Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a677600a-64f7-3858-91a8-e43fe2ddcc59.roa
File:                     a677600a-64f7-3858-91a8-e43fe2ddcc59.roa (raw, json)
Hash identifier:          kUR/2kADixZK1QllQKV0isDbwco1GfoGfkm/k6y+6es=
Subject key identifier:   90:DC:BF:3A:91:FC:E8:C3:06:8E:FB:A1:73:E7:8D:09:DD:BC:53:1A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D237A4988A22C278802556480
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a677600a-64f7-3858-91a8-e43fe2ddcc59.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d80:5700::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:49:88:a2:2c:27:88:02:55:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=c353b676-4694-476b-a950-542ee3ffe618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:59:06:63:af:7c:ce:7b:d6:d9:57:20:e3:36:
                    34:16:6e:5f:e7:d4:fe:ed:99:44:52:44:85:8a:b5:
                    cd:de:82:5e:88:48:6d:aa:24:a6:cc:9e:4d:88:aa:
                    e0:db:44:f1:4c:b0:f2:0e:80:3f:91:05:ca:e6:91:
                    f5:f0:a9:b5:04:5a:be:e7:42:e2:1f:a5:12:fe:e1:
                    ac:eb:a0:fe:e6:26:79:90:eb:52:72:fb:0d:17:03:
                    df:c6:e2:3d:cf:6e:de:2f:94:c4:14:08:9b:b9:6e:
                    b1:7e:d2:25:01:e6:86:27:da:a2:d6:c2:ad:5b:b7:
                    e0:88:1a:71:ac:ab:47:a9:fd:9b:53:8d:f3:08:11:
                    83:27:5f:71:e1:dd:31:cd:26:f4:87:f1:05:ef:d2:
                    12:ff:bc:9c:52:54:c2:56:a2:28:39:b5:42:13:ed:
                    af:2b:4b:e6:6f:6b:b4:dc:03:27:90:35:f5:9a:df:
                    0b:10:41:44:58:ac:48:d5:26:c4:13:76:af:13:ba:
                    49:ff:b1:3d:8b:68:e2:44:de:f4:c4:5d:d9:53:a5:
                    fd:8e:18:af:79:a3:fd:eb:14:39:e0:e8:ff:51:7c:
                    8d:ef:af:c7:27:ed:94:d6:5b:1d:24:9e:07:20:1b:
                    89:04:15:27:b6:06:35:c1:9f:12:73:b2:eb:e5:ab:
                    f0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DC:BF:3A:91:FC:E8:C3:06:8E:FB:A1:73:E7:8D:09:DD:BC:53:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a677600a-64f7-3858-91a8-e43fe2ddcc59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:5700::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:24:93:9b:b4:c3:a5:e2:4c:11:89:d3:2d:b8:80:b9:34:61:
         6a:77:65:73:ab:4e:94:49:0f:d7:c2:fc:34:88:01:63:e0:dc:
         cf:a0:b6:e3:28:02:16:51:4d:8c:8b:83:11:38:70:0f:b9:53:
         d8:85:26:43:aa:17:8e:45:d3:be:c4:27:ef:13:af:b7:42:ab:
         ee:8f:fd:f9:b1:c8:09:7f:c2:c3:87:4a:90:65:8c:7e:cb:31:
         68:1c:45:89:fe:af:3e:aa:75:e2:65:f4:8b:01:4d:98:ff:1e:
         8a:53:9c:ab:5b:39:65:eb:60:c9:34:7a:b6:5f:25:54:ac:7c:
         5d:be:99:4e:51:ef:d7:8a:69:94:75:fb:1e:79:08:96:c3:b4:
         d1:9f:a0:06:36:89:ca:95:84:8a:de:3f:6d:33:67:53:15:23:
         43:c1:a1:bc:f7:99:64:53:f6:e9:c2:99:2e:fb:d9:ba:a3:b2:
         ae:d4:d8:c8:b6:3d:14:d3:6d:d1:55:af:65:b5:72:68:5b:22:
         5c:bd:f4:b8:c7:ce:f9:ac:0c:70:16:e5:5e:a8:10:93:d8:a7:
         54:82:4e:f7:d4:33:14:37:53:35:e2:f6:40:c4:26:bb:06:ed:
         c4:dd:58:7f:ad:b3:92:ef:dd:40:81:22:f5:96:cf:26:2c:92:
         c6:5e:48:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:40:39 2026 by rpki-client