Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/f28b22d1-f21a-3c82-ac9f-0ae35247b044.roa
File:                     f28b22d1-f21a-3c82-ac9f-0ae35247b044.roa (raw, json)
Hash identifier:          Jon3ewkYCWieprRANRg0+b2tpCM9vR+Wiq7qZajOLIs=
Subject key identifier:   59:C4:0D:F0:30:32:F5:98:C5:D5:D2:8C:22:38:F5:ED:60:9B:51:5D
Certificate issuer:       /CN=35241669-57c3-4f1d-8e12-d32455951379
Certificate serial:       010D0C9F4328584EAD1C53859025318BA584E7A0
Authority key identifier: 8B:44:6B:AC:A8:C8:70:20:1E:9F:69:37:9E:9B:EE:31:2B:77:B9:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/f28b22d1-f21a-3c82-ac9f-0ae35247b044.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     62880
IP address blocks:        2602:f8bb::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/35241669-57c3-4f1d-8e12-d32455951379.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/35241669-57c3-4f1d-8e12-d32455951379.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:53:85:90:25:31:8b:a5:84:e7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35241669-57c3-4f1d-8e12-d32455951379
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=820b143b-e18f-4424-bdf2-7528a6647f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8c:a8:8a:65:2b:f1:6c:4f:75:f9:25:b5:ef:
                    4e:7e:c2:7f:b7:ea:19:bd:da:ea:9b:05:16:b4:16:
                    e3:da:1d:b7:11:0f:df:c9:44:dd:94:58:d0:67:d0:
                    81:2e:55:1e:b5:d8:49:be:11:8b:41:b2:47:cb:d4:
                    47:9c:2b:22:79:50:49:5d:e2:e2:50:69:06:8d:78:
                    46:30:60:dc:86:9a:6e:63:e8:fd:ed:97:38:f8:0b:
                    36:d0:8f:51:f6:36:36:f3:a6:fb:cb:04:53:9d:8f:
                    e4:60:a2:4d:30:1a:83:6f:43:54:aa:91:9d:18:00:
                    ae:b4:33:cd:fd:d6:59:61:b2:d9:cb:63:0f:81:29:
                    42:2e:41:d9:c9:f4:c4:e0:37:5f:08:9b:03:de:ca:
                    7f:ca:9d:2c:ac:68:d9:f0:5b:85:b2:66:18:28:45:
                    27:d7:c5:5c:18:19:f1:0d:8d:ef:a7:b3:0c:0d:77:
                    d1:1b:35:48:85:8c:12:ac:a9:68:4b:7d:11:82:e8:
                    a3:79:57:23:11:d4:b6:97:6a:76:68:52:21:2c:b5:
                    f5:25:85:40:27:41:0b:b3:27:67:b4:75:99:c4:d1:
                    71:81:02:ee:91:39:00:20:13:f0:b8:80:07:d7:dc:
                    d3:ea:69:a7:22:68:b5:72:9b:a2:9e:33:c4:a3:3d:
                    55:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C4:0D:F0:30:32:F5:98:C5:D5:D2:8C:22:38:F5:ED:60:9B:51:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/f28b22d1-f21a-3c82-ac9f-0ae35247b044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/35241669-57c3-4f1d-8e12-d32455951379.crl

            X509v3 Authority Key Identifier:
                keyid:8B:44:6B:AC:A8:C8:70:20:1E:9F:69:37:9E:9B:EE:31:2B:77:B9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8bb::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:d6:4d:01:f8:79:45:c5:ec:f0:c7:8f:8a:19:36:3d:d8:8b:
         1e:ad:bd:ac:58:54:ce:10:f7:09:77:ca:a6:bb:d1:b6:b1:48:
         69:01:b3:b7:5a:c3:39:13:d5:6f:16:2b:4e:69:b5:29:62:17:
         ce:b6:e8:6a:89:28:80:0b:6b:e4:26:60:a3:8e:ef:70:b4:93:
         e7:60:37:48:ba:54:1f:25:21:f8:7e:78:f2:fc:ab:88:62:af:
         e2:36:9e:5e:3a:1c:40:b2:5e:cf:1b:de:54:43:e7:5c:32:bf:
         c2:80:92:12:2f:cc:b8:c4:d0:10:f6:e4:15:e3:13:4e:56:52:
         a5:45:62:df:8e:41:2d:2e:4a:f6:15:e0:7d:0b:a3:ea:07:24:
         cd:b0:8d:e2:21:bc:d5:90:1c:01:a1:0f:cc:09:e4:b4:08:19:
         79:af:c9:e5:38:c5:8c:a0:83:54:31:36:32:95:9c:c5:24:df:
         83:b4:fb:02:8e:1f:26:85:e1:81:9f:43:51:29:f8:fc:de:f8:
         f3:d1:1b:04:9e:20:70:9d:d4:0f:cb:7e:b0:5a:4d:6d:d5:7a:
         c0:7a:01:cc:45:dd:b2:f7:d3:94:1a:0a:f0:59:3d:b0:6d:ef:
         86:25:7f:25:0f:e4:36:9e:02:8d:39:ed:d4:d8:a9:2a:2b:a4:
         eb:90:d0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:25:15 2026 by rpki-client