Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/b3b4912b-781a-31e4-be62-edaa5c39b0b2.roa
File:                     b3b4912b-781a-31e4-be62-edaa5c39b0b2.roa (raw, json)
Hash identifier:          bRhlbiOm64s89yu0H9IKLWJ439oVbSqyaEh8xtnBlX0=
Subject key identifier:   20:31:C2:58:D7:66:EE:A4:C2:01:A1:C3:AD:79:2B:83:A8:6C:F7:ED
Certificate issuer:       /CN=35dd34c4-644d-463f-8aba-5a3d509d5560
Certificate serial:       010D0C9F4328584F4973EF1FCE4F6B0A977EFB80
Authority key identifier: DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/b3b4912b-781a-31e4-be62-edaa5c39b0b2.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        2606:2c0::/48 maxlen: 48
                          2606:2c0:1::/48 maxlen: 48
                          2606:2c0:2::/48 maxlen: 48
                          2606:2c0:3::/48 maxlen: 48
                          2606:2c0:4::/48 maxlen: 48
                          2606:2c0:5::/48 maxlen: 48
                          2606:2c0:6::/48 maxlen: 48
                          2606:2c0:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:ef:1f:ce:4f:6b:0a:97:7e:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35dd34c4-644d-463f-8aba-5a3d509d5560
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=441b94f9-36eb-440c-82ae-1403bed69208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c2:4b:87:5d:8e:e6:58:e9:88:de:27:42:41:
                    75:be:18:2c:d9:ad:40:29:55:15:f7:5b:d4:ff:09:
                    5f:bf:de:45:02:cc:97:c0:e1:0e:74:d7:b1:85:a1:
                    4d:bd:c4:8a:8c:9a:35:2f:aa:3b:b2:03:1a:d5:b9:
                    d9:04:33:21:69:12:6a:ce:9f:74:8d:ee:70:a1:9b:
                    a5:4d:25:d0:4d:b7:4a:18:c5:de:21:91:2b:81:78:
                    5a:ce:4a:b9:05:dc:90:f0:c0:c5:54:1d:d9:b4:01:
                    3c:bd:96:f3:6a:68:38:30:c7:cd:d1:a0:a9:20:5b:
                    59:de:15:3c:de:2f:2b:c5:21:74:9a:ea:30:37:5c:
                    db:08:02:a6:da:3f:c7:b5:f7:c3:ee:13:a6:53:8e:
                    e8:2e:88:58:f4:b3:3a:d1:ae:d6:89:d3:e0:d1:97:
                    15:98:44:8e:2d:ea:b0:9e:6f:b9:0a:5e:67:8a:63:
                    8a:b1:e4:05:91:79:cf:13:ce:5a:a3:ea:2d:98:e5:
                    89:ec:1f:5b:5d:67:52:42:85:3f:b0:27:5f:bc:51:
                    bb:65:be:c7:f6:61:df:e5:f8:e6:87:8a:80:74:bd:
                    d6:f3:b7:9a:8c:22:22:cb:a6:b9:da:48:5c:64:ec:
                    50:41:b6:6e:4f:bb:64:67:ae:0f:ab:e3:5f:55:6a:
                    94:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:31:C2:58:D7:66:EE:A4:C2:01:A1:C3:AD:79:2B:83:A8:6C:F7:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/b3b4912b-781a-31e4-be62-edaa5c39b0b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl

            X509v3 Authority Key Identifier:
                keyid:DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2c0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:60:f5:59:8d:f4:7a:88:18:ed:16:74:dd:d9:b0:cb:b4:4e:
         0c:41:17:e7:4c:11:9f:5b:fc:ec:1d:41:5c:cb:ee:9e:ba:02:
         7c:3d:78:37:84:7d:a3:37:38:cd:e4:db:c2:20:45:2f:0c:c9:
         59:3a:b1:35:51:6a:3a:20:d7:35:c0:64:76:cc:b9:a9:b9:c7:
         36:7e:e0:c3:18:2d:4a:4a:3a:57:33:82:82:36:af:9d:4b:30:
         39:9f:ac:f9:3a:bf:28:61:4f:65:ad:83:cb:55:a7:8a:da:1a:
         24:c1:73:e8:08:29:9e:cf:13:f8:66:be:eb:27:99:2c:07:23:
         d7:5f:48:2f:98:55:d0:4f:dc:11:67:5f:2e:f4:63:10:40:b5:
         bd:8c:af:d0:d9:70:cd:63:ee:d8:8f:23:24:92:84:2c:33:84:
         c0:1d:e1:6b:be:83:27:1d:17:9e:f0:e2:5f:25:c4:1b:5c:43:
         2d:fc:5a:24:26:e9:83:ea:49:94:07:0b:18:c9:b6:2f:73:73:
         e5:2e:2d:01:d5:26:df:27:ab:83:11:68:96:67:a7:e3:de:f1:
         8b:ef:1e:66:ae:96:9f:80:e2:c6:24:c9:ae:18:cd:5c:f0:7a:
         32:d9:c8:61:50:64:4c:6e:0d:64:d5:29:e6:8d:cf:18:59:61:
         08:c8:a1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:41:21 2026 by rpki-client