Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/100890b2-cb63-38f6-a327-be1ff3bbbb34.roa
File:                     100890b2-cb63-38f6-a327-be1ff3bbbb34.roa (raw, json)
Hash identifier:          ThJS88zelKfQzRVpcqf6kjPQ1wD6fztbcaeXF+WQDNM=
Subject key identifier:   F3:8A:A3:93:1E:93:C2:77:2F:D6:BE:1F:79:C0:73:19:C6:F1:32:1F
Certificate issuer:       /CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
Certificate serial:       010D0C9F4328584F655D80952BCB41261FB232E0
Authority key identifier: 71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/100890b2-cb63-38f6-a327-be1ff3bbbb34.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     31898
IP address blocks:        2602:80f:9003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:80:95:2b:cb:41:26:1f:b2:32:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=0c0c4dca-bbe8-4513-85a1-9017477fc62b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c7:1c:e6:0e:07:6d:8e:e1:b6:d3:f0:5c:62:
                    5f:3a:c2:68:f3:4a:6a:6b:2b:45:d4:4f:21:b5:72:
                    0c:ba:4e:42:1c:64:29:72:71:91:17:7d:95:7e:0a:
                    ae:74:ee:72:88:64:2d:91:40:66:0c:0e:b9:53:62:
                    38:24:91:90:dc:9c:d7:15:5f:32:63:03:e9:89:62:
                    a2:d5:c9:6f:04:68:6e:3c:30:ad:33:a9:47:91:94:
                    d0:27:d1:16:66:b0:e9:f8:58:5a:86:28:8f:3c:b9:
                    5a:e2:17:ec:55:49:16:91:5d:bd:51:50:8e:27:c6:
                    6d:f2:09:13:46:c5:aa:f4:81:37:b1:25:b1:8e:63:
                    80:11:8b:a4:de:3f:e1:9f:74:b3:97:ee:f7:05:af:
                    a1:e6:e6:03:b1:41:ca:7c:0e:7d:d9:da:d0:dd:df:
                    ad:57:0e:1c:fe:58:4f:74:6e:8c:85:8b:fe:eb:45:
                    75:41:39:ca:56:ab:f4:4a:ea:ac:bc:cc:3a:72:8c:
                    4a:26:dd:d5:68:29:b6:e5:1d:71:87:1e:07:32:e6:
                    91:90:93:b2:19:17:b7:fa:a1:42:fb:b9:82:ad:ba:
                    2e:e7:ba:a4:d2:b1:5d:07:f9:b0:2e:34:ff:9c:eb:
                    95:a0:98:13:97:82:0f:8d:37:41:eb:6d:50:06:07:
                    05:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8A:A3:93:1E:93:C2:77:2F:D6:BE:1F:79:C0:73:19:C6:F1:32:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/100890b2-cb63-38f6-a327-be1ff3bbbb34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl

            X509v3 Authority Key Identifier:
                keyid:71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80f:9003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:09:c6:0b:94:00:0b:65:07:29:25:d9:98:6c:bf:66:53:47:
         da:83:45:3a:1b:b1:53:af:b0:a3:f9:4a:87:aa:4f:4f:ba:54:
         ae:e1:0f:e8:81:0a:d1:9a:63:a2:0a:95:eb:43:e6:20:7d:99:
         70:5e:4a:f5:35:19:a6:0f:fc:4d:5e:42:56:51:ed:8d:0b:e3:
         1d:58:4d:3f:96:5c:d4:6b:2b:6b:35:bf:d8:5b:f4:8a:59:e9:
         82:a6:71:d2:71:21:30:00:ce:8f:73:88:7d:9f:79:5b:89:a5:
         ee:bc:f7:34:12:17:f2:a1:0e:03:e4:75:d2:68:e8:38:b1:9f:
         b7:b6:89:cb:11:63:c6:44:9a:f0:fa:12:3e:c6:f9:9e:a1:09:
         63:97:6d:b9:47:31:e3:ac:e3:57:9e:20:a4:29:cd:e3:71:13:
         71:eb:d9:29:f8:3e:7e:dd:1d:ce:d8:52:34:0c:3a:72:c9:c3:
         2e:66:76:bf:6b:51:dc:ac:59:85:18:c5:ea:63:cb:24:36:79:
         1b:59:20:ef:ca:d5:10:29:ca:41:5c:32:ad:f4:ca:16:e0:ab:
         1b:19:5b:23:26:bd:4d:ce:22:0f:0e:a8:30:6e:a0:a2:57:1b:
         6f:e1:d0:1d:d8:43:72:cd:2e:fc:50:31:62:2a:a4:10:ef:92:
         3f:da:c2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:14:22 2026 by rpki-client