Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/633ec2e7-dd5d-3197-8db5-4cc9e8a05259.roa
File:                     633ec2e7-dd5d-3197-8db5-4cc9e8a05259.roa (raw, json)
Hash identifier:          dnt2EgF/3LQS7Ir/6PHoHW+fIdRzSw/BwwLpx/rw+GU=
Subject key identifier:   C7:7C:E6:7C:A0:DC:0E:95:B9:C4:C3:39:00:5D:FF:68:C0:BE:F9:3A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D9E502BD2328E291DAD96D200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/633ec2e7-dd5d-3197-8db5-4cc9e8a05259.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     30036
IP address blocks:        2604:2d80:2380::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:2b:d2:32:8e:29:1d:ad:96:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=d1deb20a-1ed2-45a6-813b-8e4dde0a35d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f3:d1:e2:5f:01:1f:d3:59:55:3b:b5:3b:59:
                    ba:bc:e2:18:3b:c7:29:ac:82:be:e3:fb:f5:ee:f0:
                    be:a2:42:bd:b2:ab:60:ea:fe:f4:87:aa:5d:a8:eb:
                    97:db:c3:d8:a0:77:db:17:e3:1e:a5:b5:55:6e:c9:
                    61:58:c1:75:c8:30:e7:93:d7:5e:d4:af:7b:1d:98:
                    a5:c3:3f:26:ae:c8:cd:cd:36:6c:6c:43:10:e4:20:
                    ae:cf:3f:67:0d:ca:fb:83:eb:aa:7e:49:7f:60:d6:
                    09:de:38:08:72:50:54:fa:e2:fe:a1:d6:e4:98:41:
                    1b:f1:2a:d8:bd:1f:6d:5d:6c:d6:88:29:3f:e2:49:
                    cb:30:85:83:6a:f2:2d:a5:19:08:48:c3:53:db:66:
                    b3:e1:c6:d5:cd:49:fb:de:95:b2:0a:4e:68:4f:bf:
                    67:12:4a:63:c5:4c:fe:33:d5:db:db:53:ea:2f:61:
                    28:74:61:b3:c8:7d:0f:e9:91:86:26:92:ff:05:44:
                    3e:6b:15:4f:d5:e8:ff:90:7c:9d:9f:52:fb:34:4a:
                    da:8a:a8:5f:24:12:f0:fb:f7:65:d9:4b:66:0e:f7:
                    0d:56:42:4c:bc:cd:2d:00:d0:a6:f9:c8:30:4e:59:
                    0e:71:06:59:26:a7:65:d9:8b:85:d5:d6:be:b5:48:
                    77:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7C:E6:7C:A0:DC:0E:95:B9:C4:C3:39:00:5D:FF:68:C0:BE:F9:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/633ec2e7-dd5d-3197-8db5-4cc9e8a05259.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:2380::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:79:ca:18:6c:a3:e0:c1:3e:88:10:df:39:4f:bd:e7:cc:7b:
         f0:53:8f:39:70:78:6a:f7:29:9c:6a:ce:bc:1f:62:7c:08:11:
         f6:ae:81:78:43:d6:b5:f7:5c:f0:af:70:10:99:3a:a7:a5:a3:
         6e:5c:4b:8e:09:46:03:f9:39:1a:cc:3a:94:bb:7f:3e:16:78:
         a5:2b:a3:f7:05:fd:44:e7:58:b0:1d:ec:76:b5:5a:71:ac:ef:
         97:7e:60:9f:0b:dd:24:b5:ac:e7:71:4a:7b:04:cf:12:0a:ef:
         de:f4:38:91:16:21:f9:28:99:44:11:c9:69:1d:4c:62:b9:ed:
         aa:55:3a:cd:6c:8d:0b:03:9e:f4:df:6b:ac:06:51:dc:59:60:
         f1:05:bd:50:b3:cd:28:51:4b:4d:05:b6:12:84:89:28:7c:2e:
         0b:66:2f:41:10:ad:15:0b:b2:96:be:5e:1a:51:71:db:4a:2a:
         8a:0c:19:f8:76:07:70:88:37:9f:9a:b9:ab:96:ba:bb:2c:6d:
         fb:e6:e7:0d:01:d6:88:d7:35:6d:4d:e9:38:cf:e3:f8:19:39:
         ce:38:d4:0d:96:fc:10:61:6c:44:34:af:83:dd:fd:a5:26:93:
         0c:5f:ee:68:a1:ea:ab:96:d1:10:c6:19:df:ae:95:6e:29:ce:
         03:50:1b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 20:26:50 2026 by rpki-client