Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc7b347d-a21b-3120-beea-ee4b0f0414fb.roa
File:                     dc7b347d-a21b-3120-beea-ee4b0f0414fb.roa (raw, json)
Hash identifier:          9kBlhAE5ntE501sebg9VxwVKNyY+lkfjCqHw1vTa5to=
Subject key identifier:   B2:02:CF:29:AA:67:F9:54:D4:83:5B:73:23:BD:2B:6D:FF:27:03:70
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EBC7710ED3530FF771B319380
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc7b347d-a21b-3120-beea-ee4b0f0414fb.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d81:1180::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:10:ed:35:30:ff:77:1b:31:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=07d29dd6-915b-4849-9fc6-86bea689b102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d7:fc:19:5e:61:ee:ae:bc:f7:66:3a:49:d6:
                    10:72:ca:8c:ee:0b:aa:f0:a4:c4:4c:bf:26:09:9b:
                    68:67:6d:c3:d2:0d:8a:e9:6b:ee:2f:51:fd:cf:5d:
                    dc:e2:ee:33:5e:2c:27:f6:3d:3f:69:3f:7e:1e:fb:
                    c5:8c:16:26:59:99:f3:73:79:e2:af:3a:a5:75:16:
                    5d:89:a6:0a:da:29:d8:77:c8:1c:1d:ab:40:73:b4:
                    05:14:12:ad:13:4f:aa:2a:7d:73:6c:a6:3a:96:d3:
                    ef:56:37:d9:a4:d2:92:f4:8d:d4:50:f1:d2:16:a6:
                    06:1a:4b:5f:48:8f:f6:fb:25:ae:e2:58:d5:72:fb:
                    f1:59:81:50:01:b2:d8:60:10:5b:9a:53:b1:35:7a:
                    b7:0b:31:29:2e:dd:4b:37:aa:fe:ac:5c:59:4b:31:
                    2d:01:61:64:d9:44:79:92:56:38:93:f5:aa:90:e5:
                    0b:f3:ad:ef:a4:b8:c3:00:e4:dd:56:1d:cf:50:5d:
                    49:18:df:98:4c:d0:34:0a:19:99:82:e5:83:2c:03:
                    99:ff:d7:2b:ed:07:1e:4c:f2:04:78:b0:8c:1c:7b:
                    0b:f7:da:73:8d:67:b0:89:d7:ee:6e:35:81:a5:8a:
                    d3:9c:2a:66:37:5c:15:10:f2:b2:7c:54:c3:27:6a:
                    19:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:02:CF:29:AA:67:F9:54:D4:83:5B:73:23:BD:2B:6D:FF:27:03:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc7b347d-a21b-3120-beea-ee4b0f0414fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1180::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:69:76:43:7e:d5:32:88:68:b8:4b:38:ba:d7:3c:ad:d2:47:
         e0:7e:fe:e4:80:a9:25:d8:a6:63:4a:db:66:e0:bb:eb:b4:96:
         a6:a2:1e:cc:1a:25:e5:14:14:fc:2f:79:50:b7:07:84:d4:4a:
         52:c9:d2:2c:71:3d:21:e7:7f:da:44:be:87:0c:ff:51:63:fb:
         c6:78:13:e6:37:32:ce:4f:19:60:ac:9b:29:90:99:2b:ac:56:
         92:d5:c2:3e:ce:72:60:02:70:ef:e0:f9:57:a6:86:5c:4b:c3:
         95:f3:82:89:d7:b4:25:6a:13:68:30:de:84:ed:6c:63:1c:a6:
         24:43:a7:59:2e:fe:ad:65:1c:6b:41:9a:9a:9e:eb:eb:47:1d:
         f0:8c:05:76:c9:2f:1c:83:a7:21:45:41:de:22:21:47:9d:a3:
         d0:51:9e:84:f3:bd:a7:62:2e:ed:7a:1d:be:97:87:c3:88:23:
         e1:1d:7e:07:e7:2f:fc:d7:ef:72:a5:28:43:6c:96:c1:c6:f5:
         a5:04:fd:ba:4b:12:00:57:b8:5e:1b:fd:5d:05:e8:87:31:2c:
         02:0d:29:20:aa:90:ba:a5:4c:3c:25:0e:84:7a:ad:56:dd:45:
         dd:73:64:25:38:28:7d:90:d8:78:cc:be:1a:db:56:7a:3d:f3:
         2d:c2:d7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:00:42 2026 by rpki-client