Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd5a6a16-7404-3de1-b13f-09f29a39842e.roa
File:                     cd5a6a16-7404-3de1-b13f-09f29a39842e.roa (raw, json)
Hash identifier:          7ZuBkdRLy+PQ++mIJ5jlhdEq48kgUmCsqlkPfynf4og=
Subject key identifier:   5F:E8:78:17:CD:4E:84:AE:C0:25:DC:FF:8F:32:8A:7A:06:85:05:A4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D9B8564FD5A5759BF9675C620
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd5a6a16-7404-3de1-b13f-09f29a39842e.roa
Signing time:             Fri 24 Apr 2026 01:00:23 +0000
ROA not before:           Fri 24 Apr 2026 01:00:23 +0000
ROA not after:            Thu 23 Jul 2026 01:00:23 +0000
asID:                     19905
IP address blocks:        2604:2d81:3e80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9b:85:64:fd:5a:57:59:bf:96:75:c6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 01:00:23 2026 GMT
            Not After : Jul 23 01:00:23 2026 GMT
        Subject: CN=6abb63aa-a2dd-4548-ad96-6b3cf6e4572d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8c:cb:fd:25:f3:bd:0a:7f:95:0d:be:66:94:
                    10:c8:09:c1:bb:68:bd:81:15:3d:14:4e:55:99:ba:
                    e7:0b:43:69:3a:91:b0:e9:81:85:94:77:47:34:c6:
                    38:c3:0e:d3:c6:80:4e:3b:23:b5:50:06:78:15:cc:
                    40:2f:78:2e:65:3e:62:8b:23:66:d3:e5:27:11:4a:
                    16:9f:e3:ec:05:23:c1:e6:6d:e6:18:a7:c5:f1:3e:
                    82:bb:35:72:24:db:b1:f7:13:22:cc:29:f2:16:19:
                    c6:b7:89:31:a7:05:4d:85:db:62:eb:3b:c9:65:a1:
                    68:23:93:84:49:50:4a:2d:b7:e5:42:ca:c7:9d:01:
                    59:a7:e4:13:f7:5d:67:84:8b:41:03:ee:0c:b3:89:
                    c4:57:d4:50:39:80:3e:ae:34:aa:ba:f8:a5:36:93:
                    31:39:30:ff:8a:87:45:50:98:aa:e6:f1:97:30:ba:
                    1f:31:e0:62:21:90:80:61:df:f2:12:3a:3a:b1:6d:
                    54:43:a0:ee:4b:e1:22:15:f5:5b:90:e3:5b:36:b0:
                    93:4e:55:c4:75:41:c5:54:cf:ad:aa:29:58:7f:f4:
                    84:e1:b1:98:44:5a:fa:ec:cc:ec:83:2c:0b:36:12:
                    4e:c5:e9:90:ea:ee:66:22:18:85:a1:34:a6:aa:11:
                    26:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E8:78:17:CD:4E:84:AE:C0:25:DC:FF:8F:32:8A:7A:06:85:05:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd5a6a16-7404-3de1-b13f-09f29a39842e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:3e80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:ac:da:3f:43:59:29:28:8d:4d:6b:63:27:42:b6:bd:46:52:
         30:01:86:b8:e5:7f:f5:46:cb:1a:1f:ea:f6:b4:50:0f:ac:be:
         e6:2d:ce:12:31:d0:b3:84:4f:f0:8e:72:4e:4a:c3:e0:55:06:
         a7:71:f1:40:bc:1c:9f:a2:aa:c7:53:b0:44:33:11:d0:b1:fe:
         3e:6e:0d:21:5c:c7:f5:0c:d8:51:86:02:81:2e:23:d2:07:aa:
         2d:20:fa:52:6e:b9:68:03:9d:24:30:37:d2:48:52:75:cf:b9:
         13:be:ff:a1:17:0d:51:c3:cf:8b:24:77:0f:8e:f1:f0:09:dd:
         ae:c2:c4:14:d3:2b:a7:a1:d6:c9:25:89:18:97:83:43:58:58:
         56:71:33:02:2f:2b:d7:cb:35:94:ad:01:60:0c:47:b1:86:af:
         10:d7:32:1d:f8:47:9c:ed:4c:7f:9d:7f:6b:04:07:48:b1:ac:
         8e:fd:ac:31:ea:84:aa:7b:1d:ad:f7:d1:a7:a4:d9:5c:ff:ac:
         6b:7d:ee:43:84:ba:04:f9:d4:5c:7a:77:15:83:fd:01:0b:b3:
         72:f1:96:bb:94:79:9b:97:52:34:a4:fc:a5:30:98:5a:c5:c3:
         74:c3:36:ca:3f:3b:48:28:f8:46:1a:34:eb:2d:f2:ac:7b:ae:
         61:c4:2b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 20:27:01 2026 by rpki-client