Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/35a8b5f0-4f27-317f-abb3-efc5e7ff96d0.roa
File:                     35a8b5f0-4f27-317f-abb3-efc5e7ff96d0.roa (raw, json)
Hash identifier:          vqq4M0ZaiPmxfWwap7ZJLg2lZeC3FiokEd0LoWoY3/w=
Subject key identifier:   4E:D4:EF:E6:2D:F1:03:C2:B2:C9:05:62:0A:AC:FC:E1:09:DD:7E:D4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F5FC804F9FFC6349B65564A80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/35a8b5f0-4f27-317f-abb3-efc5e7ff96d0.roa
Signing time:             Sat 03 Oct 2026 01:00:12 +0000
ROA not before:           Sat 03 Oct 2026 01:00:12 +0000
ROA not after:            Fri 01 Jan 2027 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d80:2580::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5f:c8:04:f9:ff:c6:34:9b:65:56:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:12 2026 GMT
            Not After : Jan  1 02:00:12 2027 GMT
        Subject: CN=ab47d685-8907-45ad-9f41-b1f328ca8c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a7:b7:20:4f:bb:84:cd:e3:b3:df:a4:80:45:
                    a3:d2:21:85:cc:78:5e:4f:24:05:67:9c:11:72:96:
                    7d:c0:6c:7f:8c:4d:e5:5d:67:a3:b4:b5:9a:14:6b:
                    ee:ac:da:7e:72:85:2f:e8:0a:f4:db:5d:a5:68:86:
                    11:bf:03:9d:9c:0e:8c:40:6c:c1:ab:73:d6:11:24:
                    ce:2d:eb:bf:99:2b:cd:5b:95:b7:87:f9:d6:af:e2:
                    f0:a8:e8:85:5f:c7:17:53:94:fa:80:e0:65:7a:15:
                    f0:f9:ae:3a:25:9f:3a:10:1d:bb:73:eb:77:ff:3f:
                    65:bf:f6:f3:1a:37:37:15:2f:40:4f:e1:80:19:76:
                    38:74:33:7c:db:f3:20:a3:07:00:db:df:16:f6:c8:
                    fe:52:82:53:2f:95:55:aa:84:9a:cc:6c:e1:d2:60:
                    7c:33:f8:7a:c2:83:54:7e:4d:87:e6:8b:45:46:97:
                    6b:48:13:1d:f9:52:01:bf:5b:54:ba:e7:4f:f7:92:
                    bc:a0:cc:54:1b:92:56:f2:07:9f:03:4a:fe:fc:59:
                    f5:0d:79:31:01:8f:4b:8a:98:8d:50:6c:c3:94:b8:
                    d4:3c:1d:69:71:a0:86:74:25:5d:8e:bc:ed:d6:ed:
                    3e:37:85:30:45:b6:b4:55:d5:64:8b:21:8c:91:7b:
                    09:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D4:EF:E6:2D:F1:03:C2:B2:C9:05:62:0A:AC:FC:E1:09:DD:7E:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/35a8b5f0-4f27-317f-abb3-efc5e7ff96d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:2580::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:99:b2:fe:02:71:47:0e:aa:2f:f2:30:65:f1:d1:e1:3e:00:
         e4:2a:37:40:c8:64:1c:2a:fe:b7:2c:94:ea:ba:52:ba:9f:bd:
         83:f1:45:d8:26:ab:df:9b:92:33:cd:a7:56:b1:29:21:81:8d:
         fb:a0:f8:fb:94:e5:2f:62:26:a6:ff:c8:05:93:a3:f8:2e:b7:
         5e:5b:03:64:78:53:81:15:18:1f:80:32:7c:d4:5b:ae:c2:4c:
         78:93:01:55:cf:9a:91:9c:89:5d:7c:05:10:b6:86:89:bf:84:
         dd:4f:da:02:de:bd:e4:d6:dc:ce:f0:6d:04:db:9c:6d:d1:f8:
         56:9c:fd:b9:4c:c8:3b:c4:b9:84:e8:90:7c:da:92:03:99:a0:
         bc:74:a6:34:d0:bc:c8:ab:03:68:7f:37:1b:ef:01:7a:63:a1:
         59:b4:82:cb:a3:bb:cd:d7:70:e2:ef:4e:42:03:21:ac:16:a2:
         e3:78:ba:36:65:84:16:05:4c:98:95:4f:ae:0c:65:42:f4:a0:
         ac:18:84:72:96:fa:70:5c:29:52:1f:43:a4:59:41:26:de:7b:
         9d:58:8f:e6:e9:45:c6:f5:5a:d3:f3:76:f1:16:ac:94:35:eb:
         45:b3:10:a0:db:a5:43:f2:75:ed:30:6f:fa:d2:43:e4:37:04:
         49:f5:ad:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:41:57 2026 by rpki-client