Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6d354add-41fe-34b3-bb3b-70344024bd67.roa
File:                     6d354add-41fe-34b3-bb3b-70344024bd67.roa (raw, json)
Hash identifier:          Pyml3qQX7KlC+5idKJl7KqF2+50dClle2asUk1FfC4k=
Subject key identifier:   DC:C9:26:58:E2:E5:6A:3B:ED:74:B2:57:40:62:5B:79:30:A8:D8:10
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D237A185D0F18E5EB7CF24B80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6d354add-41fe-34b3-bb3b-70344024bd67.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d80:2680::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:18:5d:0f:18:e5:eb:7c:f2:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=98ed3bbd-cfb4-4218-8c40-76d0064416a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:80:29:8e:85:f8:75:2d:0a:d7:95:6c:a0:33:
                    9d:a9:05:4f:3b:b2:b0:ad:8c:68:88:3e:e3:06:49:
                    99:a5:a6:e8:fe:ad:b0:fc:e6:dc:4c:df:fc:82:ab:
                    4b:c9:a5:1b:07:3f:42:a2:02:a6:8c:4c:f9:85:22:
                    74:21:b2:ec:e0:27:47:c9:f2:00:1c:51:30:9d:dd:
                    36:53:ec:f0:a9:1d:48:6d:55:fc:63:d0:ce:36:1e:
                    c6:05:f7:13:af:a4:c1:b8:f8:9c:f0:f9:85:6b:97:
                    13:7d:61:7d:66:7f:ef:aa:f1:ca:58:9e:de:50:a4:
                    8f:81:78:2a:15:aa:d2:93:a6:00:4d:5b:91:d8:52:
                    d7:3f:6a:f4:a8:59:5c:64:1b:d1:03:f6:53:63:cb:
                    7d:be:06:4e:8b:8f:7b:70:cf:e7:23:26:ad:5a:0f:
                    96:66:f1:46:67:64:87:cc:45:79:5a:7b:81:57:4f:
                    51:10:39:a4:51:f5:57:4f:2b:8b:8c:10:3e:7d:1c:
                    6f:6a:31:ca:ea:75:07:0b:76:2e:9b:17:31:f2:cc:
                    94:80:aa:06:54:b6:46:52:31:65:a1:77:30:07:63:
                    a2:6a:c9:3c:6e:f5:84:8b:25:cb:ea:ce:11:ca:08:
                    8f:10:2c:20:99:e0:ef:8f:b2:a5:cb:30:c3:2e:90:
                    8b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C9:26:58:E2:E5:6A:3B:ED:74:B2:57:40:62:5B:79:30:A8:D8:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6d354add-41fe-34b3-bb3b-70344024bd67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:2680::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:58:bf:a4:3f:62:5b:d0:4b:4a:ea:48:01:c9:c5:21:bc:b1:
         16:5b:38:16:44:a8:4a:00:b6:f5:d5:d3:f8:a1:d4:d2:77:c1:
         5c:4d:bc:bd:57:fe:b2:f1:63:bd:96:f5:30:b5:3d:7b:07:d0:
         f7:0d:fb:88:0f:3d:58:59:9c:05:04:ef:dc:23:c3:31:a1:09:
         dd:e2:f6:c2:eb:87:2b:38:20:e7:da:90:7b:6a:6c:75:33:9f:
         6f:c3:15:dd:50:8b:ae:47:c9:11:45:8f:8a:05:bb:f9:40:9d:
         40:cf:ea:7e:8d:a0:55:c7:e3:de:1c:58:d9:8a:0a:c1:a0:b0:
         fd:69:cf:7f:b7:59:f2:4e:01:c4:12:e0:14:eb:57:bc:7f:71:
         ac:bb:0a:cd:31:91:6b:d6:9e:16:7b:02:4e:9e:80:a7:30:9f:
         ac:a5:29:d2:92:6f:3e:31:10:23:0a:27:96:ac:1b:a4:c9:f3:
         c7:cd:85:9b:68:1e:cb:d4:38:f2:c2:73:ac:f3:a1:d5:f1:50:
         cc:00:ba:cc:7e:06:73:45:1e:fa:b6:a2:a0:c2:7f:61:ec:df:
         9e:ef:7e:1f:67:41:69:95:37:7f:7c:4f:53:38:62:06:e8:3e:
         5c:2b:05:52:87:70:8e:30:06:1f:7f:35:6f:4f:a9:96:27:fd:
         c4:01:d1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:44:16 2026 by rpki-client