Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/6bdfd389-73c2-31ab-8e79-f06e5f0b7c44.roa
File:                     6bdfd389-73c2-31ab-8e79-f06e5f0b7c44.roa (raw, json)
Hash identifier:          vWpTTab+c3G6OUjzkLj2bBZ4A0MLZGAaI3e+rZ4SZuM=
Subject key identifier:   D3:15:8E:C4:41:C2:9C:AF:FB:B9:31:F4:EC:68:60:1B:C0:7A:E3:D3
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584EFF777F240BCFB5EF690EE800
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/6bdfd389-73c2-31ab-8e79-f06e5f0b7c44.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     3423
IP address blocks:        2602:fbdc:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:7f:24:0b:cf:b5:ef:69:0e:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=2e531c44-1adf-4c7e-b6cd-901b3f84f88f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:12:e1:1c:45:cd:84:b9:3b:fe:b9:26:88:91:
                    8c:93:6d:07:32:62:c5:ed:f6:23:3f:fd:d0:f3:95:
                    f8:fa:f1:c3:77:a6:20:7a:0d:58:8b:68:54:36:4b:
                    e3:ee:14:63:be:d9:5e:1c:4e:13:99:e8:d7:b3:0e:
                    ac:90:95:0f:04:26:5a:32:c1:05:89:2d:e9:a4:dd:
                    90:7b:d2:a7:e8:91:2b:94:24:39:9b:bb:b9:89:76:
                    17:9e:63:d3:cc:01:13:db:d1:21:a9:88:6c:ec:97:
                    f6:38:fb:8c:20:df:f8:34:e1:0e:38:22:b7:12:5f:
                    d3:2d:ab:59:5b:66:97:e3:e4:1e:16:60:6f:ec:57:
                    03:c6:c4:4b:0b:49:9e:c2:d8:c7:ff:b3:e5:91:bb:
                    82:57:3a:7b:01:1c:6d:a2:d2:73:96:6a:3c:6f:b6:
                    b0:dd:b1:5e:e5:5c:cb:ae:8b:ea:f3:ca:cf:a8:90:
                    a5:ad:36:71:71:a2:11:dc:b2:e5:00:bf:ae:46:6a:
                    2f:da:b4:21:13:00:40:ab:b5:ad:5d:f9:01:cb:6a:
                    f6:dd:d9:1e:4f:c4:77:12:13:e9:ce:0a:3e:aa:6f:
                    81:8e:f7:d8:23:29:eb:04:da:74:9e:5b:1e:e1:e9:
                    43:a6:2b:c1:5c:92:99:ac:fb:a7:b2:b7:98:84:30:
                    12:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:15:8E:C4:41:C2:9C:AF:FB:B9:31:F4:EC:68:60:1B:C0:7A:E3:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/6bdfd389-73c2-31ab-8e79-f06e5f0b7c44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e3:82:ed:7d:8c:8c:b4:be:1f:37:9f:ab:32:f5:d3:7e:d6:60:
         f3:7e:9b:f9:9d:90:0c:9d:d0:7e:24:b9:73:00:60:bd:92:f2:
         59:71:11:16:f2:a0:66:b6:01:a0:e5:63:d6:1d:88:de:3b:84:
         35:a1:86:de:fc:34:d4:ea:07:66:cb:8c:63:d4:67:f9:af:fe:
         3e:28:ba:de:ef:31:0d:8b:2a:25:49:e4:6a:ee:e3:3c:2f:5a:
         08:6d:a4:9d:7d:b1:a2:fb:23:1a:04:2b:95:4e:50:21:ce:e8:
         33:69:ed:c0:23:fa:a8:b4:42:55:fd:f6:d6:96:d1:9b:ac:0c:
         77:05:a0:63:29:42:cc:7f:3b:92:3f:d7:82:8c:de:86:94:44:
         ac:0b:05:92:8f:33:8c:22:45:ca:bf:6e:b4:a8:94:b4:8c:75:
         f4:56:a6:f1:94:62:03:e8:0e:8d:c5:4b:b9:51:c5:02:90:a7:
         00:6e:ba:57:94:10:58:f1:93:e5:07:23:7b:06:04:0b:c3:2d:
         4d:15:72:d9:5f:42:35:3c:f8:8a:b7:1e:7d:ba:30:40:e5:ed:
         63:01:0d:22:86:13:61:53:3d:31:a1:1a:3b:54:c5:f4:87:c7:
         62:35:17:79:d6:22:16:76:21:ba:dc:d1:6a:40:f1:e4:a9:8e:
         c5:8d:eb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 13:26:50 2026 by rpki-client