Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/77a7ad12-30f2-3190-b9dc-dd3c8c0a95ff.roa
File:                     77a7ad12-30f2-3190-b9dc-dd3c8c0a95ff.roa (raw, json)
Hash identifier:          TOes98t80PrytEvs/k+3709mQx4pwbXTvn8KHeJW3r0=
Subject key identifier:   21:47:2E:7D:D1:75:13:D2:7D:18:B7:DD:38:9D:F0:62:C9:B7:36:A2
Certificate issuer:       /CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd
Certificate serial:       010D0C9F4328584F23C25C7C003237A24D423C00
Authority key identifier: 67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/77a7ad12-30f2-3190-b9dc-dd3c8c0a95ff.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     140666
IP address blocks:        2602:fa80:29::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:5c:7c:00:32:37:a2:4d:42:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=7815548a-04b0-4ebb-8f0b-c90db1734430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7d:77:f2:26:9a:c0:e2:87:b3:1c:92:14:21:
                    3a:d0:9b:d7:1a:60:20:d1:20:d0:c9:40:2f:5d:b9:
                    fd:3e:e3:8a:96:6a:10:68:29:bf:cd:5f:c2:8e:87:
                    db:88:a8:0e:4e:00:cd:cd:da:27:48:97:ad:6b:8e:
                    f8:5b:e4:ab:3f:4c:ce:73:e3:a7:9c:fd:a9:70:bc:
                    bb:14:b7:43:19:73:44:15:e6:a5:0b:2b:a0:fc:3e:
                    26:0c:f4:94:5d:43:20:6c:6c:f5:7c:55:0d:3e:3d:
                    c7:15:32:12:b9:30:35:6d:1d:32:c2:95:d1:3f:f5:
                    38:8d:c1:b7:c9:f3:8c:4a:4c:d0:f5:7d:f1:21:a7:
                    fc:f4:60:ae:5e:c6:82:34:28:19:db:54:43:b9:44:
                    2a:a0:f1:ee:c2:c3:af:5f:0a:b3:82:66:d8:0a:5f:
                    6f:87:d7:cc:9f:35:67:11:47:88:51:66:1c:b8:03:
                    9c:f7:cd:2f:73:d0:fb:f6:76:24:2e:d3:08:0f:b8:
                    36:62:52:59:d5:5b:3f:c2:b6:e1:99:ef:0d:1f:2e:
                    5e:5a:f4:75:b9:7f:7e:02:13:68:1d:60:e6:f7:f3:
                    58:27:0f:d3:69:68:55:cd:e6:a3:de:12:b7:1b:36:
                    73:55:4d:8e:7b:3b:ec:22:1d:f3:d7:83:ff:61:eb:
                    e3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:47:2E:7D:D1:75:13:D2:7D:18:B7:DD:38:9D:F0:62:C9:B7:36:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/77a7ad12-30f2-3190-b9dc-dd3c8c0a95ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl

            X509v3 Authority Key Identifier:
                keyid:67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa80:29::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:19:dd:f9:26:bf:c7:5c:f5:07:88:86:d8:ce:84:a7:6f:52:
         a0:02:14:33:61:37:54:d2:85:1b:8c:47:ad:8f:4e:32:ec:e0:
         28:11:26:2b:17:01:20:7b:3e:b8:29:d5:b8:a5:c9:8a:71:fd:
         a3:60:9c:ea:2d:05:1a:bb:9a:ae:5a:35:d2:73:96:a0:06:b6:
         19:99:b5:27:0b:28:87:fe:9e:e2:a0:9f:66:a2:09:06:cb:d6:
         16:ea:6a:80:8a:0a:13:94:d3:c0:dc:96:ea:e3:2f:04:20:be:
         e2:8f:d9:22:3c:34:45:b2:19:3f:e3:cc:77:0f:4e:62:e5:83:
         f6:5f:e3:b1:42:1a:1c:ef:d1:22:04:96:0b:fb:a5:f3:c3:58:
         25:06:97:8b:82:07:cb:31:7e:bb:d0:53:a2:51:5d:c1:2d:56:
         07:ca:61:08:cb:57:fc:53:31:fa:e8:56:fc:ac:ba:30:36:04:
         30:4e:07:a2:f0:b1:30:ee:da:84:8e:d5:61:84:6a:fc:00:3e:
         e1:64:a6:aa:e7:ee:a0:90:e9:c8:b8:1f:26:86:ef:e9:df:79:
         de:75:b1:8c:4f:4e:c8:9c:cd:e6:7a:2b:b7:4b:76:60:1f:0f:
         4b:ec:61:0d:0c:ac:b8:4c:0c:01:2a:6a:63:3b:b9:8e:ea:05:
         05:fd:78:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:04:14 2026 by rpki-client