Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/9e32cafe-3964-3828-b17c-06b289cf828e.roa
File:                     9e32cafe-3964-3828-b17c-06b289cf828e.roa (raw, json)
Hash identifier:          SWOPwOK7s4t3PPQ/5ELra5Deqnjk4ctJAW3PEMc6kEk=
Subject key identifier:   AF:DC:D5:1B:41:6A:8D:04:FC:91:B1:F7:A6:2D:36:B3:FF:57:1E:5E
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584F497696AA2E6774D795150DA0
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/9e32cafe-3964-3828-b17c-06b289cf828e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     2734
IP address blocks:        2605:6c00:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:96:aa:2e:67:74:d7:95:15:0d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=316fd3dd-5fbb-4560-9c88-76d6fb1bea9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4d:99:61:ac:d6:15:1e:9e:dd:4d:f3:74:85:
                    e4:18:2e:49:22:6d:63:cc:b6:6c:ec:bc:46:58:5f:
                    d2:e9:c9:f4:1a:f8:d1:0b:04:bd:ff:4c:52:ba:7a:
                    cf:98:00:1a:70:b0:cd:ce:dc:38:73:76:5c:b4:c3:
                    4c:93:69:08:44:9c:62:bf:a8:fe:71:2c:83:65:35:
                    f2:7f:d6:6b:76:79:3e:1e:d0:f7:01:18:49:55:79:
                    fb:c3:52:d5:a8:ee:37:36:57:c9:98:e3:e4:48:25:
                    73:2c:76:a4:b4:c5:b9:0a:d1:33:82:2b:25:1d:91:
                    db:5f:11:6c:c0:0b:b9:60:e7:e1:f3:69:98:ff:28:
                    e3:7d:f1:19:3b:a0:9b:06:d1:b9:29:d5:72:4f:4f:
                    35:14:79:1e:0d:cb:2b:a3:dd:44:01:d1:01:1a:f5:
                    0a:53:bb:6e:e4:21:9b:4d:42:b9:64:06:fd:ee:60:
                    89:e9:63:7f:a9:47:64:c8:d6:8f:44:7c:a8:0f:44:
                    b4:96:93:5e:54:af:da:62:e5:92:d0:a7:55:c8:7f:
                    6a:8f:58:34:0c:1a:9a:4d:0b:d7:ca:89:5f:82:7f:
                    9e:f6:50:88:7a:f5:91:a1:2b:bf:4e:ba:9c:e2:1b:
                    7b:65:c7:a2:8e:69:ac:5a:a4:be:42:9f:dc:df:64:
                    29:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:DC:D5:1B:41:6A:8D:04:FC:91:B1:F7:A6:2D:36:B3:FF:57:1E:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/9e32cafe-3964-3828-b17c-06b289cf828e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:f6:35:8c:bd:9a:fb:66:23:5e:54:39:c0:ed:1c:d7:93:c1:
         98:87:bb:4c:57:c8:6f:8b:9d:60:3a:4c:8e:21:27:4e:ac:4e:
         59:4e:7b:00:50:8e:90:30:ce:f7:5a:84:a2:1a:04:a5:31:8f:
         5b:7d:8f:a1:23:f1:60:23:ec:da:10:15:0d:29:83:55:9a:c2:
         f5:8e:ea:60:7c:6c:d0:98:24:ca:0a:9f:7c:cc:5a:a2:9a:f6:
         59:d5:bb:9c:a2:2a:42:b2:9a:c7:e7:3a:19:6f:60:d2:a0:8f:
         ef:be:16:96:9b:92:f4:a7:e2:e3:90:fb:65:34:81:29:d7:a9:
         9d:c6:6f:0f:55:75:13:fc:a6:4e:09:5c:71:7b:4b:e2:8f:bf:
         8e:30:75:18:de:3a:9c:6e:b1:25:49:c6:60:e9:8c:c0:4a:ec:
         9f:22:5c:b7:8a:95:bc:81:7b:3b:59:f5:3c:fe:9b:82:1d:29:
         a3:af:c5:40:1c:cf:49:e5:0d:b7:b7:33:8a:be:c8:f1:51:20:
         d7:42:f3:44:3c:d4:86:55:0c:dc:16:ca:ac:7d:61:18:05:74:
         42:38:40:23:2a:5f:97:bb:5b:0b:65:be:84:7f:1c:90:75:20:
         6a:55:6c:91:54:27:2e:cd:ef:68:a1:d3:ea:b2:26:00:34:4f:
         c4:e5:a5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:35:08 2026 by rpki-client