Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9edc4827-e966-3f00-aa69-d796303beda2.roa
File:                     9edc4827-e966-3f00-aa69-d796303beda2.roa (raw, json)
Hash identifier:          mST2etQdRqHQnGyodQo+JZmslJv9HXBeA5vUkAP4Xps=
Subject key identifier:   07:25:CB:38:D7:0C:54:E6:90:A7:C6:26:E9:C2:D8:BF:03:88:0D:7A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DAC4569C6D60DDFBC2B37A100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9edc4827-e966-3f00-aa69-d796303beda2.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     30036
IP address blocks:        2604:2d81:1f80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:69:c6:d6:0d:df:bc:2b:37:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=b67fce95-d5a1-477f-a68d-cb09ccdc8c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:41:d6:a1:99:68:c9:bf:0d:29:dd:3b:98:4c:
                    c6:13:ca:38:a3:fd:4e:68:91:c0:a4:d4:c2:f5:de:
                    32:79:1c:61:a0:c4:79:7b:96:07:86:0b:ea:86:7c:
                    4a:a5:3b:ef:53:7d:69:46:a9:e1:45:2b:55:ee:66:
                    2d:b9:e1:3d:55:a0:d1:21:6e:94:a3:d3:00:6c:7b:
                    b5:e1:be:3e:ca:f6:f0:d9:da:11:87:f2:3c:57:ac:
                    3f:89:dc:e9:cc:73:d9:9f:8d:b9:99:d6:91:36:88:
                    7c:11:e0:42:17:d5:31:67:73:c7:b2:83:77:cc:31:
                    c8:c3:c1:d8:f8:b3:0d:5a:63:b0:ed:3f:e0:1d:4e:
                    55:d1:bf:3d:13:d6:40:75:bd:d8:d1:39:7c:f7:94:
                    bb:2f:39:6e:16:aa:3a:47:bd:8f:0c:42:47:2f:84:
                    d6:5e:e9:ea:f0:d2:2d:b4:89:39:dd:55:f9:6b:0c:
                    10:7d:69:4a:61:49:bb:a5:e7:f1:4d:24:e0:09:c3:
                    18:c9:3d:58:57:38:38:54:65:97:5a:e6:91:e6:16:
                    59:e2:1b:c7:48:34:c6:82:b7:e2:63:6e:2e:a7:0c:
                    0f:26:92:71:e7:3a:8e:7e:a5:ed:1f:29:3e:6d:1e:
                    95:77:04:91:cb:ed:d5:ec:c8:af:79:39:3e:97:ae:
                    c9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:25:CB:38:D7:0C:54:E6:90:A7:C6:26:E9:C2:D8:BF:03:88:0D:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9edc4827-e966-3f00-aa69-d796303beda2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1f80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:45:64:85:7d:a6:7f:84:70:c4:a2:75:fd:14:ef:d9:b3:4c:
         5d:72:7d:f7:ba:5f:ee:f8:22:43:75:14:ec:2c:6a:d9:9c:5d:
         78:96:c4:bf:6d:6e:d8:42:f7:38:f3:b3:f5:7a:2f:ea:63:87:
         32:0e:58:d1:59:0a:a0:65:2b:d2:20:22:38:13:78:cd:96:ee:
         93:58:2a:25:30:35:09:13:2d:21:7b:17:b2:06:21:33:76:b5:
         15:6c:f8:c0:8c:59:68:c3:6f:ac:a5:f6:57:6a:0c:e3:b4:00:
         b2:19:84:f6:c0:48:d4:41:80:c0:00:73:5e:1a:d6:5a:67:e2:
         8c:51:0b:57:15:5f:58:b7:68:37:47:15:8f:e5:a0:e5:ee:a1:
         a6:59:36:ff:64:07:ee:2d:94:90:98:33:db:45:e4:d7:96:9e:
         6d:bc:60:36:0b:4e:a2:04:61:6e:14:19:1b:1c:a6:d2:29:90:
         e9:c6:59:d4:96:12:e2:7c:05:bf:1f:9e:bc:3f:34:b7:a7:dc:
         3e:ce:e4:8e:c8:72:62:2d:c1:54:5f:8d:a7:6d:a2:ef:e6:39:
         5f:59:bc:fa:78:e1:46:be:44:24:13:55:7b:b6:23:ad:c6:db:
         4a:08:e8:7a:a5:e8:51:e8:18:b2:b3:24:4e:a9:1d:91:bb:69:
         bd:86:36:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 18:24:42 2026 by rpki-client