Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/3e6da91c-60c5-3147-bb1e-5122a2ab04c6.roa
File:                     3e6da91c-60c5-3147-bb1e-5122a2ab04c6.roa (raw, json)
Hash identifier:          /EFQmVkNi2iswtxS7SJC3LOTsDJpB+LcNjVKhkZtQD4=
Subject key identifier:   BD:8E:13:7F:90:AC:43:C4:D4:AC:17:E3:09:8D:A1:80:C5:FA:FB:BB
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584EFF777F18AA9331845E9AC200
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/3e6da91c-60c5-3147-bb1e-5122a2ab04c6.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     3423
IP address blocks:        2602:fbdc:14::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:7f:18:aa:93:31:84:5e:9a:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=a7676c95-a8f2-4286-98c9-6193eebce0bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e7:e2:93:9d:78:93:fd:3d:04:80:1e:52:39:
                    ff:d4:d6:d8:04:c4:ca:ae:7a:ee:5f:d5:17:db:be:
                    19:89:ae:0b:96:37:2f:fe:91:73:d5:76:20:7a:84:
                    74:45:70:f7:47:57:39:98:3c:b4:6c:37:43:09:e9:
                    33:87:4b:24:9f:14:4b:67:7e:ac:80:5f:aa:c6:15:
                    7a:e6:25:12:c0:e1:0a:ce:45:6c:8e:d6:1c:3a:e5:
                    e4:ba:b3:f9:79:df:82:c3:7a:31:4d:56:30:5c:18:
                    e6:ce:28:28:1d:17:f8:dd:34:cf:54:20:88:99:06:
                    7b:5c:fa:14:96:04:03:c6:e8:9c:99:2e:26:21:e4:
                    cd:34:90:bc:93:d9:e2:ee:c0:ef:83:55:d9:60:e1:
                    ed:c7:7e:1a:f2:75:39:e1:21:9f:cf:69:28:76:ef:
                    45:35:45:36:2b:9c:b4:8e:1f:21:53:71:10:2d:d3:
                    1a:6a:93:20:4b:0f:72:60:e7:de:92:a2:e1:af:83:
                    d4:06:b0:e6:f4:8f:98:70:af:e8:8b:d3:fc:9a:02:
                    25:5e:b0:e6:a7:f7:4e:2b:d8:f9:85:62:43:a0:fe:
                    7c:08:61:91:c7:94:c1:ca:86:b6:cd:ed:c3:f9:22:
                    12:0b:e6:40:31:c1:52:98:a8:ec:76:f1:9e:a5:3e:
                    b2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8E:13:7F:90:AC:43:C4:D4:AC:17:E3:09:8D:A1:80:C5:FA:FB:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/3e6da91c-60c5-3147-bb1e-5122a2ab04c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:14::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:c6:d4:50:86:3d:6e:6d:97:7e:11:e9:e7:70:74:08:dc:c0:
         9b:8e:98:7f:88:2f:94:de:20:a2:98:d7:82:5e:3e:5b:72:e4:
         76:4d:f7:4c:20:ff:43:56:ba:c5:d8:38:08:1d:95:33:cc:69:
         e1:0e:93:43:82:d6:25:b6:63:e9:e9:0d:d6:53:50:15:77:89:
         c5:30:c6:3f:2d:8b:62:cf:bb:c7:f8:4f:db:e8:73:ed:7e:85:
         ec:30:51:07:0d:57:6b:70:62:a7:c6:c8:d4:ad:39:2e:04:87:
         ac:29:d2:51:c4:f9:11:79:82:e4:f5:6d:82:57:f5:2c:1d:11:
         36:35:23:a1:a4:00:62:e3:92:8c:6a:9c:51:5d:da:b3:7a:a7:
         80:f8:d9:f5:02:6b:da:ea:1a:8f:ad:1f:f2:27:eb:cc:02:65:
         27:19:ac:f0:78:52:69:d5:72:cf:96:08:82:33:eb:23:0f:c2:
         02:88:b4:d6:d8:b4:57:3a:31:c3:b1:36:97:12:39:38:d3:51:
         db:62:87:cf:12:1f:94:8a:a4:a1:49:23:7d:7f:fb:57:f4:4f:
         6b:8f:63:65:13:94:fd:0d:5c:2b:1f:ad:a2:41:a3:a5:b8:a3:
         97:46:86:8e:43:6b:2e:1a:80:e9:30:08:04:c8:54:10:4e:b9:
         3e:6d:3b:23
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7/d38YqpMxhF6awgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh
ZGQwMB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk
YTc2NzZjOTUtYThmMi00Mjg2LTk4YzktNjE5M2VlYmNlMGJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOfik514k/09BIAeUjn/1NbYBMTKrnruX9UX
274Zia4Lljcv/pFz1XYgeoR0RXD3R1c5mDy0bDdDCekzh0sknxRLZ36sgF+qxhV6
5iUSwOEKzkVsjtYcOuXkurP5ed+Cw3oxTVYwXBjmzigoHRf43TTPVCCImQZ7XPoU
lgQDxuicmS4mIeTNNJC8k9ni7sDvg1XZYOHtx34a8nU54SGfz2kodu9FNUU2K5y0
jh8hU3EQLdMaapMgSw9yYOfekqLhr4PUBrDm9I+YcK/oi9P8mgIlXrDmp/dOK9j5
hWJDoP58CGGRx5TByoa2ze3D+SISC+ZAMcFSmKjsdvGepT6yuQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL2OE3+QrEPE1KwX4wmNoYDF+vu7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl
MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvM2U2ZGE5MWMtNjBjNS0z
MTQ3LWJiMWUtNTEyMmEyYWIwNGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4
NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2
YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh
ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL73AAU
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABHG1FCGPW5tl34R6edwdAjcwJuOmH+IL5TeIKKY14JePlty5HZN
90wg/0NWusXYOAgdlTPMaeEOk0OC1iW2Y+npDdZTUBV3icUwxj8ti2LPu8f4T9vo
c+1+hewwUQcNV2twYqfGyNStOS4Eh6wp0lHE+RF5guT1bYJX9SwdETY1I6GkAGLj
koxqnFFd2rN6p4D42fUCa9rqGo+tH/In68wCZScZrPB4UmnVcs+WCIIz6yMPwgKI
tNbYtFc6McOxNpcSOTjTUdtih88SH5SKpKFJI31/+1f0T2uPY2UTlP0NXCsfraJB
o6W4o5dGho5Day4agOkwCATIVBBOuT5tOyM=
-----END CERTIFICATE-----
Generated at Fri Sep 11 02:33:58 2026 by rpki-client