Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/54344342-c8a3-3b5d-b502-3ffc4a83506b.roa
File:                     54344342-c8a3-3b5d-b502-3ffc4a83506b.roa (raw, json)
Hash identifier:          3GFh4fh3iXhRmH32u8iaZ6PR84fc/DiPnfqa7AOAdco=
Subject key identifier:   6B:DB:5B:24:4B:7F:08:FD:A4:D0:98:6B:45:AC:1A:3E:25:DD:A1:0D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D0F9BBB097D1FAA8BF77D0B80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/54344342-c8a3-3b5d-b502-3ffc4a83506b.roa
Signing time:             Wed 04 Mar 2026 22:12:29 +0000
ROA not before:           Wed 04 Mar 2026 22:12:29 +0000
ROA not after:            Tue 02 Jun 2026 21:12:29 +0000
asID:                     30036
IP address blocks:        2604:2d81:8c80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0f:9b:bb:09:7d:1f:aa:8b:f7:7d:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  4 22:12:29 2026 GMT
            Not After : Jun  2 21:12:29 2026 GMT
        Subject: CN=ff99ccdc-8557-4dd1-9ee3-8689a5f6d811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:87:d5:ad:1c:67:9f:ec:fe:18:f2:fd:8d:f1:
                    35:3e:c6:66:38:3d:14:c9:f9:83:17:fa:78:b1:02:
                    19:e6:a7:ef:65:02:f9:41:c2:d6:90:50:1c:15:c3:
                    31:7a:4e:ad:bd:c6:f7:5f:94:d9:88:f0:c6:01:1c:
                    ff:30:69:8f:6d:a0:aa:4d:97:e4:a7:00:5d:31:ce:
                    9b:ac:51:4d:cf:8b:50:d9:84:36:70:4f:bf:75:68:
                    8b:45:c9:62:60:92:7e:86:0e:dc:72:78:42:0c:64:
                    fd:f3:c3:11:b4:a6:d3:01:da:54:c6:6e:76:3c:d9:
                    ed:c5:78:a1:11:74:3c:d9:01:02:cb:8b:5c:10:f7:
                    50:5f:b1:ec:d3:b2:94:e1:a4:28:12:30:dc:6b:3c:
                    52:b8:9c:1a:e9:e3:69:81:ae:76:79:92:ae:fd:89:
                    ab:21:6c:a4:7f:b0:dc:12:f4:c0:ff:33:41:56:bd:
                    47:81:0b:25:8a:2f:cb:4a:f7:7f:69:8d:ac:2e:0e:
                    0a:a8:8f:36:5c:00:ea:be:44:9a:a9:c6:3b:f1:f3:
                    8e:f2:f1:91:3b:64:28:57:3a:cd:86:50:06:0d:99:
                    07:ef:a2:c3:a4:f0:d3:3b:fc:b7:68:1a:77:44:bc:
                    71:8c:fd:56:52:26:89:f6:da:74:69:cd:9e:51:94:
                    25:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DB:5B:24:4B:7F:08:FD:A4:D0:98:6B:45:AC:1A:3E:25:DD:A1:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/54344342-c8a3-3b5d-b502-3ffc4a83506b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:8c80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:10:19:f0:e7:67:6a:71:ab:f3:37:aa:cc:22:5b:6c:1f:ba:
         dd:98:51:aa:fa:36:97:2e:2b:65:bc:8e:42:8b:8c:80:bb:1d:
         bb:7d:13:27:3b:03:f6:4b:a9:9a:fd:1f:11:48:ff:30:b8:90:
         32:9f:ed:04:33:e5:b8:7d:b9:80:33:d2:97:ab:35:db:52:d0:
         60:13:61:4f:47:2b:a9:07:af:de:3f:db:34:34:6a:d8:da:f4:
         99:7d:7b:bf:0c:70:61:af:5f:34:20:7a:f2:29:b3:73:25:92:
         25:4d:10:b8:b1:fd:62:1f:18:26:6e:83:e7:21:32:16:4a:4a:
         bb:14:f7:b4:b1:bf:75:80:0e:1f:57:4f:6a:0a:83:76:2b:9e:
         3d:f3:5c:40:c2:dd:b0:fe:1a:6d:29:d9:4b:5d:5d:48:1a:b4:
         e3:7f:cf:1e:f9:9a:27:c0:d1:6a:0a:bf:64:18:85:21:43:79:
         99:88:5b:d2:12:80:55:33:18:5f:d4:98:51:76:15:1e:38:da:
         0a:66:cf:4a:79:01:29:60:2c:89:2b:c2:92:ce:c1:d6:09:2b:
         36:61:64:8e:e5:23:04:60:a1:1b:b5:87:df:ff:05:04:5d:99:
         68:3d:f7:6c:5c:8f:4d:13:92:39:bf:74:69:41:69:3d:e7:87:
         56:8a:e6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:45:55 2026 by rpki-client