Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/98edf705-d568-3a9d-8a83-619621b2b369.roa
File:                     98edf705-d568-3a9d-8a83-619621b2b369.roa (raw, json)
Hash identifier:          7tdzYG1i8wqmcv8kkZg3ki4N9mYrMzkhuXsXHPH+KKE=
Subject key identifier:   50:0E:1A:D7:DB:27:7A:C0:98:48:54:63:29:31:AA:CC:13:67:E9:A1
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584F024225CE5D60AE6C2E3C3AC0
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/98edf705-d568-3a9d-8a83-619621b2b369.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     3423
IP address blocks:        2620:bf::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:25:ce:5d:60:ae:6c:2e:3c:3a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=91661dfc-abab-40c2-ac79-cb372e502b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:90:ca:ee:9f:45:0d:14:dc:fb:4c:aa:06:d3:
                    d4:21:79:d8:b1:33:ae:96:86:ed:87:dd:85:c4:c7:
                    d0:86:97:d3:d9:58:36:26:40:29:e3:92:46:83:56:
                    dc:3d:89:c1:44:62:f5:6b:d4:ae:74:36:c0:b4:7c:
                    2a:c7:28:8c:6d:7e:5e:b2:7e:ef:99:7a:7b:03:fd:
                    03:35:ed:21:6d:6c:4c:3b:a8:02:70:bf:ad:30:ec:
                    7e:03:3d:64:b5:fb:dc:e9:bb:67:06:f9:f9:f3:6a:
                    07:c4:43:65:24:e8:64:07:45:bf:0c:af:f0:35:f5:
                    8a:f1:2b:b5:08:2d:ff:60:d1:9c:8d:e2:d1:fe:d1:
                    1d:0d:a3:5a:ef:bc:e6:df:f2:36:6c:89:14:fc:9e:
                    84:45:10:aa:f6:d6:34:e4:dd:68:5d:b5:28:53:88:
                    69:33:2a:dd:44:6a:9f:75:e8:e1:77:82:ef:f4:af:
                    c6:d4:f5:7b:ae:5c:2c:2d:ac:71:a4:7d:cd:97:63:
                    b4:c0:aa:1a:46:84:4f:5f:9a:fd:bc:78:09:57:af:
                    80:fd:4d:7f:f3:87:16:65:f8:6b:00:67:b9:12:e9:
                    7b:71:06:ee:e6:d7:c3:b7:f5:8d:5d:a2:e8:e6:b7:
                    7f:a9:d5:c8:47:ee:35:12:9d:77:e7:90:94:c2:52:
                    14:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0E:1A:D7:DB:27:7A:C0:98:48:54:63:29:31:AA:CC:13:67:E9:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/98edf705-d568-3a9d-8a83-619621b2b369.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:bf::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:42:f5:28:c2:9f:3d:8c:5e:4a:0e:eb:a2:df:4d:a8:a5:74:
         98:22:00:f0:d2:b8:4f:71:6b:6b:6b:1e:92:15:b9:7f:8e:c0:
         1d:7b:d6:97:1b:a8:57:9d:fe:da:47:e7:3f:bc:ce:51:cf:c3:
         76:e1:79:5b:30:f2:c6:45:87:f0:01:3c:c5:ac:ff:81:09:38:
         94:5d:30:2b:84:3d:c8:24:52:67:d8:c5:d6:08:42:26:cc:3d:
         bc:87:4b:cc:e6:d0:26:96:27:6c:36:9a:01:2e:9a:d9:1e:91:
         1f:b5:b6:32:9e:92:9a:96:d0:eb:a3:27:b1:8d:12:9c:ce:d3:
         6f:bc:cd:85:c0:6d:0a:fe:c7:9e:81:66:54:da:20:72:36:08:
         3a:fd:dc:b3:9a:96:fd:2d:42:0e:f0:43:ec:37:47:5c:92:27:
         e0:50:f7:f5:3f:c6:29:d3:29:9d:6e:95:c5:a9:e8:28:e4:fa:
         86:b9:3e:18:95:7c:87:d5:bd:ba:aa:29:c0:e5:0e:16:4d:f2:
         88:15:78:02:b1:b2:c0:30:6a:b4:fa:9b:71:66:92:da:53:9d:
         96:40:e3:19:90:51:c1:28:4f:66:14:bd:7c:2c:90:a9:7d:28:
         3b:44:12:32:0c:45:94:77:1d:51:e5:43:1c:73:9d:6a:87:ee:
         b1:df:38:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 13:28:04 2026 by rpki-client