Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/36a58b02-00a6-30dd-8d4f-2db78ed20646.roa
File:                     36a58b02-00a6-30dd-8d4f-2db78ed20646.roa (raw, json)
Hash identifier:          hmGe7F8mOvW1Z93PhawvIQ0115CNEpFIHaxY0AXY+XM=
Subject key identifier:   62:77:61:A9:C5:B2:83:07:58:61:8B:D1:A8:F3:44:C4:30:77:0E:73
Certificate issuer:       /CN=9c2da67c-11a4-4c1b-b100-46b8c2dd97ae
Certificate serial:       010D0C9F4328584E2E8B0F253408E93A38B68E00
Authority key identifier: 6C:28:27:9E:B3:F4:1C:22:41:34:D4:47:8A:4A:6D:BF:AA:E6:64:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/36a58b02-00a6-30dd-8d4f-2db78ed20646.roa
Signing time:             Mon 15 Jun 2026 16:55:53 +0000
ROA not before:           Mon 15 Jun 2026 16:55:53 +0000
ROA not after:            Sun 30 Aug 2026 16:41:35 +0000
asID:                     402585
IP address blocks:        2620:23:2000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2e:8b:0f:25:34:08:e9:3a:38:b6:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c2da67c-11a4-4c1b-b100-46b8c2dd97ae
        Validity
            Not Before: Jun 15 16:55:53 2026 GMT
            Not After : Aug 30 16:41:35 2026 GMT
        Subject: CN=ce3e9f7a-c613-45f1-bf19-965081ddc3d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f3:01:83:da:e4:a8:03:6f:03:a8:58:66:d5:
                    a4:d9:c7:ba:71:64:a7:37:f1:78:60:cc:4d:cc:f8:
                    74:a6:9c:7c:3d:33:e9:5e:8b:1b:6e:87:62:78:a2:
                    4b:ab:71:88:19:87:55:0f:a7:f7:96:97:03:7a:c9:
                    ca:77:a5:f5:ce:c2:55:e0:e1:22:b4:12:ce:f0:4c:
                    ac:6c:0e:3b:25:73:6a:87:0f:64:d7:5a:02:c7:35:
                    b5:a3:7f:6c:7c:72:ef:ad:1f:94:ba:ee:f8:59:ed:
                    f6:24:c1:b7:5a:ea:47:7f:22:13:dc:f9:82:0b:5e:
                    3f:79:e5:d3:09:94:b0:34:6c:ac:20:6d:ff:4e:51:
                    a0:a7:2a:cd:fc:45:94:7f:54:af:9c:a3:82:bf:bd:
                    15:a4:3a:99:d2:96:10:fe:51:4d:1a:f2:c4:44:35:
                    2e:59:e7:08:ef:cc:0d:8f:e0:7c:b3:07:51:66:4a:
                    b1:0a:90:80:8e:7d:97:0f:61:47:3d:e9:3f:cd:cf:
                    f5:de:a7:80:49:e2:07:39:66:76:45:92:8b:6e:6b:
                    13:d9:c9:e9:13:9f:65:b3:ee:c3:6a:4a:2a:c9:f4:
                    6d:5f:fb:4e:ee:8f:54:10:a2:6c:51:41:22:46:d6:
                    e2:8f:eb:81:19:80:19:b6:de:e2:57:01:12:d7:a1:
                    0f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:77:61:A9:C5:B2:83:07:58:61:8B:D1:A8:F3:44:C4:30:77:0E:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/36a58b02-00a6-30dd-8d4f-2db78ed20646.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.crl

            X509v3 Authority Key Identifier:
                keyid:6C:28:27:9E:B3:F4:1C:22:41:34:D4:47:8A:4A:6D:BF:AA:E6:64:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:23:2000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:7c:9d:04:f6:54:6d:e1:3c:92:b5:84:43:ba:9e:e2:af:05:
         6e:cc:19:52:16:5b:25:16:30:04:dd:f2:f2:e0:97:6f:00:ff:
         63:0f:02:e5:e5:8f:ac:d1:02:8c:8d:f2:70:79:95:9e:08:43:
         38:e0:97:c1:d1:f6:1c:d8:c6:4e:56:81:f1:9a:2d:08:95:d0:
         ea:e9:25:28:8d:cd:52:eb:7f:17:48:bc:80:cb:96:40:c1:12:
         4a:8a:dd:6d:bf:eb:78:03:df:c8:96:38:78:e6:7f:5e:35:da:
         26:46:a5:4c:c0:eb:40:d8:33:5e:cf:e3:da:44:c5:78:2e:7c:
         55:23:8d:09:dc:a1:b7:8a:aa:c6:f1:fc:12:f3:86:3f:fd:0b:
         b2:21:9a:d8:c1:6c:a5:b3:27:98:27:03:33:b8:94:14:19:40:
         64:79:de:67:d6:a8:86:22:ad:3b:6f:a4:dd:2f:5e:cd:8c:0f:
         39:84:0d:7f:4c:cb:e6:87:b9:3e:12:74:43:1c:2e:94:62:be:
         39:b1:01:6f:5e:10:13:08:bd:83:cd:6d:ac:a1:12:4d:ef:2f:
         22:a2:bd:f3:3f:16:b9:52:56:45:e9:ba:fe:80:69:9f:21:a6:
         51:bf:95:91:3e:5f:1b:50:e1:c6:20:a7:d8:4b:fb:c0:99:d3:
         9f:c0:a2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:33:10 2026 by rpki-client