Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b3b36a6f-7823-353f-b2f2-01f7e007a168.roa
File:                     b3b36a6f-7823-353f-b2f2-01f7e007a168.roa (raw, json)
Hash identifier:          ZKel3vZcfli6b/Jv2UEALEc/p8We7euuksNuMU1Y6Vo=
Subject key identifier:   39:E1:F3:C8:F5:27:FC:9F:CC:AE:DC:34:86:2A:55:AB:76:BA:8C:CD
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E2D9EFB3A69131C79EEBA1C00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b3b36a6f-7823-353f-b2f2-01f7e007a168.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:d300::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9e:fb:3a:69:13:1c:79:ee:ba:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=1fb8b4f3-649e-43ed-99bc-c577c4027e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:03:49:0c:20:5f:b9:2e:dd:86:fc:fd:0c:c2:
                    d8:44:c9:bb:ca:d9:9a:b4:2c:18:3b:6b:3e:c6:e7:
                    e6:f2:1a:c3:4f:3e:96:d5:c9:2d:f7:44:bc:29:09:
                    86:cb:34:92:d9:fa:0d:4e:44:89:dd:29:0c:e3:86:
                    a1:76:10:a4:90:1a:40:0c:25:eb:63:b6:53:3e:a6:
                    ee:9c:2d:28:81:8b:d1:f9:33:87:04:fc:9a:2e:28:
                    35:55:bc:ad:93:d9:2d:5d:45:c0:8c:ac:5d:b3:db:
                    19:53:34:b8:76:58:93:4e:d5:0c:c4:05:86:42:be:
                    b9:32:6b:cf:f0:34:72:d4:97:98:a8:ca:87:93:5f:
                    8c:8d:1f:31:4a:26:c3:3e:ff:b2:65:68:b0:f6:1f:
                    dc:d6:28:96:f2:31:64:06:63:87:dd:2b:69:b5:8b:
                    b1:75:78:93:be:da:c5:15:01:1a:18:91:7a:49:41:
                    dd:02:b0:ce:20:f3:ad:f9:33:31:9a:aa:f0:fc:46:
                    1b:c0:a5:16:70:0a:08:2e:03:f7:5c:d9:24:12:b4:
                    a2:98:57:f4:55:7c:c5:43:91:fd:c3:cf:f3:31:2d:
                    96:3c:cb:02:16:dd:db:cf:e3:18:d9:e6:f2:19:37:
                    1e:6c:95:49:7d:39:ac:56:2c:ab:d0:fe:6f:c5:9d:
                    bd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E1:F3:C8:F5:27:FC:9F:CC:AE:DC:34:86:2A:55:AB:76:BA:8C:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b3b36a6f-7823-353f-b2f2-01f7e007a168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:d300::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:fa:96:2f:3e:ac:da:58:2c:82:93:94:21:16:47:67:5b:a2:
         c1:b7:db:10:69:d8:d1:51:f2:a2:15:20:18:20:d3:2e:b7:f1:
         f7:7d:ea:35:e7:10:14:2a:74:fc:a8:68:1a:27:f6:58:7f:d8:
         9f:83:71:f4:b8:95:8b:16:56:6c:ea:82:5c:13:1f:83:5a:54:
         9b:6b:ad:04:a8:67:01:ec:7d:6a:10:42:50:ea:c6:f9:f9:0b:
         b5:c9:32:95:aa:eb:60:9e:be:75:da:9e:36:d8:78:65:14:a7:
         b9:3c:c5:7b:6f:50:84:23:d8:8e:d7:4c:cf:10:e9:d9:c3:14:
         1c:2e:10:a6:f2:24:da:93:f1:aa:31:2b:cd:a6:ba:06:93:5e:
         7f:2b:d1:93:5a:36:84:ae:b8:4b:34:e8:ab:f0:11:69:6f:6d:
         6e:a2:5b:97:9b:0d:aa:e9:e7:41:12:44:8c:3c:f2:15:3f:9c:
         21:7f:78:85:d0:83:7f:d6:77:43:30:85:38:de:be:5c:86:d2:
         21:71:fb:53:a7:40:d4:72:58:95:f5:57:7d:c7:de:84:23:c1:
         0c:63:73:80:f8:4e:c1:5a:94:ce:f0:ea:07:06:10:07:64:5d:
         ef:d5:6c:cf:05:19:57:20:75:ce:9d:8b:80:d9:8c:d5:25:a4:
         ca:2d:9b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 03:16:44 2026 by rpki-client