Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/93117be0-da21-3684-97df-26fa2f1d042e.roa
File:                     93117be0-da21-3684-97df-26fa2f1d042e.roa (raw, json)
Hash identifier:          ebmf00VitIHPHKtyOcqvQ74HlL9s9YXhhuO12LOfgeQ=
Subject key identifier:   34:E3:4B:E4:1D:68:81:71:D7:5F:DD:80:19:9A:9C:0F:02:3B:8C:2D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D143D66A36093F1ABD2B3D180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/93117be0-da21-3684-97df-26fa2f1d042e.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     19905
IP address blocks:        2604:2d81:1c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:66:a3:60:93:f1:ab:d2:b3:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=a1f4690c-5827-413f-933c-7becdd41cf3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2f:7c:10:07:9a:f3:34:e7:fc:0b:11:b2:22:
                    9e:76:b1:5c:be:38:8f:92:5e:0a:1f:2b:95:1d:59:
                    92:89:d8:99:78:31:08:cb:a4:7a:0e:2c:fe:32:42:
                    1c:47:cb:1e:a5:b3:c6:53:0e:93:a3:f0:01:40:99:
                    7b:14:4b:9f:5e:d6:92:2a:bf:81:e6:8e:ce:72:ac:
                    8b:93:91:5e:a2:4f:f8:67:e5:40:4f:7f:b9:e6:a1:
                    d7:5f:a2:3f:18:e6:01:60:60:9f:f8:98:b8:1e:9e:
                    44:5b:a9:fe:f8:8c:a8:e1:be:fb:d8:bf:4d:16:6a:
                    90:9b:16:6f:1b:95:40:33:89:38:a8:0c:b7:2d:c6:
                    94:90:94:7e:34:17:d5:ae:a0:16:95:a2:17:6e:20:
                    84:91:26:a2:91:b7:60:56:e9:7d:6f:7a:3d:40:4b:
                    8a:c4:ec:69:13:6d:3e:0a:e6:e5:88:4a:d0:9d:8a:
                    2b:91:ea:ab:da:64:9e:46:e3:ef:3d:1c:98:60:bd:
                    4f:41:a0:88:66:8d:f9:a1:98:f3:fd:49:98:97:aa:
                    45:3f:18:67:2b:ae:20:7d:a6:e5:fc:da:32:09:29:
                    2a:eb:ca:0e:ba:ac:55:c7:1e:c8:dc:52:4d:37:17:
                    e4:10:e8:c5:04:fe:ab:f1:6c:5e:8e:b4:6e:69:14:
                    86:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E3:4B:E4:1D:68:81:71:D7:5F:DD:80:19:9A:9C:0F:02:3B:8C:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/93117be0-da21-3684-97df-26fa2f1d042e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:81:12:b9:f7:14:41:b4:06:6e:b9:b0:36:9d:ed:77:fd:b5:
         e7:a2:31:02:ff:f5:8b:b7:01:02:1a:6b:92:7e:b8:a7:7c:7f:
         ea:c1:db:8b:ea:ba:15:f2:03:93:b5:6b:7f:c5:76:ea:26:dc:
         38:53:c6:81:be:40:e7:00:30:f1:8d:d6:5b:07:05:ea:c2:33:
         fc:35:77:37:7a:21:eb:42:d4:91:67:de:96:46:db:dc:fb:67:
         e0:7b:8c:5f:fc:0a:be:5f:88:39:70:97:ab:79:ae:81:d7:e7:
         76:98:f4:17:ae:6b:a4:64:f2:18:b6:e3:7a:a8:b6:ac:80:80:
         7c:6f:4a:d8:86:e0:40:6f:6d:82:d4:48:0c:bc:d3:8e:0a:cb:
         17:33:e6:cb:f2:f0:c9:81:c1:ce:00:87:34:76:4d:30:78:2f:
         76:ce:54:dc:de:94:63:44:cc:a3:17:f6:49:b3:c5:c3:c1:3d:
         df:e0:93:0b:0a:23:b8:03:39:08:4d:0b:36:1f:55:b8:e6:52:
         9b:07:9b:bf:9b:61:0e:d6:c7:05:b5:e2:6c:4c:c1:af:aa:19:
         95:27:29:27:99:ca:4d:32:87:bc:b5:b2:13:40:b9:2a:8a:28:
         5a:3a:9b:82:e9:30:61:fb:d7:6f:e3:b4:64:e2:f7:69:1f:5f:
         ae:22:8c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:41:37 2026 by rpki-client