Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5f6f9e8e-e9d6-34ff-8ea6-a5e0c071b9e2.roa
File:                     5f6f9e8e-e9d6-34ff-8ea6-a5e0c071b9e2.roa (raw, json)
Hash identifier:          5Mtu+ICsoJFOVReuJcV4kLpyfYTDK4hdXPNtS2uCLv0=
Subject key identifier:   DB:83:45:B6:C8:75:53:72:A0:6C:EF:86:2F:2A:D6:AD:CE:00:F9:8C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D237A41477EBD35BE43B0D780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5f6f9e8e-e9d6-34ff-8ea6-a5e0c071b9e2.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d80:6300::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:41:47:7e:bd:35:be:43:b0:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=98279be2-0bac-409a-9926-a1abd559e42b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c9:d6:e1:c3:d2:f8:0b:2a:17:a6:eb:fb:35:
                    20:29:c9:31:ff:fd:f1:71:b0:5e:30:4f:32:8c:23:
                    d9:05:ad:15:5d:aa:08:b2:34:6d:79:c0:e3:23:13:
                    12:4b:f1:f9:c5:eb:7f:44:1f:d6:ca:cf:c6:8c:15:
                    03:9e:42:cf:3f:9e:41:c2:d1:d1:bb:80:83:b7:06:
                    c4:c2:f1:05:18:d9:b0:f5:6d:da:75:00:c5:6b:b5:
                    ca:81:68:2b:dd:a9:c0:bb:02:22:13:40:b9:f6:03:
                    2c:29:af:6e:81:db:01:f0:bc:fe:d8:e6:49:da:e6:
                    fc:65:13:bd:41:4e:bd:fc:8b:73:66:d7:f9:b4:aa:
                    0b:70:f4:51:26:d9:f5:d9:d7:f7:c5:16:57:6d:f3:
                    cb:05:18:9d:bd:11:be:a3:14:06:e5:1d:68:1b:52:
                    63:8e:6e:f5:ee:f1:e2:33:1d:8c:cb:21:8b:c4:e3:
                    b8:13:9e:65:d7:69:e2:3b:5f:8c:6d:a2:40:50:a3:
                    f2:c1:b8:51:93:ed:f7:08:7d:01:55:6a:ae:67:54:
                    39:5e:76:09:fb:64:8e:01:2f:0e:5b:cd:0a:79:c9:
                    97:e2:b5:c7:7d:4c:48:ad:f5:ed:11:8e:ed:7c:db:
                    7c:23:4b:73:dd:79:19:2c:ff:02:ae:39:4c:c4:7e:
                    ab:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:83:45:B6:C8:75:53:72:A0:6C:EF:86:2F:2A:D6:AD:CE:00:F9:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5f6f9e8e-e9d6-34ff-8ea6-a5e0c071b9e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:6300::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:83:7d:7d:63:f9:e6:90:0e:bf:79:e3:2b:8f:4d:54:75:1b:
         0f:9e:a0:79:69:39:e1:94:da:a6:72:09:93:8d:63:13:e5:7e:
         ed:8f:f4:d1:34:39:dd:e5:9a:a0:61:5b:ab:a7:9b:8b:0b:97:
         02:48:c7:6b:6c:57:75:2d:c0:b2:c0:25:e6:15:fc:48:61:a3:
         12:b1:de:a2:4b:ab:51:4f:32:1b:d1:b0:60:2e:c4:f4:76:b3:
         01:7e:68:db:15:09:32:4c:50:c1:ca:57:03:81:e1:ad:a4:ad:
         d9:6a:87:2d:8d:34:c8:d6:52:71:ad:b6:98:6a:2b:4c:6c:8e:
         f2:40:6e:cc:4f:94:c3:f3:bc:c0:f2:fd:cf:79:82:91:0f:8c:
         a7:d3:3d:fb:81:38:23:46:51:d4:53:cb:d8:6c:e7:5c:b5:da:
         ac:79:99:71:2d:c9:96:29:60:32:3d:2b:87:8e:f6:2f:af:3b:
         1c:ef:df:88:ec:e2:c4:c2:18:dc:bb:a1:0b:fb:0e:7f:56:ba:
         0d:1f:63:18:5f:26:72:be:36:f0:c9:7b:88:fe:0b:90:2e:6b:
         c1:bc:ac:3b:30:25:ee:3b:29:3c:f0:df:58:11:85:94:4c:5c:
         b3:e6:5d:9d:d1:69:04:4b:e9:23:b1:17:01:2a:d3:f8:f1:46:
         de:fb:fa:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:40:37 2026 by rpki-client