Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/64c04f54-9581-3d57-ac79-e867202a23c3.roa
File:                     64c04f54-9581-3d57-ac79-e867202a23c3.roa (raw, json)
Hash identifier:          JTAvjmFWXeb63sIPqT06u6xI0ztOAvsfW4GIQXiHO4c=
Subject key identifier:   75:15:EE:16:A6:53:18:47:71:BD:9D:50:5A:1B:6D:81:B2:C1:EA:D2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D1B1A029D7C8A88FA340E2330
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/64c04f54-9581-3d57-ac79-e867202a23c3.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        2604:2d80:d580::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:02:9d:7c:8a:88:fa:34:0e:23:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=94120ea0-1a2a-44f1-ba6f-f89caef4c0e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:78:2a:48:86:75:f1:4b:e7:a4:66:92:d6:6b:
                    3a:83:58:82:cc:fb:3e:08:30:b6:76:e7:c3:cb:62:
                    15:3c:15:7e:8d:e2:de:f3:7f:a1:95:a7:aa:4c:b8:
                    f6:86:31:28:97:ab:cb:0f:b2:5d:22:5c:bf:47:65:
                    e9:42:b1:9c:45:16:c2:11:d5:73:cf:8e:0c:bb:63:
                    74:fb:00:83:91:b8:c5:7a:05:a1:ab:c7:04:3c:39:
                    8a:d5:b3:fb:88:10:ce:b7:34:54:b2:d8:93:5f:54:
                    de:f7:1c:59:83:ec:7e:f2:77:0d:bc:65:85:2d:e2:
                    eb:23:34:c9:18:43:ad:f2:6f:fe:36:19:94:17:1a:
                    00:ef:bb:7c:12:2a:03:d8:ce:23:03:d6:c8:97:7c:
                    09:bb:60:2c:9e:67:44:1d:3d:7a:a5:ca:aa:3b:e6:
                    78:4e:29:69:cd:53:57:12:57:9b:6c:eb:0d:af:b9:
                    2e:dc:45:d2:61:d7:60:86:7d:f2:bc:eb:b1:fe:62:
                    98:ac:4e:76:87:dd:c3:b7:38:10:1e:4c:23:37:cb:
                    b7:33:33:e8:58:69:29:63:dc:0b:b2:82:32:5f:3d:
                    f3:18:cb:b8:14:e5:72:b1:91:ab:50:c6:a0:a4:63:
                    2e:da:07:85:7e:5f:4d:43:6e:80:13:f1:0c:59:3a:
                    b6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:15:EE:16:A6:53:18:47:71:BD:9D:50:5A:1B:6D:81:B2:C1:EA:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/64c04f54-9581-3d57-ac79-e867202a23c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:d580::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:04:62:12:96:cc:6e:53:32:06:98:c6:40:da:99:4f:4d:a2:
         f5:99:58:ab:ed:90:19:d1:93:b2:f6:7b:51:f6:e8:2d:8d:8d:
         f2:87:5c:c0:d1:20:cb:7e:2e:ff:fb:97:ae:b3:86:24:5f:02:
         fe:51:b7:97:e4:ee:e0:fb:bc:4f:e3:da:31:e0:22:40:73:c7:
         ad:43:8f:26:2a:6d:5a:95:52:c8:bc:bf:04:d9:7b:1c:81:4e:
         37:18:16:8d:88:09:72:de:11:4e:de:3c:6a:17:2a:5e:e4:78:
         61:2a:cb:0f:ab:3a:f3:ff:b8:f9:32:f6:70:a5:42:7d:9a:18:
         4f:73:5d:e1:1e:d6:22:0e:4f:c1:a5:84:b5:f6:43:9e:44:13:
         e2:b3:c9:e7:90:f4:90:9e:71:2e:8e:f9:b4:b6:14:30:74:4d:
         d6:42:f4:8a:bf:bf:24:9a:13:32:f2:05:bf:f9:20:10:c3:ae:
         2f:14:77:6d:17:d8:1b:ab:cb:10:70:8f:a0:47:00:d0:87:b5:
         a8:61:e5:d4:c0:54:8c:4c:a4:f7:d4:18:61:a4:27:11:47:66:
         f3:65:66:47:06:50:fb:c5:52:46:4a:a6:c7:6c:8b:24:bb:4a:
         b7:8d:7c:1c:a1:62:55:10:3b:b3:da:d4:30:58:f7:19:47:7f:
         60:ac:f2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 06:40:30 2026 by rpki-client