Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7e408b57-2156-3d5a-a4e0-a4f86cc8c07f.roa
File:                     7e408b57-2156-3d5a-a4e0-a4f86cc8c07f.roa (raw, json)
Hash identifier:          /nA0o0Lef+NX60uw/aUA3JXOkpLk3gdqpVrXNwhrSOA=
Subject key identifier:   86:04:EA:F3:01:13:30:86:9D:6F:59:A3:10:BC:B6:76:AA:2B:18:F1
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F480D405ABDE9B377681C6540
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7e408b57-2156-3d5a-a4e0-a4f86cc8c07f.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d80:b700::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:40:5a:bd:e9:b3:77:68:1c:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=8a6fda72-fb57-4334-8ab0-90a25858eab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a4:8d:2d:3c:fd:53:ea:6d:0c:a2:a7:0d:d8:
                    1c:40:40:b5:e5:2c:3f:fa:76:5b:e5:e5:a5:f5:45:
                    02:59:d7:af:6c:2f:f7:f3:40:4c:0f:e0:d1:0f:5a:
                    b6:da:2e:62:ba:7a:83:e4:50:05:65:03:5f:b4:3b:
                    ff:e1:d1:11:8e:40:a9:50:ae:83:1e:2b:69:c2:ad:
                    6b:01:7a:d6:9a:7d:1c:e9:d9:5e:e6:eb:04:35:c1:
                    7b:47:cf:8f:18:67:32:43:80:ae:d6:03:15:c8:51:
                    70:c3:64:a6:e6:0f:84:dd:c2:e7:c2:77:87:35:60:
                    ea:60:f9:d0:84:b0:95:fa:c1:5d:60:36:a6:32:32:
                    1a:4d:1d:69:c7:4d:b6:61:72:ed:00:1c:0d:d3:a9:
                    82:79:37:68:f5:a3:d8:50:24:cb:6f:e9:a0:a8:e8:
                    b5:0a:82:5b:84:96:16:77:d5:b3:29:aa:bd:44:64:
                    42:ec:cd:7f:66:d2:14:ff:97:33:64:f4:32:c7:5e:
                    e1:47:05:35:72:e3:99:90:a7:7b:b1:e6:f4:a3:19:
                    b1:3a:ff:a9:55:f4:62:01:4b:c4:83:18:ac:32:66:
                    a7:09:06:16:8e:97:58:75:7e:b6:ac:09:f8:9f:d3:
                    62:b5:b0:50:a0:ac:c4:f6:13:ae:df:b9:29:f7:97:
                    1a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:04:EA:F3:01:13:30:86:9D:6F:59:A3:10:BC:B6:76:AA:2B:18:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7e408b57-2156-3d5a-a4e0-a4f86cc8c07f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:b700::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:a9:8e:b7:3e:09:07:93:cc:73:4d:06:e7:2b:7b:74:bc:b6:
         8b:f9:cf:ad:dc:7d:31:03:ac:f0:fb:a0:6a:f7:7f:6d:85:f5:
         65:fa:f4:10:69:f3:d1:7e:e8:73:38:92:2b:4c:93:d4:54:1c:
         c7:14:2c:ad:c1:d5:13:cd:60:7a:f9:c3:a6:35:51:4e:6e:66:
         64:27:c9:a7:f8:2d:6f:1e:71:fa:7a:7a:15:54:d1:d2:4b:b6:
         d0:fe:28:c5:52:55:5b:8d:53:42:2f:77:fe:7a:ad:ca:2c:c5:
         57:6e:21:7b:03:4e:23:f4:fa:4c:1c:f1:74:56:23:0a:59:8c:
         37:f2:bf:a3:58:28:1d:e9:70:d9:de:b6:34:3e:fb:2a:25:93:
         90:50:8b:52:44:16:4f:5e:9d:2c:20:62:54:34:ec:d0:52:0c:
         c0:0b:f7:db:00:eb:65:01:69:13:8c:6c:a3:70:57:34:a5:f2:
         66:ee:91:c6:f8:3f:71:d7:17:5c:a5:dc:27:9e:6e:5d:5d:bb:
         96:83:04:9b:de:59:ef:7b:7d:c1:e2:a7:d6:d7:23:52:79:5f:
         5a:8e:41:5a:9f:25:99:a7:dc:e2:8b:f1:1c:5d:37:44:6b:af:
         f9:42:a0:a1:42:37:1f:96:1e:57:ae:b8:21:21:c1:bd:e4:b9:
         9a:a8:94:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:50:38 2026 by rpki-client