Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f1c8225-d134-3d3e-8dbb-1e2beb247f14.roa
File:                     2f1c8225-d134-3d3e-8dbb-1e2beb247f14.roa (raw, json)
Hash identifier:          5ozkcWV5Ia8WvkLMg5F91wtPl8QWSRlxxZVLxAcZF1g=
Subject key identifier:   FA:1A:76:97:EF:03:B0:59:F3:44:1F:B1:4A:45:D8:90:A9:42:F9:1C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA7A0F13BB454973117B72780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f1c8225-d134-3d3e-8dbb-1e2beb247f14.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:3980::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:f1:3b:b4:54:97:31:17:b7:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=08c15a79-0987-48d3-a499-1750a0d1cd81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:97:a4:b6:81:ed:20:b3:a0:de:0b:5d:fd:7f:
                    cb:1d:59:02:0b:f3:d6:36:84:47:38:ae:df:10:d4:
                    2d:1f:fa:74:d3:4a:91:49:ac:dd:0d:bb:e5:6d:ff:
                    d0:ca:2b:ce:87:df:f8:27:f3:37:8f:74:d7:eb:8e:
                    99:ed:58:7e:a1:41:da:34:e0:af:fe:a4:22:84:51:
                    5c:99:d1:9c:89:c7:08:30:29:e7:fb:6f:52:54:0a:
                    b3:89:c3:c8:e3:0e:ef:b6:2e:c8:35:71:fd:3e:8e:
                    6c:2c:f2:c8:de:fe:fd:8d:cb:ec:21:b3:6d:d0:ea:
                    66:bd:d5:fd:a5:f5:f9:45:bd:81:9e:95:e0:3c:4f:
                    37:a7:0e:b0:eb:85:14:f7:db:44:a7:71:de:df:a3:
                    69:e5:46:ee:22:b9:ca:a6:63:49:eb:92:47:4b:59:
                    3f:3c:6d:d1:f4:34:72:b4:8b:fe:46:cf:31:eb:21:
                    1f:13:c4:f8:e0:3b:d8:2e:4b:ec:6b:c6:2b:0d:3b:
                    23:23:e7:b3:4d:08:46:77:a9:0a:5e:34:80:54:e0:
                    db:bd:48:a7:31:eb:dc:ac:fc:fe:f3:6f:bf:54:6d:
                    23:23:d4:46:c3:7a:32:1c:6c:20:e3:26:a7:f9:d0:
                    8f:01:57:3f:be:8e:1a:fc:4a:76:63:06:e0:ed:78:
                    30:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1A:76:97:EF:03:B0:59:F3:44:1F:B1:4A:45:D8:90:A9:42:F9:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f1c8225-d134-3d3e-8dbb-1e2beb247f14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:3980::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:52:60:b6:a7:93:8a:05:85:23:cc:0a:bb:5f:1a:4b:21:6a:
         be:a7:6a:ce:52:61:b2:12:f5:ee:db:17:97:b6:d6:44:35:e3:
         ee:fa:1c:9d:da:fe:fa:2d:88:51:9b:10:38:4c:33:df:19:5c:
         eb:6a:da:ed:e2:fe:4f:56:82:4d:eb:b6:dd:2c:31:fc:4b:d4:
         7f:f6:00:55:a3:33:4a:e2:af:67:65:b5:16:66:71:8d:a2:bb:
         63:a8:a6:3c:10:3f:de:02:06:d7:cf:82:d8:4a:2e:fb:7f:b8:
         e2:7c:96:fb:98:25:3d:58:6c:3c:23:87:25:d7:28:83:1d:c2:
         76:5f:5e:b0:89:8a:a0:dc:20:13:9a:b2:4b:e1:02:01:49:da:
         bd:14:c2:d2:12:5c:d1:9c:53:cd:54:b6:ee:c4:58:a0:64:04:
         a2:e8:31:1f:92:cf:b2:f8:15:97:b6:81:e5:da:51:13:92:32:
         ca:3b:4e:ed:46:6e:99:c5:a1:f5:fd:df:46:15:a0:ef:bf:4a:
         61:93:da:6a:9a:68:7d:2e:34:2b:22:06:22:09:bd:83:94:98:
         77:8b:78:fc:69:75:7f:b5:d7:8f:5b:e0:10:a3:0f:e1:bf:75:
         ad:30:07:96:91:95:d3:31:96:45:5b:04:99:94:2b:45:7d:5d:
         0c:97:d6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:00:35 2026 by rpki-client