Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/42fc9b43-e1c5-3113-b9d8-082ce60a9876.roa
File:                     42fc9b43-e1c5-3113-b9d8-082ce60a9876.roa (raw, json)
Hash identifier:          +Dwjm+ZFYmTAVPqnDvhi9O2sXMtuqcUFT5HUsUchF/Q=
Subject key identifier:   7B:BB:A8:BA:44:01:D7:4B:18:FA:88:5A:83:85:17:95:FA:61:28:57
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F49738D3025E81719F8565480
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/42fc9b43-e1c5-3113-b9d8-082ce60a9876.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d80:8c00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:8d:30:25:e8:17:19:f8:56:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bddfb64f-714f-4f44-a569-bb782e49b7a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4c:44:46:93:45:f9:ff:a8:fd:78:bf:b4:78:
                    21:ae:dc:6b:9a:90:1f:0f:a5:96:36:48:fd:15:63:
                    44:9a:24:d3:29:af:cd:36:a2:73:b6:83:11:48:2f:
                    5f:a2:75:51:13:33:0f:ac:62:30:19:7c:42:7d:7c:
                    09:7d:95:61:02:dc:f3:5f:8d:f8:bd:f9:b7:a2:90:
                    5f:9f:6b:5c:2b:f7:d6:e8:1d:9a:00:cf:46:89:80:
                    18:38:27:f7:18:0c:24:77:f1:ab:5b:c7:86:a8:73:
                    24:c1:bf:79:db:a0:d8:a4:73:d6:75:b0:8d:36:5c:
                    1c:ef:bb:11:9b:b2:a9:b4:e3:3b:8c:7f:82:87:b8:
                    2a:db:bc:c3:df:ff:ba:b1:1d:1c:02:87:dd:b8:a8:
                    65:b9:a9:3c:10:b7:d2:73:5b:47:63:8a:2b:ca:03:
                    8f:cc:bb:08:95:a5:b9:66:60:ea:2c:00:f5:fa:1b:
                    ba:64:0a:fc:18:12:5b:15:1a:c4:a1:cc:ac:bd:03:
                    4d:a4:d3:3e:cf:9a:c5:d3:e5:1d:88:c7:ab:ef:00:
                    98:0c:ec:b5:91:85:6f:e4:23:f8:95:fe:a3:1f:28:
                    b2:42:57:15:82:ea:34:d0:a2:4a:00:25:2f:ad:a1:
                    02:c0:ed:43:2b:b9:e2:0f:a8:b3:11:83:ca:61:78:
                    c1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BB:A8:BA:44:01:D7:4B:18:FA:88:5A:83:85:17:95:FA:61:28:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/42fc9b43-e1c5-3113-b9d8-082ce60a9876.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:8c00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:fb:05:30:bf:fd:68:e8:6e:d5:a8:79:8f:23:87:b5:df:15:
         aa:f9:46:5b:30:99:d2:47:f8:de:92:62:c9:d9:dd:a6:dc:da:
         5d:b3:b1:8a:47:76:a7:5f:90:14:9b:eb:74:5f:4f:2f:fc:c6:
         83:9e:2f:81:16:94:48:6f:a7:3d:88:27:a1:66:01:7d:9d:0c:
         5d:19:80:de:b7:ef:98:71:34:81:53:46:95:b0:8e:2b:3a:47:
         12:ef:ec:fc:d1:53:89:52:f6:5c:11:88:81:a3:e2:cb:59:0f:
         4a:b4:69:c2:61:0b:0e:3c:e6:4c:9c:ec:18:9b:ee:4a:3c:50:
         5d:c2:2f:d5:14:ac:37:59:fe:20:d4:cf:05:9b:2b:f5:bb:6d:
         09:e3:a3:4a:fa:e1:a7:49:53:00:c7:82:05:01:4d:bf:61:67:
         be:74:37:49:93:3f:c3:d8:c0:51:d5:78:67:18:ca:f2:f0:09:
         1a:d6:53:eb:05:a6:ae:3f:76:21:84:ce:20:39:3c:3d:37:19:
         87:68:f5:c7:c7:ba:bd:3b:d0:50:bb:c7:78:39:c4:98:6a:ea:
         7c:48:2c:91:f4:51:c1:47:4f:76:e2:da:b3:af:9d:9a:31:8f:
         47:6f:9d:a0:a7:f2:de:38:23:e8:fa:3c:c0:bc:11:59:d0:05:
         82:66:4b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:29:21 2026 by rpki-client