Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/35e61007-fc7e-3733-a105-5e5e8c2cb239.roa
File:                     35e61007-fc7e-3733-a105-5e5e8c2cb239.roa (raw, json)
Hash identifier:          L21oS/ttZKzjJKZvNcgrd4WeCglJVqnOfvfydnFrq2Y=
Subject key identifier:   3D:EC:4D:14:DE:28:F2:EE:24:32:AF:7E:04:A7:0D:53:14:4B:43:BC
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584CC612110016D1AF19C98C0480
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/35e61007-fc7e-3733-a105-5e5e8c2cb239.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     13778
IP address blocks:        2620:147::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:11:00:16:d1:af:19:c9:8c:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=59051090-1611-4e78-9126-9af29b035bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:86:11:4c:30:9b:92:ee:5b:6b:f5:26:53:3e:
                    f8:c2:5f:79:79:95:f1:7f:73:4d:d6:cc:b6:a7:4e:
                    1b:5d:90:d4:2c:90:68:d2:51:c0:14:61:07:12:86:
                    03:bd:fa:50:69:14:f8:32:cb:7c:3c:d1:61:95:51:
                    f4:3e:9c:00:8d:42:6e:32:8a:57:fb:91:e5:8a:96:
                    8d:07:a2:db:4e:10:f3:97:b2:d7:7e:15:c5:bf:3c:
                    06:03:a7:27:a8:89:cd:9c:a0:35:ce:2c:38:ed:b1:
                    0f:6a:d6:57:80:3e:a3:69:23:76:12:03:e8:9b:14:
                    d1:47:3f:20:14:29:ac:76:2e:c5:fd:3e:8d:c6:78:
                    c5:48:57:27:bd:76:25:d8:11:ee:b7:fa:26:f6:d7:
                    93:6c:78:b7:cc:65:fb:13:87:35:c8:9c:00:1b:f0:
                    da:22:98:40:23:20:5d:ae:c0:e4:ff:c0:35:76:a3:
                    21:77:15:50:59:53:3b:8c:4a:09:93:67:2f:f3:4d:
                    13:70:a8:3f:40:79:31:0e:ea:91:c2:67:c4:44:51:
                    d4:78:f5:06:f3:3d:09:57:c4:20:77:b9:ef:11:90:
                    11:9a:34:63:78:d0:80:c7:d0:a5:e2:10:79:26:10:
                    7b:52:a9:66:31:ef:f2:b3:db:de:13:c5:43:e5:2a:
                    ec:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EC:4D:14:DE:28:F2:EE:24:32:AF:7E:04:A7:0D:53:14:4B:43:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/35e61007-fc7e-3733-a105-5e5e8c2cb239.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:38:5e:b0:ad:24:50:08:02:ef:ce:0f:d6:b0:08:80:13:5c:
         e8:e3:57:6f:85:6d:b5:a8:3c:93:6f:b5:f9:1d:08:16:8a:41:
         b1:60:77:12:f6:6d:67:22:a6:5c:71:2c:0d:5b:a5:6a:72:d8:
         e0:db:b1:40:78:9f:9a:c2:0c:f6:d8:01:93:ee:8b:52:dd:73:
         64:f7:c5:30:92:b7:3f:72:c8:dd:96:c6:a6:e3:21:88:6a:ef:
         a3:cd:d0:30:f6:df:3f:02:a4:28:46:46:79:a1:8d:e7:21:65:
         bc:21:38:1e:a4:9e:4e:4b:77:40:e7:a8:22:3a:57:a4:b5:11:
         7d:a3:45:88:94:33:6f:0a:66:db:70:9e:22:9b:30:9d:d8:de:
         d6:c2:08:fc:51:83:07:27:73:9e:6c:95:74:4e:58:a6:b4:29:
         7a:7f:19:15:00:56:80:d6:ee:ac:14:b1:63:61:50:44:c9:03:
         2f:fc:bb:da:10:1a:0f:97:a6:7a:2d:3b:14:40:75:ba:e6:c5:
         8d:eb:04:77:4a:d5:24:3e:84:28:16:b8:0a:b3:42:62:48:00:
         4d:21:77:36:63:de:fc:5c:57:70:fb:72:c3:3a:5f:03:25:cd:
         34:05:b9:d3:49:d8:29:47:95:59:fb:d0:b2:fc:ca:73:88:13:
         e8:d8:0d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:45:48 2026 by rpki-client