Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/932646c2-8ecf-38f3-ac5f-c96e10209774.roa
File:                     932646c2-8ecf-38f3-ac5f-c96e10209774.roa (raw, json)
Hash identifier:          qb3+6qYVQlAeQzoEgP8uw2qVXZuE9lR/5B/E6O1ljQw=
Subject key identifier:   98:14:18:C3:2F:F9:EE:8F:20:8C:A2:25:BB:0F:5D:48:51:AA:97:E3
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D1B1A0672B239CF0110FAE2E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/932646c2-8ecf-38f3-ac5f-c96e10209774.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        2604:2d80:d500::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:06:72:b2:39:cf:01:10:fa:e2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=13b15b29-0c70-449c-b64f-add0845fd350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e8:e1:7a:ee:5f:af:22:9f:00:aa:50:45:20:
                    cf:e3:0e:3f:0e:ae:ea:09:63:f3:5a:d3:19:1b:a0:
                    ad:a8:41:23:cb:1c:97:c9:38:dc:be:dc:1b:ee:7d:
                    84:1d:40:66:ea:0e:7b:c0:c6:5b:2b:d2:93:3d:4f:
                    07:d4:d9:2f:1e:07:45:22:a9:81:a2:76:ff:7f:09:
                    27:68:6d:81:11:cc:8f:bf:7d:a0:de:69:89:6a:8d:
                    86:4f:d2:7e:85:ea:9b:af:04:c4:d0:ce:1d:45:8b:
                    99:07:68:af:70:6c:bb:3f:95:a6:a3:79:b8:03:93:
                    96:ef:4f:f7:2e:3c:a0:37:5d:2f:ba:b1:0c:5b:b2:
                    25:47:ab:93:c9:1f:2e:d3:79:9f:cd:ba:5f:c4:ef:
                    fe:aa:9e:ed:4b:66:c6:e3:e1:5a:45:a8:f4:46:58:
                    62:d5:25:6f:46:a7:9b:42:ba:0a:32:23:07:35:7f:
                    2c:a6:c1:bf:f3:b2:21:e5:38:b5:02:61:67:76:5f:
                    9f:bc:75:5d:79:23:e2:84:f7:63:65:68:63:31:61:
                    5d:39:0a:f9:1a:a4:84:d4:bb:be:a9:19:55:73:6d:
                    93:99:88:ef:8b:d4:4a:6a:43:95:a4:4c:e8:39:56:
                    d1:c3:1e:20:86:d5:7e:a4:06:72:0a:be:d5:03:1c:
                    47:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:14:18:C3:2F:F9:EE:8F:20:8C:A2:25:BB:0F:5D:48:51:AA:97:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/932646c2-8ecf-38f3-ac5f-c96e10209774.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:d500::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:55:04:62:a5:51:9c:b4:fa:95:0c:57:93:79:98:cd:74:11:
         9b:50:2e:9b:0b:84:6e:6b:01:55:cb:36:a8:c4:2c:07:5b:31:
         2d:63:b1:64:03:5a:cc:5c:3e:66:8c:b9:44:2f:e9:69:1a:9d:
         d2:55:4b:07:52:26:98:18:4d:9c:43:86:32:a6:02:fa:0d:77:
         e8:ec:59:d8:bd:2b:e9:35:4c:ce:ec:b6:bb:eb:83:1d:20:c3:
         11:c8:0d:4a:8f:80:b3:7d:a1:41:c5:26:ae:b2:af:f9:ff:2d:
         89:f7:1c:df:d9:3f:3b:a5:11:2d:3f:12:86:de:c1:de:0f:80:
         10:be:a6:91:1d:27:95:40:e9:58:44:0e:de:3d:8d:76:15:80:
         fc:a5:be:e6:94:83:e6:25:b7:98:95:a9:2d:47:f5:a7:d4:a1:
         a1:54:c4:35:17:6b:ea:5a:a4:56:90:0b:5f:ee:fa:a7:ed:7f:
         37:f5:14:31:bb:7d:c3:19:a7:51:03:36:11:d4:bd:40:03:8a:
         fe:02:9e:eb:36:f7:ce:04:18:36:53:a3:d0:f6:f7:c4:e5:b9:
         19:8d:c8:23:95:c4:6f:69:d8:ad:76:30:ab:d7:b4:78:10:c0:
         0a:54:fe:21:2f:e2:6a:68:bc:ad:b0:e8:17:88:a0:74:7f:04:
         2e:1a:d1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:43:35 2026 by rpki-client