Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/1a85cc36-078c-3464-9f8f-7cb61867a439.roa
File:                     1a85cc36-078c-3464-9f8f-7cb61867a439.roa (raw, json)
Hash identifier:          6BpfkSA45LjkPmGYh5i6oCsDkbNjZVh7fKUsqFpZcP8=
Subject key identifier:   4D:E1:9C:9E:8C:F3:6C:2D:52:3E:EE:26:D4:37:A1:91:B5:CB:50:D1
Certificate issuer:       /CN=3d9d359c-ec49-4660-ab04-8247987b8dc7
Certificate serial:       010D0C9F4328584F119CDFF3B115D6288A717AE0
Authority key identifier: 2D:59:9B:D7:4D:5F:60:F8:28:FA:87:6F:5E:A9:88:8D:60:C3:4E:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/1a85cc36-078c-3464-9f8f-7cb61867a439.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     402718
IP address blocks:        2602:f35d::/48 maxlen: 48
                          2602:f35d:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/3d9d359c-ec49-4660-ab04-8247987b8dc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/3d9d359c-ec49-4660-ab04-8247987b8dc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:df:f3:b1:15:d6:28:8a:71:7a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d9d359c-ec49-4660-ab04-8247987b8dc7
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=9ed24552-a242-4b32-80d8-39144c220ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:70:46:09:2d:74:78:a2:0e:9a:c1:fe:8e:92:
                    69:bf:b2:0d:70:2a:f6:43:fd:77:98:1d:67:e0:6d:
                    2d:39:6d:e3:81:e6:5a:7a:29:4a:14:6b:df:0c:eb:
                    cc:56:c7:58:63:01:af:f4:a2:b9:ec:99:9a:e3:6c:
                    a8:8e:77:9e:a2:d0:1b:5e:23:d1:a7:37:a1:a7:35:
                    2b:11:3e:f4:0d:eb:48:40:c2:95:22:83:3d:ab:ff:
                    35:59:8a:2a:23:44:2f:03:38:25:fb:9e:8b:a4:73:
                    d7:e2:5b:e2:2e:f3:5d:f4:f8:0c:84:b9:b5:44:3c:
                    0f:4b:7c:e3:2e:a2:01:b2:78:ee:fa:f5:56:65:4a:
                    0b:ed:9b:0a:0a:fa:07:8a:60:6c:12:58:00:d4:06:
                    0e:87:7e:b5:ae:1d:51:97:de:72:d5:e4:0b:ea:fc:
                    99:70:48:50:bc:78:a9:93:89:6a:03:9a:77:17:50:
                    06:17:4f:19:04:11:c1:2f:cf:7f:12:13:a6:b2:0b:
                    01:76:82:f8:c7:dd:4c:ca:93:a3:e8:9e:d1:ad:0d:
                    6c:e9:ab:78:8e:7f:eb:5c:d2:96:ca:f4:a8:dc:f5:
                    c7:d7:a2:b5:bd:e4:a0:34:68:eb:6c:0b:e8:c1:a4:
                    13:fd:4c:bc:ee:db:a5:24:3a:5e:d4:2d:f6:40:19:
                    76:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E1:9C:9E:8C:F3:6C:2D:52:3E:EE:26:D4:37:A1:91:B5:CB:50:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/1a85cc36-078c-3464-9f8f-7cb61867a439.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/3d9d359c-ec49-4660-ab04-8247987b8dc7.crl

            X509v3 Authority Key Identifier:
                keyid:2D:59:9B:D7:4D:5F:60:F8:28:FA:87:6F:5E:A9:88:8D:60:C3:4E:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f35d::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:c2:b0:8b:3f:37:0b:3b:e4:e2:13:81:3e:db:ba:81:20:bc:
         25:dd:fd:c0:22:d0:db:8d:77:c5:52:4f:a8:08:be:d6:87:55:
         fa:ed:23:38:72:0b:5a:59:0c:b0:9b:34:d8:54:63:89:3e:08:
         a0:8c:f5:c5:44:77:36:1b:e3:9e:61:c9:85:60:92:ab:ea:e7:
         91:49:96:97:66:13:aa:1f:a2:67:6f:58:a0:bb:26:4d:3c:0c:
         66:c5:38:bf:9f:8c:d8:f6:8a:b7:43:39:ae:99:ef:a0:57:da:
         d9:d3:16:8d:ab:ea:8e:b2:18:2f:51:c6:65:d6:c7:d4:50:f9:
         a7:44:ef:7c:a5:7c:f8:5a:c0:43:56:13:16:3d:29:7e:70:36:
         da:ce:45:64:de:c8:ba:2e:95:77:f4:3f:88:11:f4:a4:8d:8b:
         71:16:f9:8b:48:1f:d0:26:9f:fa:da:34:49:f8:67:da:e1:66:
         36:49:2d:9b:2c:3b:d9:98:b5:08:69:a3:1a:2e:46:67:95:65:
         96:08:85:e6:c1:c6:ba:bc:3d:ba:cc:d2:f5:9a:69:7f:4c:2c:
         36:d2:d0:a7:e5:fd:f4:0c:df:95:a6:e2:9c:ce:b4:c5:68:18:
         25:c1:8b:32:28:7f:a8:dd:77:09:e0:b0:93:6d:7c:55:78:d0:
         5b:5d:77:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:56:43 2026 by rpki-client