Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81400ee3-8756-358b-978f-b23ebb90b63a.roa
File:                     81400ee3-8756-358b-978f-b23ebb90b63a.roa (raw, json)
Hash identifier:          qgwjKHqgsjQFE5ROiU314uOEpKpwL51OsNU/w2+acqM=
Subject key identifier:   31:12:9A:0C:A9:3A:11:50:65:C7:53:F6:C4:B9:68:C5:C6:BC:5B:54
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED8640884CC609D2BBDF88204
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81400ee3-8756-358b-978f-b23ebb90b63a.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33662
IP address blocks:        2601:2c3:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:64:08:84:cc:60:9d:2b:bd:f8:82:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=b3f6e7ef-029b-42fd-ad85-7b09c360bc96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:83:d6:5b:5a:e9:d7:45:ff:de:c2:f0:82:cf:
                    d4:c5:16:d8:e6:cc:43:13:e7:35:3a:75:55:ab:d6:
                    53:fc:ec:35:fe:99:47:cd:0e:fb:b9:ca:3b:f6:9d:
                    bc:09:9b:cf:9f:55:92:43:ca:e9:b8:17:b6:f8:eb:
                    2c:70:a8:70:fb:52:6a:6b:d0:58:16:ab:cd:1a:d1:
                    12:3f:b5:f8:d5:c8:d0:29:8a:e0:5a:22:23:5f:44:
                    bc:67:4d:9c:1b:33:af:e9:84:6b:ae:97:85:82:0a:
                    24:02:c6:c4:6a:6a:f8:70:61:9e:1c:cc:bc:e9:34:
                    f8:e1:c4:c9:24:94:4b:4a:18:26:77:c3:80:62:8f:
                    c3:7b:22:ce:9e:7d:d0:10:1c:ac:d6:cb:33:42:e1:
                    f3:0c:e6:45:dc:6e:48:c5:78:9a:a7:66:52:39:3e:
                    97:98:45:40:b6:16:46:10:6a:eb:fb:5e:d1:ee:b4:
                    84:33:98:11:d0:1a:db:e9:54:f1:f3:90:a9:7d:73:
                    ed:01:e4:80:81:e3:ac:ba:35:0a:c2:9e:ce:ae:38:
                    cd:9f:8b:bb:39:d1:58:db:7c:6a:ee:0f:2d:80:e8:
                    05:36:e5:18:81:15:47:0c:c9:8a:a0:d5:cd:7f:e1:
                    be:45:96:33:7c:3a:a7:e0:1b:b4:f7:27:04:56:3d:
                    c8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:12:9A:0C:A9:3A:11:50:65:C7:53:F6:C4:B9:68:C5:C6:BC:5B:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81400ee3-8756-358b-978f-b23ebb90b63a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:2c3:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:0f:60:33:af:a8:d6:b7:9d:99:fb:7a:60:0c:e2:93:2f:45:
         d9:f4:7d:fd:91:9b:10:4a:d4:32:94:b7:db:c9:80:49:fc:88:
         7f:80:82:89:d5:b3:65:a9:97:8b:58:43:56:ac:53:e8:51:00:
         45:72:de:f6:d3:c7:bb:bd:fc:be:ae:a5:65:f3:80:c1:f6:be:
         cd:97:d1:c9:e3:ff:52:78:d5:ca:b5:65:83:7e:11:ba:28:8c:
         fe:4c:ba:46:b2:c2:49:bb:10:ab:ee:44:92:47:0f:85:57:e5:
         8b:3d:08:92:a3:78:45:ca:36:66:83:fc:02:94:34:b2:31:fc:
         a3:8c:73:48:22:29:04:05:23:f5:e7:87:2a:fe:83:19:98:e4:
         ae:e3:20:76:c1:e1:83:ce:1e:4c:00:e7:4c:a3:b8:7f:5a:c1:
         8f:29:62:cb:54:e1:89:5a:c5:db:e5:a4:de:2d:0c:64:db:46:
         94:c8:01:c7:f0:65:28:3f:0e:f3:c3:97:fd:9d:80:eb:a6:d7:
         0d:19:2b:7c:5f:46:39:73:8c:cd:8f:05:00:02:ad:80:af:58:
         5c:3c:d4:07:4c:ca:ee:07:2a:a7:90:63:48:ee:ce:79:f5:46:
         84:1b:df:58:5c:1f:f6:ba:48:7f:b4:89:1f:3e:0c:83:5a:5c:
         e6:5d:4a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:59:36 2026 by rpki-client