Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9bc1dec5-04cb-377b-a94e-5c0428717822.roa
File:                     9bc1dec5-04cb-377b-a94e-5c0428717822.roa (raw, json)
Hash identifier:          1eg29RpoIsiT9dLpl807ZDXxu+P25rzePwLuW92rY7A=
Subject key identifier:   F5:77:73:B5:F2:91:FD:74:48:7B:0F:68:35:4E:F7:B6:EE:DB:15:72
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79D1A298EF088B764ED44D7
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9bc1dec5-04cb-377b-a94e-5c0428717822.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:b580::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:1a:29:8e:f0:88:b7:64:ed:44:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=75c340ac-e215-49a8-aba8-304b47249bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b8:79:06:61:95:bf:20:58:7b:25:36:79:f6:
                    ba:95:36:d6:79:ce:1a:ec:e0:14:0e:51:26:09:60:
                    8a:9c:35:31:1f:16:13:a9:ac:37:43:f1:7a:9f:90:
                    04:da:a6:10:4e:1a:78:5f:e0:6a:26:4f:b6:37:f5:
                    47:69:48:65:8f:d3:aa:76:8e:8e:e4:54:5e:0d:96:
                    56:be:da:f8:dc:84:9c:9c:7a:26:f9:58:f5:fc:df:
                    6e:07:88:5f:45:30:0b:8f:49:a6:a5:fc:aa:9f:7a:
                    e7:72:8f:db:b6:5b:32:ab:51:58:d4:63:b6:a5:94:
                    40:31:4e:ce:59:1e:74:70:fc:35:aa:3d:37:ac:38:
                    17:e2:9b:eb:30:35:43:05:dc:c0:f3:4d:97:25:94:
                    57:5d:2a:5d:85:7d:90:fb:54:3e:43:3a:ec:50:f1:
                    75:36:42:71:57:de:7c:62:83:8e:c4:90:e4:44:d7:
                    6f:ad:06:60:e9:36:74:c8:a6:6b:a4:0b:cf:79:86:
                    58:18:55:61:e6:e6:eb:95:6e:96:83:1d:07:14:33:
                    18:d0:34:18:8e:f7:5f:6b:7a:3f:08:71:81:3c:90:
                    f5:47:24:fc:93:8f:b1:e6:04:e3:66:de:83:44:b3:
                    5b:c6:ca:8e:51:e5:a3:4d:67:84:69:da:a6:44:62:
                    10:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:77:73:B5:F2:91:FD:74:48:7B:0F:68:35:4E:F7:B6:EE:DB:15:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9bc1dec5-04cb-377b-a94e-5c0428717822.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:b580::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:f4:c4:1d:77:18:21:21:cf:1a:b5:06:15:4d:44:f2:e6:8e:
         4d:f5:26:92:66:27:8f:a1:b2:76:45:27:a3:e5:85:00:ed:3b:
         0c:66:37:b4:77:2c:47:7d:90:79:6f:42:36:4a:39:3d:ed:f3:
         63:5e:ba:82:54:ad:6f:29:96:43:5b:98:ba:df:62:93:a4:79:
         9c:a5:d2:28:80:83:f6:fd:3e:84:56:ec:89:0a:b8:ea:69:fd:
         88:9d:b3:1a:e5:50:b3:7a:a3:22:d7:ea:86:f0:35:02:69:79:
         5f:0f:fd:e2:65:42:af:c8:32:6d:96:6b:4c:64:36:40:83:56:
         55:7b:70:d7:b3:8f:8f:35:c6:9f:a8:bb:15:c5:16:3b:c0:d9:
         c1:9a:2f:d4:c7:68:53:14:b4:85:08:0e:14:38:73:3d:b9:86:
         5c:ee:6b:65:ad:6a:e8:ab:86:91:a2:c3:a2:f7:c2:b1:18:40:
         0d:8f:c7:82:cc:5e:df:53:ff:93:c5:b0:cd:8d:45:c3:2c:e6:
         65:91:f9:3a:ed:af:71:89:be:31:06:92:44:b9:ce:62:14:a8:
         ec:15:d9:e6:7a:fb:0c:9a:a0:41:b9:f5:d9:30:d7:f8:af:76:
         7f:04:f4:79:40:c8:e6:49:98:97:9a:63:7f:a4:79:5f:3c:63:
         76:5d:7b:50
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnRopjvCIt2TtRNcwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NzVjMzQwYWMtZTIxNS00OWE4LWFiYTgtMzA0YjQ3MjQ5YmYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7h5BmGVvyBYeyU2efa6lTbWec4a7OAUDlEm
CWCKnDUxHxYTqaw3Q/F6n5AE2qYQThp4X+BqJk+2N/VHaUhlj9Oqdo6O5FReDZZW
vtr43IScnHom+Vj1/N9uB4hfRTALj0mmpfyqn3rnco/btlsyq1FY1GO2pZRAMU7O
WR50cPw1qj03rDgX4pvrMDVDBdzA802XJZRXXSpdhX2Q+1Q+QzrsUPF1NkJxV958
YoOOxJDkRNdvrQZg6TZ0yKZrpAvPeYZYGFVh5ubrlW6Wgx0HFDMY0DQYjvdfa3o/
CHGBPJD1RyT8k4+x5gTjZt6DRLNbxsqOUeWjTWeEadqmRGIQRQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPV3c7Xykf10SHsPaDVO97bu2xVyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWJjMWRlYzUtMDRjYi0z
NzdiLWE5NGUtNWMwNDI4NzE3ODIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgLWA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACP0xB13GCEhzxq1BhVNRPLmjk31JpJmJ4+hsnZFJ6PlhQDtOwxm
N7R3LEd9kHlvQjZKOT3t82NeuoJUrW8plkNbmLrfYpOkeZyl0iiAg/b9PoRW7IkK
uOpp/YidsxrlULN6oyLX6obwNQJpeV8P/eJlQq/IMm2Wa0xkNkCDVlV7cNezj481
xp+ouxXFFjvA2cGaL9THaFMUtIUIDhQ4cz25hlzua2WtauirhpGiw6L3wrEYQA2P
x4LMXt9T/5PFsM2NRcMs5mWR+Trtr3GJvjEGkkS5zmIUqOwV2eZ6+wyaoEG59dkw
1/ivdn8E9HlAyOZJmJeaY3+keV88Y3Zde1A=
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:45:08 2026 by rpki-client