Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27/35629978-6e82-3678-980f-19be5043ac02.roa
File:                     35629978-6e82-3678-980f-19be5043ac02.roa (raw, json)
Hash identifier:          7eTVLefw69wl4p1UlSgCpsX7zN/2yE7kEjP8kMcjOfA=
Subject key identifier:   CD:AF:A6:AA:4A:72:42:08:90:AB:FC:4D:D1:D6:6A:17:C4:59:D9:4B
Certificate issuer:       /CN=e0687cea-be52-4639-b2ec-92c799316a27
Certificate serial:       010D0C9F4328584F541AE938F5FBF2FA9639DC00
Authority key identifier: 3F:07:0D:ED:79:94:93:FA:20:59:FF:87:D7:E0:EE:69:AD:A4:FE:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27/35629978-6e82-3678-980f-19be5043ac02.roa
Signing time:             Mon 28 Sep 2026 20:37:34 +0000
ROA not before:           Mon 28 Sep 2026 20:37:34 +0000
ROA not after:            Sun 27 Dec 2026 21:37:34 +0000
asID:                     205592
IP address blocks:        2602:f2dc:8b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27/e0687cea-be52-4639-b2ec-92c799316a27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27/e0687cea-be52-4639-b2ec-92c799316a27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:1a:e9:38:f5:fb:f2:fa:96:39:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0687cea-be52-4639-b2ec-92c799316a27
        Validity
            Not Before: Sep 28 20:37:34 2026 GMT
            Not After : Dec 27 21:37:34 2026 GMT
        Subject: CN=615ac699-8635-45d8-a10e-0454bb567b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d7:f6:b1:42:5c:fa:65:a1:13:bd:ca:7c:3a:
                    d1:5f:f5:22:11:17:16:8a:99:b6:ce:e7:c9:82:b2:
                    dd:c3:d7:d5:10:63:20:a7:28:bf:5c:09:43:e1:38:
                    01:fe:8c:c7:c7:04:bc:10:fb:78:80:65:cc:ba:af:
                    bd:d9:f0:10:05:21:29:a7:ff:ef:da:58:55:aa:42:
                    ea:80:76:e5:38:f5:da:80:07:1d:37:d8:3a:be:a7:
                    fc:9d:6c:1f:9b:d2:7e:02:0f:7d:88:67:86:73:77:
                    74:e7:68:49:0e:eb:87:ca:2b:d4:99:4c:e3:61:62:
                    46:ca:d4:98:ca:91:d8:1b:3a:0c:82:cb:dd:4f:ef:
                    2b:57:96:e5:25:a5:b5:16:cc:c8:82:3d:02:63:56:
                    db:39:8c:1c:0f:f5:77:e7:71:91:74:03:a9:4c:9d:
                    99:fc:fd:76:63:ba:78:2f:dd:8d:c6:5a:17:de:b5:
                    32:37:74:f9:52:22:5a:a2:3d:ed:7c:d0:c6:1d:7e:
                    35:9c:d4:43:05:39:74:5e:b3:1c:42:42:8a:9d:79:
                    16:28:23:77:d5:c1:28:9f:d8:b5:0a:f9:46:47:c4:
                    94:70:06:5e:b6:07:cd:71:97:27:7d:2e:bf:00:55:
                    49:66:3f:73:fe:50:15:ea:cf:8b:a0:52:27:42:24:
                    6b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AF:A6:AA:4A:72:42:08:90:AB:FC:4D:D1:D6:6A:17:C4:59:D9:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27/35629978-6e82-3678-980f-19be5043ac02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27/e0687cea-be52-4639-b2ec-92c799316a27.crl

            X509v3 Authority Key Identifier:
                keyid:3F:07:0D:ED:79:94:93:FA:20:59:FF:87:D7:E0:EE:69:AD:A4:FE:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/e0687cea-be52-4639-b2ec-92c799316a27.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f2dc:8b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:ae:3c:66:19:9c:e9:ce:68:08:95:78:88:6e:88:70:bc:8e:
         a4:9e:1a:db:ae:45:14:ac:c5:c7:7f:85:66:64:5c:cb:77:b5:
         0d:8c:33:39:2a:0e:03:15:f8:78:b6:a8:8d:58:66:d8:4f:c3:
         59:b0:1f:5a:6b:d7:95:24:2c:d2:df:bf:ba:3f:49:b6:28:52:
         92:19:e3:e1:a7:1f:da:4c:e7:7e:ba:ad:45:71:4f:8b:3d:54:
         36:71:6f:98:38:79:9c:af:95:11:26:ec:63:4f:62:0e:7b:c9:
         22:c0:f0:67:9f:96:ed:f3:19:cb:62:45:ff:52:03:78:f1:30:
         71:e8:32:18:93:a2:df:d0:bb:e7:d6:93:03:8f:d8:49:04:e1:
         dc:f7:c0:58:01:be:dd:8d:c8:fd:34:37:c0:ab:45:19:39:6d:
         7d:47:c1:b4:0b:4d:a6:4f:f3:34:02:f5:7a:a3:d3:46:87:f2:
         60:bb:f2:c1:5a:3c:65:7a:59:81:4d:21:0a:04:35:50:39:18:
         d7:22:8e:2f:88:b4:2a:0e:d6:4c:97:91:26:c9:a8:3f:57:5e:
         61:93:b3:1a:6e:3b:b2:6f:6e:63:4a:f5:a8:9a:7c:73:c8:15:
         52:03:6a:02:6e:db:7b:d1:50:84:c9:0c:90:69:91:fd:f4:aa:
         dc:76:1f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:43:58 2026 by rpki-client