Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/541ad6d5-9d9b-3483-ac0e-155719458049.roa
File:                     541ad6d5-9d9b-3483-ac0e-155719458049.roa (raw, json)
Hash identifier:          tvMhfa8k9GYHJyHyQrDZCvdJk0WQ1uLzAtoTJLvPHlA=
Subject key identifier:   9E:10:17:EC:D3:1A:B2:2B:07:48:37:C8:31:43:AA:6C:E1:F3:E2:3A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DB10B80DBA6D24DC6A380E800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/541ad6d5-9d9b-3483-ac0e-155719458049.roa
Signing time:             Fri 01 May 2026 18:02:50 +0000
ROA not before:           Fri 01 May 2026 18:02:50 +0000
ROA not after:            Thu 30 Jul 2026 18:02:50 +0000
asID:                     19905
IP address blocks:        2604:2d80:7780::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b1:0b:80:db:a6:d2:4d:c6:a3:80:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May  1 18:02:50 2026 GMT
            Not After : Jul 30 18:02:50 2026 GMT
        Subject: CN=65139206-9f4f-4828-ab48-532c87fcab6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:89:1d:80:f7:63:b9:ba:68:0d:1e:16:90:9f:
                    ca:dc:b2:8a:84:34:6d:77:32:cb:0d:55:71:59:98:
                    80:b8:21:00:7c:37:9b:90:8e:a9:93:22:0c:93:4c:
                    d0:04:cb:58:e5:93:fa:0e:36:03:d9:26:e6:3e:ad:
                    b5:35:02:bd:2d:ec:01:5c:b2:3f:a0:21:8a:cc:7f:
                    e1:42:8b:ca:9f:b0:c4:67:93:17:c6:4a:43:55:7e:
                    2d:ab:08:16:4d:ff:7f:4d:e3:71:21:99:35:94:99:
                    f2:a0:0b:2a:a5:9d:70:08:4f:2e:57:96:2f:4b:6f:
                    f5:a1:f2:16:a3:e3:01:38:c1:8d:c1:ad:9e:7b:ce:
                    2c:a8:9c:eb:c7:0d:b2:b1:fe:17:2d:2b:98:bb:8c:
                    00:99:14:bf:c0:b9:5a:36:e3:11:cd:41:e6:e0:51:
                    b2:1c:7e:d5:ca:6a:d0:98:b0:78:ec:a3:21:0c:56:
                    e4:75:01:0f:17:79:47:4f:a2:da:ec:74:f4:b7:92:
                    32:9c:42:e9:0c:b8:4c:46:06:34:a5:93:58:54:31:
                    2f:dc:f1:8d:54:e3:9d:bc:50:d9:4f:2d:87:56:71:
                    3b:17:f7:bf:de:97:ef:56:9c:0d:9b:68:49:6f:d4:
                    11:7f:60:3c:64:f2:8a:4a:4b:42:16:50:f3:7f:9a:
                    4a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:10:17:EC:D3:1A:B2:2B:07:48:37:C8:31:43:AA:6C:E1:F3:E2:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/541ad6d5-9d9b-3483-ac0e-155719458049.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7780::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:a9:1c:43:33:52:d5:47:e8:93:0c:41:08:56:9b:0c:e7:c7:
         e9:e1:b7:01:5b:0d:82:4c:5f:0e:f7:79:6a:21:c1:2f:9d:fb:
         85:1a:c3:51:25:56:16:9b:50:f9:a8:34:12:89:69:68:59:41:
         ad:f0:b9:ca:1e:44:7e:d5:49:42:b7:79:25:6b:89:84:95:1f:
         ce:ab:17:90:1b:fd:6c:65:68:0d:e7:07:39:69:67:14:a7:d4:
         9d:ac:71:91:ad:ff:21:dc:e4:7f:fc:e6:e7:bb:a4:0e:d6:e9:
         fb:23:5a:50:60:4e:65:c6:d9:f9:6f:93:31:a2:1a:de:0c:ca:
         57:c5:9d:bd:36:78:ae:2b:ff:c0:e0:41:1a:29:81:96:d7:9d:
         54:08:a2:e1:6e:86:0c:f1:a3:5c:43:4a:95:f9:bd:54:d0:96:
         3b:19:4b:9d:f1:df:ac:a9:c7:9e:8b:23:32:09:33:5c:6a:8d:
         09:8a:2c:8c:3c:e5:1e:f5:44:aa:49:31:cb:10:05:09:ef:5f:
         7b:f9:8c:d2:9e:20:21:52:dd:cd:ed:18:6b:2d:72:f7:1a:d0:
         a6:c5:e1:78:05:22:5e:fc:1e:70:ce:48:98:20:5c:8a:3e:44:
         15:0b:d2:48:6c:b9:50:d0:54:52:3c:0c:60:99:9c:ae:6e:fd:
         9a:60:2a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 20:25:49 2026 by rpki-client