Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3600c549-d9b7-3cd0-9d86-882b65257a73.roa
File:                     3600c549-d9b7-3cd0-9d86-882b65257a73.roa (raw, json)
Hash identifier:          xdIPbyXh5FWFP2thYVL7wOzi42RvhduAp1kmx1aQbhE=
Subject key identifier:   0B:E6:0C:73:D3:D1:14:C6:AD:34:9A:87:62:52:D4:EE:91:00:85:65
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA8EC43BED9B4181712E96500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3600c549-d9b7-3cd0-9d86-882b65257a73.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:f000::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:43:be:d9:b4:18:17:12:e9:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=dbb1907e-cfe5-4244-a92f-d5531816ac12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ba:d2:ad:14:30:f4:14:48:e4:42:73:e4:b2:
                    15:45:1d:0c:de:ac:14:7b:21:80:fb:4e:cd:85:5b:
                    5b:16:16:52:7c:67:fa:21:c5:cb:8f:8c:2e:23:a0:
                    14:b8:e1:0d:4a:9b:07:df:a3:e6:26:c9:92:b4:0a:
                    43:ba:53:b9:70:80:ea:4e:96:d4:b5:5d:57:85:19:
                    f4:eb:92:3c:96:d5:7c:9e:2e:75:b7:f1:b0:0b:85:
                    c3:98:2c:4e:f8:c7:aa:fc:f5:1a:22:7f:6a:4e:0e:
                    6e:be:ef:95:b6:7e:c3:9c:18:8e:c2:c6:75:77:d2:
                    30:d5:f9:3c:8c:68:21:2c:21:17:a7:34:cf:a7:4c:
                    50:6f:a7:e8:94:07:0d:1a:44:8a:78:79:a2:52:23:
                    42:fb:f9:69:2c:dd:ee:83:98:b3:e4:bd:f6:12:91:
                    db:55:23:dd:78:aa:98:d1:dd:e5:45:e7:82:15:15:
                    ff:4f:85:2f:24:98:5b:da:4f:fe:ae:05:06:d1:37:
                    a8:5c:cb:b7:58:39:d0:3f:cf:b2:5b:6a:28:88:d1:
                    7d:eb:52:e7:7f:4e:19:2b:0f:66:ba:2d:95:24:f8:
                    ee:9a:e2:6e:56:a8:9a:eb:c3:df:07:e7:7c:c6:46:
                    57:37:b3:80:00:93:73:5d:dc:11:c7:1c:ee:76:84:
                    80:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E6:0C:73:D3:D1:14:C6:AD:34:9A:87:62:52:D4:EE:91:00:85:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3600c549-d9b7-3cd0-9d86-882b65257a73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:f000::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:8a:bb:a8:be:de:1e:9f:4a:c9:3f:43:66:8a:eb:38:0a:1b:
         1b:01:ef:2b:73:ae:b7:a5:4d:07:3f:46:e8:a2:ea:03:a3:e7:
         72:aa:c3:0a:ec:0c:a7:eb:b7:73:b6:ef:7b:85:64:92:23:dd:
         59:66:63:17:2f:3e:bb:35:00:5c:bc:85:52:cb:e4:60:db:2d:
         ea:33:22:e3:fc:51:b7:9e:fa:33:f2:24:d5:df:e7:1e:45:f4:
         bf:24:57:e6:f4:ac:51:e2:77:98:f7:cd:90:12:8b:83:e3:81:
         86:a8:f3:69:9d:e2:4e:11:77:68:8f:ce:95:16:0c:bb:8e:53:
         14:ea:6c:6e:25:bc:0d:71:8f:eb:c5:eb:fd:17:af:75:2d:f4:
         fe:54:d3:fa:77:7c:c0:c3:71:b7:d5:27:4a:21:70:ba:7b:36:
         65:cd:2b:5b:cf:46:fa:c7:e8:cb:45:8c:e1:71:6b:8a:e7:24:
         11:5f:ba:81:5e:43:8b:b2:ef:65:2f:e5:f8:2b:23:e8:d8:ea:
         6f:99:ed:31:10:a7:ad:8e:87:34:ec:2e:19:00:48:6f:3e:05:
         ff:8b:ea:80:79:b5:0e:4a:46:23:f6:02:9f:dd:de:a5:71:e0:
         17:08:0e:21:20:f5:be:95:1e:19:4c:9d:30:8c:ce:17:a6:73:
         4f:52:d8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:27:42 2026 by rpki-client