Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de81dd91-2a87-37fc-98bb-b7af2c10d236.roa
File:                     de81dd91-2a87-37fc-98bb-b7af2c10d236.roa (raw, json)
Hash identifier:          lK4HiB1C3rGmF9mTWLbQM9gwWk2qsMi3rCYvSfM+urg=
Subject key identifier:   99:17:EF:03:1B:65:AD:31:27:59:52:35:67:3C:5D:3E:CE:B4:8A:E6
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EAA519F2CB5674BDDB99D1934
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de81dd91-2a87-37fc-98bb-b7af2c10d236.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:9a00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:9f:2c:b5:67:4b:dd:b9:9d:19:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=a69cde4b-67d8-4494-9132-f82906ef70c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:35:7e:61:c6:d7:34:9f:9c:72:0d:ae:d6:5a:
                    4e:4a:75:0f:73:6a:6f:09:1d:26:16:ba:22:c9:97:
                    ba:98:2e:5e:b4:d1:9a:05:c6:1c:15:45:80:ea:55:
                    21:3c:d6:7c:67:cc:2e:39:aa:c8:bb:0b:a0:3a:a7:
                    39:a3:ec:e7:1a:e0:2b:b8:ba:38:47:ec:9b:9e:f4:
                    bb:81:54:eb:a3:93:79:d3:5d:a6:1e:da:48:e7:61:
                    5c:ee:1e:f7:5f:62:a0:0f:1d:13:95:29:77:50:25:
                    f3:83:27:e7:d0:3d:ce:a6:77:da:b5:0d:2f:6c:68:
                    09:59:48:c5:43:70:8a:9a:0e:e6:04:d2:40:b1:f9:
                    92:e8:6f:c7:a6:6c:84:a9:8a:ee:e7:c4:8f:92:7d:
                    f5:a6:97:14:bc:93:f2:c4:1f:20:c3:d1:c9:63:4d:
                    d2:68:c8:41:c0:6e:8b:b6:3d:24:a8:f3:3b:52:c1:
                    99:13:9a:85:a7:e4:81:73:72:6f:d3:75:31:fa:31:
                    47:c9:29:3e:05:8d:0d:3f:40:90:4d:1c:c5:cc:48:
                    0a:44:cc:c8:d7:44:f7:09:66:71:55:1f:2b:7d:f8:
                    c3:ca:12:b0:0e:bf:0f:f2:be:23:18:50:b5:9b:02:
                    bf:77:bc:72:01:e8:18:fb:60:29:ed:3e:6e:a3:f2:
                    c7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:17:EF:03:1B:65:AD:31:27:59:52:35:67:3C:5D:3E:CE:B4:8A:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de81dd91-2a87-37fc-98bb-b7af2c10d236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:9a00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:44:83:89:32:62:09:59:8c:d7:03:94:44:46:9a:6e:e2:cd:
         13:57:43:e3:db:46:90:ff:08:76:ca:c3:84:c4:f6:09:94:2b:
         65:b6:e8:f0:61:5e:f4:3d:98:df:ab:69:bd:b3:e0:41:e6:ed:
         3c:a4:fc:8e:25:00:c7:99:b6:48:e7:81:77:f0:76:7d:93:ea:
         b8:15:bd:83:54:ff:35:5b:9a:00:85:70:d9:f3:d0:4f:ce:a0:
         6c:ed:86:bf:a4:fc:48:cb:75:a8:92:99:ab:9b:3e:85:b0:02:
         55:36:5b:61:07:8b:65:93:18:15:0d:fe:b0:07:19:f1:ae:e6:
         7e:33:50:eb:f6:51:69:38:6b:f2:d7:d8:22:d2:76:14:6f:a1:
         a4:f6:8c:d2:da:19:bc:07:13:be:d0:d8:0c:39:0d:f3:4b:f0:
         ab:7c:f4:fd:91:41:4d:c3:55:1b:e8:e4:54:fe:07:55:71:b3:
         57:f7:f7:50:92:fa:4e:be:4b:68:96:18:b9:98:4d:17:12:21:
         04:af:25:47:d0:71:ec:d1:d0:ad:91:91:6d:a6:2b:4a:3f:4d:
         7b:d6:02:0a:7e:8d:b9:f8:49:48:bf:09:8c:b8:09:ad:2b:e2:
         99:da:5f:31:29:ef:52:9c:da:5a:88:a5:d3:30:09:9b:9e:23:
         80:46:23:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:01:24 2026 by rpki-client