Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7730a1ca-e343-3d5c-82eb-7284fca3efbf.roa
File:                     7730a1ca-e343-3d5c-82eb-7284fca3efbf.roa (raw, json)
Hash identifier:          P3iVikw/++t795KOvdojxRf9njqnyW1NIbnpFAUdVT4=
Subject key identifier:   62:C4:8B:95:90:1E:0E:8E:FE:70:88:F3:C3:08:15:ED:8D:D1:0B:A2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D1B19EEB393A7C50C8F41A760
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7730a1ca-e343-3d5c-82eb-7284fca3efbf.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        2604:2d80:d900::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:19:ee:b3:93:a7:c5:0c:8f:41:a7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=ba41a632-58f1-43a9-a076-b8abcb2e66bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c4:a0:66:8d:c0:24:2a:f7:6d:b4:d4:f4:7d:
                    03:66:63:13:e5:22:de:2d:c0:8a:66:74:bf:41:31:
                    b9:35:03:97:4b:cb:0c:b5:33:0e:7c:9e:94:41:4f:
                    a2:fd:ac:61:de:dd:48:33:15:75:c1:12:50:4f:d4:
                    41:6a:45:a7:61:56:c8:b9:11:fd:e8:3a:ac:60:35:
                    e1:ca:d5:0b:b2:bf:1a:48:5e:b7:05:52:08:31:ab:
                    3a:1d:3c:85:ab:ae:1f:df:6f:73:28:a1:c6:93:1f:
                    0d:ec:bc:2e:55:84:34:af:bf:37:85:a9:79:fa:f9:
                    7c:4f:9a:bb:48:1a:72:03:14:5d:98:3a:0a:c4:f3:
                    a1:34:84:26:80:c3:f3:26:68:1e:37:74:e0:ce:a9:
                    42:24:f9:d9:76:37:de:21:f0:19:3b:a5:5b:09:72:
                    b4:e4:c0:d5:57:fb:ad:bd:5f:0a:06:49:36:b1:f7:
                    9d:f1:3a:78:5d:d1:b3:c7:4a:54:35:b6:64:b0:0b:
                    81:f4:7b:5e:09:42:7b:35:35:63:22:78:17:da:38:
                    23:ea:cf:61:75:8f:88:c6:77:25:d6:df:ce:58:89:
                    13:0f:16:08:e7:ef:4e:0a:28:04:61:48:e4:bd:9f:
                    ac:6d:bc:9d:5a:a0:61:2e:3f:96:7e:3e:d2:a9:3a:
                    e8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C4:8B:95:90:1E:0E:8E:FE:70:88:F3:C3:08:15:ED:8D:D1:0B:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7730a1ca-e343-3d5c-82eb-7284fca3efbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:d900::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:3a:ba:86:cc:57:78:af:2a:36:7b:fd:d2:c7:cd:c8:28:56:
         84:0b:4e:d8:5a:3c:a2:82:7e:b2:61:d0:1b:02:63:18:48:b8:
         fe:3a:94:87:d7:18:74:31:e5:96:9d:d3:fd:95:e1:b6:89:b4:
         bb:01:d2:13:e8:22:73:10:e5:76:db:19:db:5c:25:e1:20:7e:
         67:9f:49:da:fb:2c:84:64:00:96:14:f9:9d:91:f8:fc:4f:d8:
         cf:ea:3c:01:78:88:05:01:b1:03:b5:5f:87:e3:d0:bd:e6:4b:
         51:9e:92:7b:f4:72:10:3e:20:a0:2d:99:36:e4:8a:d3:78:ec:
         bc:39:11:b5:94:d8:53:01:6f:98:54:9c:1e:b5:63:da:db:b6:
         f9:f9:49:9f:e5:26:e4:ad:22:c9:fe:d2:eb:c8:30:a8:00:20:
         1e:1e:fa:12:1e:26:4d:e2:fd:ce:c7:c6:7d:55:58:a9:ba:20:
         71:43:c8:e3:f1:0c:b3:a2:56:4b:dd:80:ec:31:6a:3b:13:0e:
         47:67:a3:f7:9c:1e:30:8d:f7:53:64:ea:2d:5a:bf:fb:bb:5b:
         f0:8c:91:2d:9c:65:aa:4d:e9:ac:a9:de:b6:59:84:ff:7b:40:
         59:96:0d:b1:24:73:18:4f:31:a1:f4:14:b6:ba:d6:55:fe:c1:
         47:3d:6f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:40:34 2026 by rpki-client