Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1fd8575-561a-3ebd-b432-952e8c925344.roa
File:                     c1fd8575-561a-3ebd-b432-952e8c925344.roa (raw, json)
Hash identifier:          3bRsn4dZNsomGZts1dmg85853jfCh8jQ81IhJ74Asos=
Subject key identifier:   F9:F6:83:91:D2:27:92:7B:DD:30:C5:19:FE:52:04:3B:C5:3E:92:9C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E428F1D5F13EF777DB2539B00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1fd8575-561a-3ebd-b432-952e8c925344.roa
Signing time:             Mon 22 Jun 2026 21:00:12 +0000
ROA not before:           Mon 22 Jun 2026 21:00:12 +0000
ROA not after:            Sun 20 Sep 2026 21:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d81:2480::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:8f:1d:5f:13:ef:77:7d:b2:53:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun 22 21:00:12 2026 GMT
            Not After : Sep 20 21:00:12 2026 GMT
        Subject: CN=b46416ff-f6eb-473e-964b-16df04f92d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ed:26:80:8a:23:88:98:3b:cb:26:ff:b3:74:
                    4d:80:a6:b2:20:58:db:83:bc:8e:ad:42:db:72:b7:
                    cc:3f:2f:6a:6b:69:c0:6b:66:0b:73:f7:7b:d0:0e:
                    e8:9f:3d:8f:73:9e:89:a8:be:ea:04:b4:48:14:bf:
                    32:73:7b:f7:3e:da:16:89:bc:96:99:13:15:af:e1:
                    fc:88:6d:ac:3a:2c:17:f3:7d:03:4f:0b:50:85:59:
                    be:3d:57:29:0c:70:f2:2e:57:63:83:b9:89:9e:fc:
                    cb:6a:d6:02:1c:02:18:b2:a2:94:23:3d:f9:a6:ce:
                    f1:54:f2:a6:3f:58:4a:e8:0b:82:cd:b0:71:c2:1d:
                    fe:ec:3a:c0:f2:36:a3:39:ed:e0:3a:d9:68:cc:79:
                    59:06:21:9d:51:e5:72:80:fd:4b:36:aa:91:d7:32:
                    5b:de:a3:ed:fb:2d:e1:a1:25:43:c8:89:ac:cb:c5:
                    ab:75:06:35:da:6e:57:92:d5:58:cb:c6:b1:c7:ce:
                    8e:cb:21:8c:a5:b7:6b:eb:59:55:42:58:23:58:a7:
                    62:d2:3f:1f:16:ac:52:3e:56:81:17:16:bf:4e:19:
                    8c:7e:ca:04:59:28:84:69:c2:c1:c8:34:56:34:b6:
                    3e:f0:42:7a:78:26:32:73:b4:ce:ef:6a:58:9c:c7:
                    42:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F6:83:91:D2:27:92:7B:DD:30:C5:19:FE:52:04:3B:C5:3E:92:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1fd8575-561a-3ebd-b432-952e8c925344.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:2480::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:3e:03:11:b8:23:b6:e4:99:e5:0d:5b:6d:58:55:0f:8d:f4:
         d8:fc:ed:56:df:4c:08:a1:f8:a8:25:77:fb:ff:53:c4:3c:fd:
         6a:6e:a1:bc:bb:16:4c:03:80:50:7f:c1:70:54:f5:a4:52:de:
         cb:b3:80:01:f8:ad:0c:b1:85:ac:e6:e0:3d:4e:12:2e:8c:d5:
         6b:ad:af:7b:81:28:16:bb:9f:22:83:4c:92:d3:6a:82:9f:a7:
         b5:06:2c:2b:97:08:ea:a4:34:bf:4c:ef:cd:c6:30:ac:c4:db:
         4c:0f:c9:3d:18:b1:35:41:7e:d5:dc:5f:da:e8:78:20:84:c7:
         97:24:6c:76:7e:7a:a6:ce:12:0c:89:94:47:be:68:4a:92:84:
         53:8b:3f:6c:35:ba:57:52:79:50:02:a7:3c:15:76:ee:c9:f6:
         f9:c5:9e:7e:ac:df:fe:a6:fe:33:8d:c8:66:c3:21:dc:c7:19:
         81:0a:36:06:b2:dc:74:84:d8:b4:5d:06:dc:50:f9:6d:32:57:
         bf:e8:56:e0:29:77:48:80:e8:88:bd:b7:92:20:38:51:54:00:
         4b:88:7b:cc:75:75:d9:0c:91:d9:e3:a9:18:93:2b:74:67:3d:
         9c:e1:f3:ed:9d:0a:ea:0f:4a:1e:90:48:3b:dc:40:9e:d6:33:
         b8:e6:58:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 03:19:19 2026 by rpki-client