8d:
         ba:ec:77:c8:1a:b6:6b:e9:23:f3:4a:20:af:fb:70:25:1a:ce:
         4c:e8:5e:3f:78:4c:cb:f7:f7:92:63:7a:8c:23:46:bc:7f:c1:
         58:99:39:5b:04:55:94:a6:a8:16:db:1b:bf:72:bd:54:61:f8:
         9a:04:c9:0d:77:57:89:18:0e:8a:a4:2e:26:17:3e:10:78:25:
         e6:0e:c8:52:cb:35:a5:b6:3e:74:9e:7d:83:90:0c:ad:13:d3:
         64:32:9e:88:85:13:42:8d:8d:20:f6:f3:34:09:cc:3e:06:d6:
         34:cc:63:22:5e:4d:8b:bc:05:3c:f2:01:00:87:01:b4:c3:70:
         78:bb:86:cf:a5:2d:23:2c:19:02:1c:72:e2:77:c8:f6:05:98:
         70:7a:8a:08:32:13:c5:3c:b1:7e:68:f3:a8:1b:09:a0:62:87:
         ac:b3:cc:ff:0a:38:4e:df:2e:90:bf:18:bd:51:1b:4a:f0:ec:
         21:d2:51:90:cf:d5:78:7a:76:f8:b6:ca:a6:c4:7f:f3:7d:6a:
         3c:22:7e:98:54:e2:6a:ca:cf:68:92:9e:11:d1:40:08:46:b2:
         c7:3a:51:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:07:55 2026 by rpki-client