Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/a0679dfd-78ee-3728-b6d4-7b3d95d28292.roa
File:                     a0679dfd-78ee-3728-b6d4-7b3d95d28292.roa (raw, json)
Hash identifier:          hRE2j0IOhMuYfL60SorP+7fh0/AaZP0ljWS3Yrokm60=
Subject key identifier:   9E:0D:95:99:57:3A:6F:67:92:25:A0:D5:35:3A:D8:AE:6D:0E:F6:D2
Certificate issuer:       /CN=8c36a2b8-42c3-42fa-835e-49b2612cc29a
Certificate serial:       010D0C9F4328584EA79A5CC6590E98BC84450680
Authority key identifier: 8A:4B:04:14:87:83:45:20:69:D3:E3:19:20:AF:ED:0B:62:19:3B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/a0679dfd-78ee-3728-b6d4-7b3d95d28292.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     948
IP address blocks:        2602:2cc::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:5c:c6:59:0e:98:bc:84:45:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c36a2b8-42c3-42fa-835e-49b2612cc29a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ae974f55-6d6d-4d86-a929-16558c34b451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ea:00:de:c5:1c:0e:7d:b8:53:41:f6:40:87:
                    1f:7a:34:0d:5c:3f:6f:a3:b9:6b:da:fc:0f:5f:9b:
                    b7:f3:bf:f9:44:26:c6:4b:08:24:e4:71:15:11:4c:
                    db:68:0d:02:2a:71:50:d8:32:07:8a:74:e4:7a:c8:
                    e2:c4:6c:6d:ca:60:e6:c0:5d:4e:68:d8:ed:26:49:
                    0a:6d:c8:0a:f5:1a:e4:d6:4a:d8:e4:61:01:70:ed:
                    23:ae:a8:78:d1:4e:a0:93:f1:a4:69:14:43:57:e7:
                    a8:a9:17:23:85:e0:79:33:ae:19:01:88:6b:8d:b2:
                    3e:e4:d4:06:cb:f3:63:47:76:5a:ae:2f:52:d2:d4:
                    05:44:4c:bc:a7:05:a2:61:64:ef:8a:1a:b4:9e:63:
                    fa:4a:00:86:bf:13:f1:ad:ff:7b:39:82:69:3d:29:
                    19:73:74:a3:82:54:39:76:9a:4e:46:7c:07:ff:2a:
                    98:57:ed:b2:4c:df:e6:13:cd:f0:3f:bd:43:64:4a:
                    82:e8:a2:68:b8:e7:36:c3:20:e7:a0:44:07:8e:44:
                    31:c6:0e:64:87:ed:de:e2:ef:08:c1:77:af:4d:32:
                    c3:69:b9:01:5a:32:c2:b0:05:e1:53:36:db:cb:27:
                    87:2e:05:04:46:c4:b0:8d:38:76:83:a4:aa:20:68:
                    c1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0D:95:99:57:3A:6F:67:92:25:A0:D5:35:3A:D8:AE:6D:0E:F6:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/a0679dfd-78ee-3728-b6d4-7b3d95d28292.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.crl

            X509v3 Authority Key Identifier:
                keyid:8A:4B:04:14:87:83:45:20:69:D3:E3:19:20:AF:ED:0B:62:19:3B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2cc::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:f1:94:21:2e:3e:2a:fe:72:35:1d:4f:ed:c9:f3:8b:32:b5:
         ad:7d:ea:07:c3:45:21:ac:da:87:5e:e4:6c:f5:6a:7e:e1:ad:
         cb:9d:fa:64:4c:83:0a:b1:d6:40:fd:25:1d:43:c4:06:3a:2c:
         c6:24:6e:4e:ef:f0:3e:b3:eb:a6:4e:75:29:41:55:b9:07:a0:
         a2:04:c4:a8:6b:45:99:47:60:b4:2f:9b:fa:f7:f3:8b:7d:02:
         ce:59:7f:44:89:33:79:f8:74:4a:b3:cd:8a:fa:de:c5:7e:c4:
         f7:94:c2:b6:bb:6f:51:d0:2f:b3:9b:14:d2:8a:dc:72:b7:54:
         18:c5:35:4f:58:3e:b0:6e:63:bc:46:9c:cf:3d:f7:ce:fb:56:
         09:30:91:c1:ff:0f:bc:aa:2e:29:6f:5e:9d:85:f8:09:46:95:
         e6:d2:8c:f9:16:f1:62:f8:39:4b:20:bd:1d:cb:bc:be:4c:1c:
         a4:7e:10:90:54:d1:bd:75:3d:cb:a1:d9:19:50:7c:6a:78:24:
         9d:53:f2:5a:ad:34:ba:e6:3f:63:11:b1:1b:8e:2e:51:50:44:
         d1:bd:2f:ff:c4:a8:5d:fb:23:66:fd:57:37:90:c1:4c:33:5c:
         d2:ed:cf:21:c7:8c:c2:b1:0c:0f:cb:bf:b9:2b:22:58:a3:53:
         65:76:c7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 06:52:12 2026 by rpki-client