Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35102b66-e263-3d67-bd1b-4352131f3dbe.roa
File:                     35102b66-e263-3d67-bd1b-4352131f3dbe.roa (raw, json)
Hash identifier:          rLEyRAQ1BRynkZTiAakyVJ9jjBJZZTh+iqDzHwt8jII=
Subject key identifier:   FC:3D:82:95:13:38:48:48:12:AC:A3:44:D0:24:1B:21:D4:EF:B0:E7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119DA13577C04BBC1C57D7A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35102b66-e263-3d67-bd1b-4352131f3dbe.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33491
IP address blocks:        2601:800:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:a1:35:77:c0:4b:bc:1c:57:d7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=3823b6c0-1b2a-4662-8960-67ab5172f316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:21:45:34:35:69:e3:05:39:87:b4:14:42:0b:
                    f2:71:8a:0c:75:96:55:13:ec:02:37:00:c3:4b:a3:
                    da:54:6d:fb:94:b6:7e:5e:a0:1f:7b:cb:01:d2:e8:
                    05:c2:ee:a4:5d:7f:b7:a5:62:1c:83:e6:ae:5f:d9:
                    17:61:c0:27:d6:7c:95:61:d1:5c:09:24:0c:1d:03:
                    07:72:5d:b6:67:53:d8:1b:8f:53:87:d7:b7:7f:7b:
                    d1:2c:4b:71:49:b7:5e:44:dc:22:dc:22:17:47:c0:
                    6d:12:0e:85:67:cc:39:69:9f:8c:bd:e4:25:87:5d:
                    20:07:f9:80:94:cd:39:87:bd:5c:32:37:e0:65:62:
                    d0:9a:94:0d:a3:89:b8:10:f2:9b:ac:a9:6e:35:2f:
                    e6:d6:ca:4b:eb:cd:b0:1b:80:f3:a3:3e:d6:ec:3c:
                    12:26:84:3c:1d:01:d4:da:6a:f4:98:98:f2:e4:a8:
                    41:48:e6:24:c3:e3:43:e0:41:09:8a:f5:6f:aa:99:
                    6e:7b:12:4d:05:77:d8:fc:62:ba:29:df:b2:28:92:
                    73:0d:6f:30:16:06:0a:07:cf:34:14:16:ad:5e:dd:
                    af:c3:58:3c:dd:5a:18:fd:5c:59:e8:83:45:9b:d2:
                    14:7e:86:02:6e:42:07:00:44:7e:1f:ea:02:ea:da:
                    ce:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3D:82:95:13:38:48:48:12:AC:A3:44:D0:24:1B:21:D4:EF:B0:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35102b66-e263-3d67-bd1b-4352131f3dbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:800:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:99:38:59:f0:64:f7:3e:a6:d6:a4:2c:30:c7:47:a2:83:9f:
         7a:2b:53:dc:ce:9f:1a:0f:bc:79:30:73:b5:2a:c4:62:f4:81:
         27:96:72:a3:8f:81:b9:8b:36:f9:21:ff:dd:0d:00:3f:f4:90:
         78:fb:7f:c8:9a:91:64:70:61:99:cc:da:fc:cf:0b:44:73:41:
         c2:cf:84:f2:5b:b8:03:40:8f:76:e0:10:68:c0:b8:eb:db:90:
         99:38:d5:57:02:85:61:b6:f9:a6:c4:e0:22:41:a6:35:bb:3e:
         07:ee:1c:a0:f2:64:58:53:7a:12:a2:3e:45:b3:0a:60:6c:6a:
         7a:3e:41:5e:83:44:f5:4a:d6:36:85:7f:76:e9:0f:32:0e:4f:
         56:c8:da:f6:4d:83:02:3a:c0:c1:77:46:fc:b5:06:1d:f6:55:
         4c:7b:2c:02:60:92:55:5d:91:c9:25:dc:d5:9f:0c:3b:35:a8:
         ef:78:0d:f2:47:f7:e4:35:7a:b3:fd:1e:16:e2:23:45:c9:73:
         d0:a1:7b:5b:17:c0:bd:8b:9b:bf:0a:0d:f0:ba:a5:35:f1:64:
         97:24:8c:b2:1a:e6:00:f5:59:65:2b:06:40:53:9c:f6:7c:8d:
         59:32:c0:3f:c1:f8:b5:e9:8a:1e:8d:01:23:d2:ed:5b:fd:ea:
         78:1a:96:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 13:21:46 2026 by rpki-client