Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ab545d06-4882-35df-ba3e-447533c4f6d4.roa
File:                     ab545d06-4882-35df-ba3e-447533c4f6d4.roa (raw, json)
Hash identifier:          8ZaY3R9RbX/LxdpYIVQEZ6w5B/rkxJxXXcN6+Mq4Mao=
Subject key identifier:   61:D1:FF:90:54:13:0F:80:C8:7D:F2:2D:9B:EE:E8:25:A5:70:51:D9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DF358C96E28A79133D3E815A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ab545d06-4882-35df-ba3e-447533c4f6d4.roa
Signing time:             Mon 25 May 2026 12:01:54 +0000
ROA not before:           Mon 25 May 2026 12:01:54 +0000
ROA not after:            Sun 23 Aug 2026 12:01:54 +0000
asID:                     19905
IP address blocks:        2604:2d80:9100::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f3:58:c9:6e:28:a7:91:33:d3:e8:15:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 25 12:01:54 2026 GMT
            Not After : Aug 23 12:01:54 2026 GMT
        Subject: CN=dfc474a6-00b6-4143-8b36-2e3d9b2a7212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:84:72:55:58:d6:81:fe:07:c5:79:73:20:28:
                    6c:76:d2:05:42:82:ec:1e:0d:97:28:57:45:a5:90:
                    c3:96:c2:3d:d5:25:a1:2e:d4:1f:66:2c:8b:2f:f9:
                    3e:4c:ee:be:2a:f3:a1:b4:d4:7e:d1:fb:ec:2a:ef:
                    d8:f1:bc:f0:16:1c:ce:30:7e:77:e9:5d:3a:d1:d5:
                    bc:ee:d0:d1:cd:bd:dc:f1:f0:fe:0b:c9:09:55:c9:
                    67:41:b6:9d:29:d0:f3:3a:54:25:d7:c0:fd:84:d0:
                    f7:2b:3a:52:28:05:ab:4d:07:e6:39:0b:f5:e1:f7:
                    ca:8e:d3:91:af:09:3f:15:54:f7:14:e2:60:b3:fd:
                    6d:21:c9:3c:c1:6b:7d:e0:bc:42:34:6b:8f:74:ee:
                    f0:1b:a0:e3:e5:35:50:11:77:dd:89:90:7d:57:03:
                    91:1e:a8:54:0c:c7:07:e5:66:6a:87:ff:cd:e1:d3:
                    9a:06:d7:68:3b:8b:6f:9a:25:7f:e0:1f:7b:16:0d:
                    4e:39:31:5d:0a:e9:ec:56:e7:05:e4:12:bf:fd:73:
                    f9:54:9d:af:aa:3e:54:c9:06:84:af:6e:8d:70:6c:
                    22:98:0f:c4:94:15:da:20:64:a1:c3:71:0c:81:9b:
                    ca:ea:9c:6f:bf:d4:61:90:4a:52:2f:59:b6:97:ba:
                    48:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D1:FF:90:54:13:0F:80:C8:7D:F2:2D:9B:EE:E8:25:A5:70:51:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ab545d06-4882-35df-ba3e-447533c4f6d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:9100::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:c3:ea:1f:65:4b:99:15:b1:08:ef:3c:a8:e2:b1:f0:dd:50:
         b6:0c:95:09:fb:14:09:ad:eb:ed:58:de:bf:2c:fd:9c:35:20:
         dd:ae:79:a0:4d:73:30:6b:86:5f:1f:65:cf:6d:78:9e:00:e4:
         8c:fa:d5:b3:d9:76:ae:c2:ad:c5:37:8c:82:8b:a6:49:a6:af:
         54:7a:a1:93:00:cd:88:cd:b3:45:50:c4:b8:38:e5:2f:28:1d:
         0e:87:a9:79:56:64:0c:5f:b4:d4:93:c3:74:70:61:e9:7e:34:
         65:4b:3a:04:d8:a5:f1:2c:81:77:d5:c9:d2:07:e9:b6:bd:3f:
         da:ad:cf:01:b8:0a:d3:19:ba:4d:a5:62:0b:c0:4a:07:2f:16:
         10:ef:2f:f7:8b:0c:fb:73:81:46:83:43:f8:27:13:48:dd:5b:
         94:de:75:0e:27:8a:ae:1b:f9:19:d5:2f:fb:84:bd:d7:89:53:
         08:31:53:97:31:33:4e:78:3d:d8:dd:eb:57:01:3e:ef:f6:03:
         6d:9d:a3:18:a1:ca:2a:c9:03:e4:2d:dd:55:1b:52:ae:0d:3c:
         42:32:52:6c:05:aa:4c:78:6c:d4:a3:b5:3c:ca:a0:ec:a5:a4:
         fd:b2:b6:a2:25:eb:ab:83:ac:fb:e5:ec:bb:1b:e1:50:75:d2:
         b3:5f:89:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:18:53 2026 by rpki-client