Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/35bd10f7-b896-334e-a49e-eaf93d09cd8b.roa
File:                     35bd10f7-b896-334e-a49e-eaf93d09cd8b.roa (raw, json)
Hash identifier:          4nJ9gtwDzaXXV3J175vjjX5lvSGPBwLDjuZz2JlWeVE=
Subject key identifier:   15:2C:61:33:DA:0E:5A:4D:90:3D:67:8E:BE:15:31:B4:32:4D:48:36
Certificate issuer:       /CN=31cdafa2-3aa9-4253-a242-08ace2acaef2
Certificate serial:       010D0C9F4328584DC9959EC2B99CDC08527CF500
Authority key identifier: 61:12:27:D5:7B:B1:66:AC:C6:7D:1D:A8:85:1A:3D:97:FF:5C:F9:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/35bd10f7-b896-334e-a49e-eaf93d09cd8b.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     8987
IP address blocks:        2602:f702:22a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:9e:c2:b9:9c:dc:08:52:7c:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31cdafa2-3aa9-4253-a242-08ace2acaef2
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=99fe2626-b91f-44de-8eaa-a0144222b4db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:14:2e:ae:40:9b:ee:8f:e0:d1:3d:f3:eb:46:
                    d0:30:af:c8:7c:e2:6f:4a:f1:00:7a:70:49:a4:3a:
                    17:ff:a3:79:84:25:ac:e1:e5:20:a6:46:76:ce:13:
                    76:bd:b4:e3:e9:6d:49:9a:2e:c8:f8:59:3a:66:ca:
                    22:4e:67:55:c6:7f:3b:62:a4:b0:9f:bb:e2:18:9d:
                    e3:83:c6:07:e9:05:6e:a0:30:ba:4d:2a:b1:d8:c4:
                    8c:7f:31:83:6c:9b:3e:cb:53:a2:ce:ff:9f:0c:8a:
                    89:6a:1c:db:35:e6:de:28:ab:48:0d:72:8f:1a:bc:
                    7c:64:f2:6b:f1:68:b8:9e:31:99:dd:72:50:f1:46:
                    e9:73:33:c4:8d:05:7b:a1:9c:9f:d7:81:d7:cf:eb:
                    eb:61:f9:a8:53:29:3f:20:72:55:c4:7c:a2:35:d4:
                    fd:d0:f3:f3:40:1e:86:4b:8f:4e:f2:e3:23:fb:76:
                    8b:db:40:62:33:29:66:f5:06:35:b7:39:b5:c0:ac:
                    41:d8:5f:70:39:0d:d9:06:f0:24:fc:e2:86:c6:6a:
                    6d:ff:2e:39:8e:e9:1d:46:28:fe:7c:de:be:b8:03:
                    21:e8:af:54:73:12:b0:96:64:77:16:a4:fb:31:e7:
                    db:99:92:e3:30:f8:b8:51:51:98:3c:47:a6:59:83:
                    d4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2C:61:33:DA:0E:5A:4D:90:3D:67:8E:BE:15:31:B4:32:4D:48:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/35bd10f7-b896-334e-a49e-eaf93d09cd8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.crl

            X509v3 Authority Key Identifier:
                keyid:61:12:27:D5:7B:B1:66:AC:C6:7D:1D:A8:85:1A:3D:97:FF:5C:F9:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f702:22a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:4c:25:e5:cb:67:a9:74:36:ad:8d:fa:cc:39:66:5d:27:c1:
         12:ef:3f:02:87:5e:e3:44:90:0e:8e:27:41:c5:c8:a7:2f:51:
         e8:a3:80:f0:f7:24:0f:d6:07:68:2c:81:37:7b:f0:be:8a:26:
         4d:a7:eb:17:a4:41:5a:3e:18:c0:30:9f:74:6b:b7:51:ee:70:
         4f:6d:57:78:06:9d:ea:57:06:ae:ce:29:94:1c:51:c0:35:d9:
         6c:40:b8:2b:55:d0:12:ee:ba:f4:1f:6a:e4:ea:d3:b2:c4:fb:
         03:2c:35:3f:30:40:76:c7:d2:bc:b5:2d:b6:8e:b7:e7:f4:f2:
         a3:28:a1:06:bb:c8:24:27:7c:eb:2f:34:be:50:89:0c:7e:c7:
         ec:d0:d1:f7:cf:0b:1f:aa:8c:eb:aa:7c:8e:37:7c:4e:32:3e:
         ca:d0:72:b0:8a:34:ac:f6:8a:a6:31:b1:d6:f0:c0:80:24:f3:
         ea:2b:81:2d:8c:62:78:bb:a2:87:40:5a:66:bd:68:b5:1c:74:
         e1:1a:5e:4c:a3:9f:52:e8:89:f0:19:b2:bf:51:8a:e2:ab:b0:
         6f:12:aa:64:7c:ab:55:9e:8e:b9:ea:b5:90:43:4d:36:1c:f3:
         2a:67:1f:e0:21:13:88:88:25:a9:97:4d:09:6b:6f:aa:b9:04:
         cb:4c:1c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:10:16 2026 by rpki-client