Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/3b99ee43-f098-35c7-9306-150f345d04e1.roa
File:                     3b99ee43-f098-35c7-9306-150f345d04e1.roa (raw, json)
Hash identifier:          ljmKuituOaxL8ZnUQkTiU8KIGqEk1CviDOZUOda06pM=
Subject key identifier:   31:F2:94:8C:01:1C:43:CF:4C:7E:D9:19:53:DD:1D:EC:7A:56:89:DD
Certificate issuer:       /CN=6a30b207-de04-425f-94e9-ee12d4529f56
Certificate serial:       010D0C9F4328584EC0A727FE65E4AC77F0387400
Authority key identifier: 4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/3b99ee43-f098-35c7-9306-150f345d04e1.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        2601:9200:2000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:27:fe:65:e4:ac:77:f0:38:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a30b207-de04-425f-94e9-ee12d4529f56
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=bcee83e3-ec51-49b1-81f7-1a14e094c982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:0e:99:ef:9b:82:4b:7f:2b:fb:10:56:19:34:
                    27:2a:a1:88:cb:b3:cc:87:f2:00:28:2c:04:f6:0d:
                    60:8f:4d:67:5a:44:02:25:3e:1c:73:00:6d:bc:7e:
                    f9:0b:45:de:be:e0:6d:5b:4f:8b:3a:3b:20:6a:0e:
                    03:b1:5d:cc:e4:5b:26:ab:76:cb:b1:d9:92:a6:cd:
                    8d:fa:fa:24:cb:48:21:39:44:a0:eb:68:7f:43:5e:
                    f9:e0:b5:14:45:60:f9:8f:11:45:06:f4:85:d8:82:
                    33:c7:cd:be:c7:e7:a5:6d:f1:11:e4:79:e6:c9:7b:
                    78:48:f1:76:5a:50:ab:87:09:7a:c4:fa:fe:f1:ee:
                    b3:38:c9:10:85:d3:ac:ea:28:0c:e4:ac:b3:17:fd:
                    c7:5e:3d:20:fd:d4:87:20:fa:5c:94:93:88:94:bf:
                    34:27:43:6e:a0:db:e4:fb:33:b6:ab:31:ff:45:0e:
                    c2:f0:0b:0f:76:14:4c:5c:b0:db:f4:20:78:56:fa:
                    43:d1:4f:f9:27:ca:7f:d9:83:5f:01:03:cb:9c:a9:
                    9f:c9:2d:8a:d7:d7:26:d2:d4:d7:4a:a0:2b:a5:1c:
                    86:6b:66:a2:2e:cd:85:30:2c:91:9b:da:c7:fe:a8:
                    47:2a:4f:72:3c:b5:7e:3b:e1:0e:33:de:91:0e:d7:
                    09:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F2:94:8C:01:1C:43:CF:4C:7E:D9:19:53:DD:1D:EC:7A:56:89:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/3b99ee43-f098-35c7-9306-150f345d04e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:9200:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f3:b7:d2:7c:d3:9f:cd:f2:32:38:b0:86:8f:b0:ca:f2:9c:
         57:e6:2b:40:4c:44:53:89:43:c5:40:2c:ee:19:7d:9b:58:57:
         05:cd:cb:85:09:51:f2:c3:6c:20:58:e2:ef:b6:9e:1d:98:74:
         8e:77:46:dc:37:4e:c6:3f:7a:e4:0b:df:dc:52:04:4d:fa:78:
         a5:e8:e4:04:1f:b2:7b:ed:e3:2b:50:33:8e:0a:5e:ce:44:25:
         5b:e3:e2:bd:e1:2e:37:8d:c4:c3:4f:42:0b:5f:7e:55:91:11:
         a4:da:ab:11:89:1d:d4:b2:a0:3d:02:06:46:37:b8:d3:55:0a:
         52:30:00:26:12:4e:9d:81:ca:45:43:93:3f:b8:59:e9:b0:c1:
         c7:62:15:5c:f9:01:4a:56:7e:53:fc:5e:3a:90:d9:4b:56:df:
         fa:34:52:61:ad:9b:15:ac:a4:a5:5f:eb:38:c0:47:ff:0c:88:
         aa:14:48:18:1a:29:3d:39:9b:58:84:52:78:1f:70:88:e2:b5:
         28:dc:b7:d2:71:3f:a9:35:8c:19:32:62:1b:34:bc:89:76:cd:
         38:c6:4a:e9:67:fe:d5:71:0c:0e:35:8d:46:76:74:ac:25:74:
         82:98:10:62:a5:28:56:37:7a:a1:89:57:3b:14:d4:31:19:57:
         ab:e7:94:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 16:59:18 2026 by rpki-client