Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/0862132c-7844-394f-a4cb-cdbf5ed24a14.roa
File:                     0862132c-7844-394f-a4cb-cdbf5ed24a14.roa (raw, json)
Hash identifier:          068L66ZyRSrqS0lgOrSCAfI4HwYhfBTCCb9grJojpk8=
Subject key identifier:   EB:0F:78:D1:47:94:BE:F0:12:51:81:22:3E:C2:0E:2C:73:A6:5E:8F
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584FA1632DD3AA7FC32ADAC0F980
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/0862132c-7844-394f-a4cb-cdbf5ed24a14.roa
Signing time:             Mon 26 Oct 2026 13:00:14 +0000
ROA not before:           Mon 26 Oct 2026 13:00:14 +0000
ROA not after:            Sun 24 Jan 2027 14:00:14 +0000
asID:                     3423
IP address blocks:        2602:fbdc:8c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a1:63:2d:d3:aa:7f:c3:2a:da:c0:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Oct 26 13:00:14 2026 GMT
            Not After : Jan 24 14:00:14 2027 GMT
        Subject: CN=0edd32de-1149-4654-964b-de3cc8b2c65d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:45:a4:51:68:ef:66:33:0a:29:b9:3c:5e:9a:
                    63:d7:71:07:e9:d5:d1:fb:ef:2c:a5:77:27:8d:7b:
                    8a:7c:f3:5e:3e:1d:bf:fd:2b:5b:cc:0e:0f:4d:da:
                    b3:2c:ef:f1:c4:83:de:ab:cf:94:11:d6:87:6f:b2:
                    84:89:ec:ce:02:d4:81:fd:91:43:9e:b9:0f:e2:0f:
                    52:75:5f:05:0b:4b:64:00:10:a4:e9:1e:0d:40:99:
                    6f:ba:f8:b3:5a:1b:37:9e:51:6e:39:9f:80:90:43:
                    15:5b:09:f4:b5:08:c3:31:82:c6:35:88:d9:c1:a4:
                    ff:d2:b8:9e:da:83:28:f1:15:a5:5d:c4:8b:9d:23:
                    1a:48:1d:0a:c3:57:bf:28:5c:af:82:01:d3:e5:f1:
                    d5:0a:17:c9:9a:b5:3e:93:95:f6:84:9d:cf:d3:d5:
                    29:9c:e1:e2:b2:23:31:4c:5b:71:a0:95:a5:36:63:
                    5e:ab:9e:ad:f8:42:c2:a5:e9:9a:8b:ff:22:01:9d:
                    c2:26:83:6c:a5:06:14:f7:6c:bb:97:e9:c5:e7:8a:
                    8f:c0:02:30:79:55:9b:62:81:90:28:a3:fe:70:d3:
                    b4:96:aa:e0:a4:78:fc:6f:26:19:24:3f:ce:e1:52:
                    74:cd:dd:0b:cc:0b:0f:98:21:04:9e:14:1b:d2:fa:
                    bd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0F:78:D1:47:94:BE:F0:12:51:81:22:3E:C2:0E:2C:73:A6:5E:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/0862132c-7844-394f-a4cb-cdbf5ed24a14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:8c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:97:a3:5f:68:9c:6e:64:1b:c4:35:79:31:b0:fc:57:0c:e1:
         a0:c5:19:82:b4:76:bf:ac:a4:71:ea:9a:01:93:4a:a4:6a:18:
         84:60:7c:43:af:c3:0f:20:4f:55:f5:c9:42:a5:75:78:be:d7:
         14:03:93:4d:e4:e9:9a:e4:6c:90:df:73:3a:a1:24:e5:18:bc:
         13:d6:23:82:c0:64:b0:3e:a7:d8:8e:4e:75:a8:53:bc:b5:d3:
         b0:60:09:7a:94:6d:19:c6:8e:8b:8a:18:0f:ca:99:0b:71:5a:
         7d:69:4a:27:b1:e3:68:bb:23:2e:4d:2c:6f:27:36:f5:3f:4c:
         c9:f7:d9:ee:c6:2e:88:6f:cb:ac:40:5f:9e:97:1e:74:73:10:
         2e:c9:54:5d:ce:2e:ec:23:a4:9e:17:cf:48:72:5e:50:59:04:
         de:90:9b:d0:58:f3:14:5b:c7:c9:08:fb:02:57:56:8f:ed:4f:
         6f:93:97:7e:b7:88:4f:69:d2:aa:15:35:01:76:bf:ef:61:66:
         b9:86:3c:02:ca:fb:d8:a2:e8:26:51:2b:60:54:f8:6d:3f:62:
         05:bd:17:fa:66:01:af:84:4e:0f:0d:6e:1f:e2:14:35:39:fd:
         31:07:66:46:48:ad:c4:3b:c4:31:ff:e1:f9:6c:e5:8f:e4:d9:
         d2:fb:28:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 07:14:47 2026 by rpki-client