Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3378215f-2bb2-4f2b-9dbc-a26372e745dc/42e228f0-5352-34b9-bac6-e6dee74233c0.roa
File:                     42e228f0-5352-34b9-bac6-e6dee74233c0.roa (raw, json)
Hash identifier:          gjfPmiFmTIKVzNXqZiDtV/xKZ3lF4U95ED90A3yGpIg=
Subject key identifier:   62:BF:88:96:93:3C:2C:3E:02:99:DD:E8:4B:6E:15:48:EE:07:B3:E3
Certificate issuer:       /CN=3378215f-2bb2-4f2b-9dbc-a26372e745dc
Certificate serial:       010D0C9F4328584F46EE262871C21737D08D1400
Authority key identifier: 33:4B:55:1C:85:E1:A0:C7:AE:CD:00:49:56:D4:E5:80:19:81:8D:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3378215f-2bb2-4f2b-9dbc-a26372e745dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3378215f-2bb2-4f2b-9dbc-a26372e745dc/42e228f0-5352-34b9-bac6-e6dee74233c0.roa
Signing time:             Thu 24 Sep 2026 03:21:53 +0000
ROA not before:           Thu 24 Sep 2026 03:21:53 +0000
ROA not after:            Wed 23 Dec 2026 04:21:53 +0000
asID:                     36666
IP address blocks:        2602:f31b:4::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3378215f-2bb2-4f2b-9dbc-a26372e745dc/3378215f-2bb2-4f2b-9dbc-a26372e745dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3378215f-2bb2-4f2b-9dbc-a26372e745dc/3378215f-2bb2-4f2b-9dbc-a26372e745dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3378215f-2bb2-4f2b-9dbc-a26372e745dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:ee:26:28:71:c2:17:37:d0:8d:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3378215f-2bb2-4f2b-9dbc-a26372e745dc
        Validity
            Not Before: Sep 24 03:21:53 2026 GMT
            Not After : Dec 23 04:21:53 2026 GMT
        Subject: CN=c79e5c8e-e2a1-4793-a199-627a95130199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e6:6d:6d:12:75:0a:1e:81:e4:a7:a4:96:72:
                    75:12:45:d1:06:b5:49:14:00:9c:d0:d6:d0:a7:3d:
                    9f:8b:95:50:13:cd:8a:f1:f5:ec:ff:52:50:73:8b:
                    e6:c5:b3:7d:e2:67:bb:fb:23:fb:2c:ab:3a:c7:65:
                    37:d9:eb:9e:d0:fb:7a:f4:e7:6d:ed:34:79:67:62:
                    1a:73:ca:de:2b:37:28:5c:13:79:c7:d4:a5:06:81:
                    ba:8e:80:96:59:cd:95:37:ca:a8:e3:67:1e:84:ca:
                    b9:b8:dd:80:9d:15:18:98:72:48:0f:44:ae:09:46:
                    07:2a:43:ed:e3:80:44:b4:a7:de:29:bb:08:bd:ff:
                    55:8a:36:c8:ba:78:35:c8:95:22:4b:2c:ed:47:4e:
                    f7:84:7f:09:b4:be:94:20:62:e4:e6:4c:df:0a:62:
                    b4:c8:fb:36:1b:bf:ff:9d:34:59:e9:83:18:e9:b5:
                    84:30:ed:9c:eb:28:a7:c0:f3:54:34:7a:af:f9:e2:
                    63:3a:9e:93:a9:ca:b7:4c:3d:9f:94:85:ca:72:de:
                    80:c8:e6:7a:1e:0b:6d:30:20:a1:38:1d:f5:41:bc:
                    a0:6c:5e:4d:69:fd:05:a4:9e:6e:20:a8:59:fd:c6:
                    5b:35:54:04:09:16:ec:b3:53:80:a1:e6:53:53:04:
                    26:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BF:88:96:93:3C:2C:3E:02:99:DD:E8:4B:6E:15:48:EE:07:B3:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3378215f-2bb2-4f2b-9dbc-a26372e745dc/42e228f0-5352-34b9-bac6-e6dee74233c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3378215f-2bb2-4f2b-9dbc-a26372e745dc/3378215f-2bb2-4f2b-9dbc-a26372e745dc.crl

            X509v3 Authority Key Identifier:
                keyid:33:4B:55:1C:85:E1:A0:C7:AE:CD:00:49:56:D4:E5:80:19:81:8D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3378215f-2bb2-4f2b-9dbc-a26372e745dc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f31b:4::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:c1:1d:89:74:b1:0a:1d:0e:3c:a8:33:8c:14:c3:08:58:3e:
         cc:f1:99:dc:b2:ed:a3:de:55:90:99:fb:98:85:8f:ca:28:d7:
         1b:f8:0d:f9:f8:64:a7:b5:66:9f:18:2c:97:7c:db:50:2d:5c:
         2b:93:17:00:86:52:d3:1a:bf:dc:53:b7:e5:1f:c2:00:27:fe:
         50:35:1b:3e:34:e6:74:53:f3:31:57:f0:ea:94:ff:51:25:9a:
         63:0a:8c:32:ed:08:1a:53:52:ce:80:97:e4:2c:de:5c:10:dd:
         7b:a4:45:8f:4e:bf:ee:1a:20:4a:f6:96:93:4c:c8:b7:90:d6:
         13:31:49:c3:cc:0b:f5:0e:95:e8:fc:9d:7d:5e:3a:c3:82:d4:
         76:f9:46:ae:78:ce:ed:c2:db:1d:e6:e4:4e:f6:2d:2b:64:78:
         02:7d:60:fb:64:9a:2f:79:3a:02:81:d4:c8:a6:fe:cd:0b:af:
         2e:a7:7f:dc:53:1c:51:95:0a:46:8c:2b:ba:fe:04:01:96:a3:
         af:6d:86:24:87:1b:35:9e:7a:aa:bb:62:db:57:f7:a9:8c:e9:
         7f:89:d8:ba:97:1d:e7:8b:5a:4c:1f:0c:9e:f1:e3:6e:ec:c1:
         23:e7:71:35:14:bf:80:c9:41:86:53:28:2e:ed:29:a2:d7:f9:
         90:c3:bf:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:54:41 2026 by rpki-client