Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/03384d78-f7ad-347a-8430-c9c4793c7847.roa
File:                     03384d78-f7ad-347a-8430-c9c4793c7847.roa (raw, json)
Hash identifier:          PWzxmh2gShhOe8/NlCki4sPe7KPDMYas1iO8uqXuWrU=
Subject key identifier:   05:EC:FC:4E:A3:03:C7:95:47:50:8B:AF:F2:47:14:28:7D:9E:62:C3
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4974F6A58E348981E7E84540
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/03384d78-f7ad-347a-8430-c9c4793c7847.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d81:400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:f6:a5:8e:34:89:81:e7:e8:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cb1a1550-7b0f-4954-abf1-fa3490cf4830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c5:8f:49:ba:0f:be:a6:d7:61:3e:99:19:66:
                    e9:f7:c6:ba:08:ff:19:07:25:32:e8:17:f3:42:6b:
                    8a:4f:e0:5c:5d:2b:cf:88:08:b2:36:d7:ca:b9:ee:
                    34:0d:0b:a0:17:67:52:63:ec:d2:58:c1:b1:08:e4:
                    f4:f8:24:dd:c3:b9:1a:7f:a9:4f:e3:e0:79:ad:a8:
                    f6:aa:ad:a8:21:1b:2d:80:a5:0b:55:48:57:e1:78:
                    c7:81:3e:2e:6d:96:76:eb:fe:8b:fd:3d:e0:61:18:
                    2b:d4:3d:ac:f7:97:58:ec:90:16:a3:c9:16:89:dc:
                    af:2f:bf:54:81:f7:18:2a:75:22:da:f5:77:3f:03:
                    e1:00:2b:1d:60:c1:58:1d:c5:e9:e9:76:c0:72:72:
                    d7:98:6a:a5:27:14:0d:55:6c:22:69:fa:30:a2:60:
                    80:d4:71:a1:e2:af:d3:39:9a:ac:38:6e:ac:f0:3e:
                    a7:77:ad:6f:36:74:ba:02:de:3f:cf:79:b7:df:7d:
                    10:fd:e0:bb:b1:a3:fb:94:f5:bc:7a:b2:ed:61:c1:
                    69:42:ac:4f:7c:fe:f0:64:03:29:6b:d1:2f:22:86:
                    14:ad:4f:04:c8:e2:43:57:b9:e4:a5:fc:f9:1b:1e:
                    c8:e7:ac:40:d9:f5:a4:b1:22:21:59:36:d6:34:ad:
                    c3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:EC:FC:4E:A3:03:C7:95:47:50:8B:AF:F2:47:14:28:7D:9E:62:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/03384d78-f7ad-347a-8430-c9c4793c7847.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:d5:7c:a6:67:80:f6:66:01:1c:ea:91:88:44:88:2e:24:9d:
         b7:7b:bb:18:71:a1:db:05:b7:ae:af:1c:77:74:cd:3d:63:12:
         11:b8:1d:7e:13:4d:46:3b:d0:b9:b3:54:6e:57:6c:c9:80:79:
         70:e6:02:e0:09:ec:85:4c:89:5a:38:d7:3f:ba:ff:ef:4a:6f:
         b4:a6:e0:80:67:51:3d:41:04:d0:39:d0:4d:c0:62:a7:54:f4:
         eb:67:70:8f:d3:2b:85:b6:fd:4f:69:72:4b:95:85:6f:0a:64:
         72:66:68:1c:0d:6c:b7:60:6d:77:9a:06:5c:58:19:c7:a5:94:
         a0:54:c9:e4:cc:48:1b:2c:f8:90:fa:b0:f1:0a:47:90:32:d1:
         ac:a6:36:87:9c:2e:a0:dc:7f:b9:31:e0:41:a0:9b:97:86:43:
         1a:15:79:16:04:70:3b:ae:25:51:06:6c:24:3e:5f:fa:95:f6:
         81:0f:e2:de:d9:b1:54:1c:83:84:0a:7e:c6:fe:0e:6a:1c:1c:
         62:e6:14:66:14:77:82:dd:37:b4:15:e2:01:b7:4a:f6:8a:1c:
         f6:93:9d:e8:d6:ba:34:83:9d:68:f9:ae:25:39:5c:36:d3:89:
         0f:80:2c:7e:97:c9:99:a7:6b:5d:24:81:cd:40:18:90:a1:98:
         2a:32:ac:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:04:15 2026 by rpki-client