Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/60cb61fc-8048-3d70-a4c8-ddf43df58222.roa
File:                     60cb61fc-8048-3d70-a4c8-ddf43df58222.roa (raw, json)
Hash identifier:          CVOIamoMSqsz9K30kpRao6cRLiFZk+aNU52ylv99Icg=
Subject key identifier:   BB:1C:4D:3E:90:EC:C7:3F:AB:6B:3E:F1:ED:C4:CE:A9:68:3E:36:04
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584EFF777A0F923C36AAA243F100
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/60cb61fc-8048-3d70-a4c8-ddf43df58222.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     3423
IP address blocks:        2602:fbdc:88::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:7a:0f:92:3c:36:aa:a2:43:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=eeaea2fa-a28a-4aad-8d3e-1a9c36e08aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bc:a6:b3:98:af:bc:67:0b:8f:49:9e:cc:21:
                    96:d9:72:c8:5f:16:ce:96:89:89:40:b5:f0:06:b8:
                    83:0f:51:a0:32:5f:bc:d6:52:cd:b4:1e:c8:45:5f:
                    c5:b5:00:9b:95:80:e3:b9:16:ee:dc:96:3d:47:95:
                    b8:19:63:a1:b5:23:72:09:ae:26:04:78:38:e3:72:
                    ba:38:d9:d6:7a:66:04:28:07:19:d5:fc:d0:89:03:
                    91:7c:93:24:df:6b:1a:27:67:85:ff:45:1f:2a:2d:
                    28:be:3a:5b:4c:4f:02:09:6b:4a:6c:db:6b:b7:59:
                    f2:e9:ff:4e:d8:09:a3:9f:18:2a:3f:98:c9:4b:c4:
                    27:a9:92:ce:78:88:5e:95:52:89:ca:df:bf:05:28:
                    62:4c:9e:aa:7b:64:67:bf:fa:6b:6f:e3:50:8c:cd:
                    ba:64:87:3a:e7:ef:cf:80:9d:8e:9e:27:b5:44:55:
                    6a:ec:0f:58:f8:b6:9d:e7:29:cc:09:4e:0f:c2:7b:
                    2a:ab:e3:e4:be:9d:38:a6:65:cd:b3:30:4b:f7:28:
                    be:c0:69:ff:c5:1b:0e:ff:8c:dd:9f:89:71:1e:5c:
                    69:67:d8:a7:55:67:0a:c2:fc:72:3e:0d:46:5d:c9:
                    31:d2:44:eb:4b:58:ef:ad:81:2d:c2:1c:72:6d:67:
                    03:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1C:4D:3E:90:EC:C7:3F:AB:6B:3E:F1:ED:C4:CE:A9:68:3E:36:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/60cb61fc-8048-3d70-a4c8-ddf43df58222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:88::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:c0:2d:45:0d:9d:da:de:6a:f6:e7:44:ca:71:b2:da:6c:73:
         94:d0:ab:57:44:85:28:a9:83:3f:c6:fe:9a:7c:1c:5c:5d:ba:
         4c:7e:94:59:39:66:8a:f4:81:95:0f:0f:5c:df:78:db:5a:b1:
         32:3d:96:87:5b:ac:6c:71:8e:af:bc:b5:cd:11:0f:88:a2:77:
         07:0e:a1:ca:13:1e:f5:5d:49:48:52:cb:23:53:5f:be:a7:0a:
         a5:bd:47:f8:7e:47:b6:9f:6f:66:05:b8:0e:bc:67:eb:34:f7:
         3c:2d:ce:11:b7:a2:4d:27:ba:03:d3:d9:e8:59:0e:93:c1:41:
         d3:43:ad:df:50:a6:0a:3f:d3:53:cd:4d:f0:b3:f1:0d:98:13:
         6a:46:68:aa:35:1f:8e:e8:fb:8b:73:23:05:2e:d9:80:44:45:
         a5:09:d9:8b:6a:58:8e:ed:ee:5b:11:08:36:1c:71:66:e8:07:
         8e:24:e8:3b:f2:5f:66:18:1f:01:8c:12:1e:ba:69:e7:83:49:
         33:a1:d8:c2:12:39:96:24:3f:f9:c0:4e:69:b0:ae:83:cb:b6:
         d3:72:13:77:9d:19:ba:f8:db:e7:e3:97:d0:f5:43:39:74:52:
         f8:31:06:15:ec:17:91:8f:38:73:ee:c8:30:44:4c:55:09:62:
         9e:69:15:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 12:36:04 2026 by rpki-client