Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2851502-ec1f-392a-80d4-f10b991ad233.roa
File:                     a2851502-ec1f-392a-80d4-f10b991ad233.roa (raw, json)
Hash identifier:          ebpN5oU1jdP6H+nQ0zI5YRfgS74TFzJEwveNmZXMpPY=
Subject key identifier:   3E:E0:15:81:AF:7E:FC:C4:26:45:AC:03:C6:55:9B:71:B6:0E:B9:62
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584EC0A74D7650C243A0E7098500
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2851502-ec1f-392a-80d4-f10b991ad233.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     33363
IP address blocks:        2603:9001::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:4d:76:50:c2:43:a0:e7:09:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=cbdfabc9-a2d2-4632-9698-f3b15b0c3660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:df:58:d9:b4:98:19:0d:e4:73:6d:7d:9c:30:
                    35:98:21:91:1d:f9:42:07:6e:61:d6:8a:39:5f:00:
                    1a:66:20:62:4c:6a:4d:1b:4d:4d:ff:76:5e:ac:e5:
                    e4:99:57:41:0f:5b:d5:75:d2:46:4a:60:08:a1:19:
                    c5:d9:fb:66:50:68:59:13:db:76:51:0e:ec:37:95:
                    8a:28:20:cd:60:9c:02:d4:a5:9e:d3:ec:33:43:63:
                    e1:63:8c:41:17:d4:44:b9:ad:a6:6d:72:e9:22:b5:
                    b2:6d:d7:ac:87:29:d8:60:75:10:54:1d:8e:a8:49:
                    0e:4d:0e:60:6c:70:16:20:b4:4c:45:8e:fc:3a:bf:
                    da:68:71:0d:18:e3:a0:12:53:e0:a7:a8:f0:75:c5:
                    44:32:77:8e:10:37:ad:c6:c8:29:ff:0e:38:40:8c:
                    e1:d6:b4:ec:4f:58:e8:ac:4b:72:8f:16:bd:a9:a9:
                    3b:7c:f1:9d:dd:61:bd:d5:82:60:fc:db:c7:75:02:
                    74:59:2b:c7:14:7e:a8:a2:4a:fd:4e:1c:8c:4f:82:
                    d2:c4:c7:43:74:58:2c:3b:e8:3d:9d:c5:0e:84:b8:
                    67:fc:5e:b9:20:c0:25:bb:74:a0:48:a9:5f:74:a2:
                    c1:a7:8f:c0:f0:17:0d:bb:08:d5:ce:dd:2d:36:c5:
                    35:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E0:15:81:AF:7E:FC:C4:26:45:AC:03:C6:55:9B:71:B6:0E:B9:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2851502-ec1f-392a-80d4-f10b991ad233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9001::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:f0:ed:22:9e:87:5c:6d:4c:35:e5:ab:73:61:3b:46:22:09:
         1f:01:ed:62:31:33:c6:5e:3f:42:02:75:00:0d:15:70:40:7d:
         76:85:3f:4c:e6:09:c8:f8:0e:71:98:a1:22:b9:62:b7:fc:bf:
         c3:57:12:e7:a7:b0:18:ee:52:35:73:25:c0:3d:f1:ab:ac:23:
         67:72:10:f8:6b:1a:7c:53:ab:7f:a6:b6:6d:d9:57:df:9a:a4:
         aa:a8:36:ce:51:97:7e:3e:23:9b:0a:c8:de:92:4d:ca:fa:56:
         78:3f:dd:f0:2a:d9:a5:7f:ed:55:b9:2d:12:04:12:f2:9f:ba:
         bd:7f:c0:d1:ce:c6:55:f8:19:17:a0:75:e1:c1:72:6b:c9:c1:
         2b:09:b1:6f:3d:34:89:61:89:09:2b:a8:d7:3f:aa:dc:f0:d2:
         15:c5:85:6f:f7:65:8f:90:32:5b:6b:9e:03:55:be:c9:24:e6:
         e0:e8:33:94:74:d8:b0:a3:60:bb:c7:11:e4:44:3a:e1:ec:eb:
         0f:e8:80:d4:fe:72:62:f7:ac:18:f4:c3:2e:8c:86:dd:f2:99:
         9d:c4:97:14:f0:32:b6:f7:a9:dc:ae:9b:72:7c:02:ef:15:9e:
         08:8c:31:8f:d3:72:c4:c1:db:f3:63:db:5b:08:58:7e:a8:4a:
         45:aa:be:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:32:08 2026 by rpki-client