Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31fac4cc-3a65-47b9-af79-9162c3f661fa/23745a84-7fa1-32eb-829e-8eea455a63ee.roa
File:                     23745a84-7fa1-32eb-829e-8eea455a63ee.roa (raw, json)
Hash identifier:          zVi4PV3k6VJdR6G7GKLnQkpaZpQU7uQXpNpBjFHeuZY=
Subject key identifier:   03:88:6F:8B:8F:E9:5F:53:11:96:F0:B4:DD:8A:41:04:8B:F2:DD:98
Certificate issuer:       /CN=31fac4cc-3a65-47b9-af79-9162c3f661fa
Certificate serial:       010D0C9F4328584DF981B00EDE96BC5D0331BD00
Authority key identifier: 58:E4:28:BD:5F:8B:80:8C:66:52:63:0B:BC:0C:E6:DF:8E:0C:DF:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31fac4cc-3a65-47b9-af79-9162c3f661fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31fac4cc-3a65-47b9-af79-9162c3f661fa/23745a84-7fa1-32eb-829e-8eea455a63ee.roa
Signing time:             Wed 27 May 2026 16:59:10 +0000
ROA not before:           Wed 27 May 2026 16:59:10 +0000
ROA not after:            Tue 25 Aug 2026 16:59:10 +0000
asID:                     399970
IP address blocks:        2602:fc3b:e300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31fac4cc-3a65-47b9-af79-9162c3f661fa/31fac4cc-3a65-47b9-af79-9162c3f661fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31fac4cc-3a65-47b9-af79-9162c3f661fa/31fac4cc-3a65-47b9-af79-9162c3f661fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31fac4cc-3a65-47b9-af79-9162c3f661fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f9:81:b0:0e:de:96:bc:5d:03:31:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31fac4cc-3a65-47b9-af79-9162c3f661fa
        Validity
            Not Before: May 27 16:59:10 2026 GMT
            Not After : Aug 25 16:59:10 2026 GMT
        Subject: CN=ddab5090-c65e-4787-928d-3a742bdd488b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:47:e3:c2:13:bb:c1:39:92:1d:0b:ee:ac:cb:
                    dd:a2:0b:2b:94:b3:59:d3:10:45:0e:4e:7f:e6:3c:
                    9e:52:01:40:8a:4b:72:17:a3:6c:d7:47:0c:3c:3c:
                    ea:9f:5c:8e:bc:50:cd:db:08:a9:9e:11:ae:d2:a1:
                    ff:9b:10:8c:45:79:9f:c2:55:4b:1a:46:28:3f:9c:
                    18:d8:62:5e:54:ad:f9:49:df:ba:a1:9a:bc:83:69:
                    be:83:c1:30:1b:2a:05:70:c1:f6:e6:44:5c:98:79:
                    aa:93:e8:89:ff:7b:a3:ad:d9:7d:74:0f:ef:54:77:
                    5a:9f:3c:f3:1f:51:e6:d6:23:bc:05:0a:76:d8:86:
                    33:78:4a:a9:54:34:c5:bb:e6:e0:8b:b7:52:f7:cf:
                    46:f1:a0:ba:12:61:8d:dd:4a:b9:2f:19:32:3c:27:
                    3b:07:b4:30:50:8a:81:45:34:95:92:78:d3:5e:3a:
                    cf:f8:e6:91:9d:5c:a4:8a:c4:72:ce:56:85:18:fd:
                    3a:06:8f:dd:0b:3c:c0:78:01:30:f4:08:97:f5:c8:
                    e5:a6:be:93:0a:22:d0:21:1f:46:f9:43:62:d8:df:
                    e9:4c:4c:72:4a:1d:71:99:67:b5:64:e0:03:12:2c:
                    d1:c0:7c:99:8c:d8:01:06:f6:12:f7:1e:4f:0b:b7:
                    98:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:88:6F:8B:8F:E9:5F:53:11:96:F0:B4:DD:8A:41:04:8B:F2:DD:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31fac4cc-3a65-47b9-af79-9162c3f661fa/23745a84-7fa1-32eb-829e-8eea455a63ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31fac4cc-3a65-47b9-af79-9162c3f661fa/31fac4cc-3a65-47b9-af79-9162c3f661fa.crl

            X509v3 Authority Key Identifier:
                keyid:58:E4:28:BD:5F:8B:80:8C:66:52:63:0B:BC:0C:E6:DF:8E:0C:DF:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/31fac4cc-3a65-47b9-af79-9162c3f661fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:e300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:cb:30:ed:18:25:ec:bc:ac:fd:e8:c6:1a:d5:95:4d:aa:aa:
         cd:02:11:9b:a5:39:c8:d1:50:e2:7f:80:05:ff:da:9d:a1:a5:
         26:5f:7e:6c:69:84:cd:9d:17:82:ad:b0:dc:0f:bb:88:48:ed:
         8e:2a:d8:4b:79:ba:7c:fc:f5:c7:ce:51:14:67:2c:96:4e:85:
         0c:95:42:b4:88:1c:fe:14:9a:90:63:bb:8d:38:75:c0:2a:d0:
         ed:ec:6f:0f:49:ec:09:ba:cd:24:29:6e:e2:b0:2b:86:7c:80:
         7a:10:7e:08:4e:e5:b2:33:6e:f6:ac:05:6b:dd:9b:70:a9:c9:
         2a:75:58:b6:e9:12:b8:e3:74:d3:88:46:28:40:3e:7d:66:14:
         f6:ad:da:e0:6e:7f:af:97:8e:05:11:f0:d0:53:fa:2d:9d:8b:
         7e:90:9b:4c:e9:e4:de:3f:61:f2:d5:ee:a7:d5:b2:42:3c:f0:
         4d:fd:a0:e4:7c:84:c0:ca:9f:01:87:12:9e:00:0f:32:f8:ab:
         74:a0:c6:1f:99:a0:01:5b:f6:f4:1b:61:bb:64:96:01:35:5a:
         96:4e:7e:ff:72:97:20:c8:b1:8b:64:44:70:e8:d1:e5:9b:e1:
         58:3c:69:27:7c:da:5a:38:c9:41:04:eb:37:ed:91:23:6d:9c:
         80:ca:da:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 22:40:37 2026 by rpki-client