Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffe5e1f8-35b6-30b0-975c-9fa550943ebe.roa
File:                     ffe5e1f8-35b6-30b0-975c-9fa550943ebe.roa (raw, json)
Hash identifier:          JZo89jAHBxGD3vr3cjmpOdS1l6wYwgpqS+1zsqIwODw=
Subject key identifier:   78:FA:A7:6A:4F:9D:D1:D3:9D:90:51:9D:75:F9:FF:93:B1:3C:6B:23
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EAA5198FC2C5C364F7F6FE440
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffe5e1f8-35b6-30b0-975c-9fa550943ebe.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d80:a800::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:98:fc:2c:5c:36:4f:7f:6f:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=75fd1019-d31a-4e8e-a0ea-94368d43a227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:10:33:7b:a6:82:68:47:c3:39:a0:36:15:f3:
                    26:85:69:5e:63:61:0e:df:6b:f6:86:b7:7e:15:98:
                    7f:f3:70:13:c8:37:05:07:46:9c:40:ed:c5:2f:53:
                    87:a9:c5:56:5f:fe:54:32:aa:87:10:a4:84:25:ff:
                    3e:79:3c:f8:f1:2d:51:dc:ba:5b:b3:6d:08:79:21:
                    73:fb:01:8b:3b:05:62:58:46:85:8b:ef:91:95:0d:
                    67:7a:6a:55:32:90:e5:5c:8e:2c:0e:07:22:c5:68:
                    70:7d:d5:e7:a6:60:39:b1:5f:92:8c:47:89:12:45:
                    c0:f2:0d:ca:74:99:83:70:f0:bb:6f:62:57:54:11:
                    9f:25:03:0c:ae:6d:f3:54:75:77:dd:07:d4:8b:0e:
                    6c:4d:a9:e2:2b:66:69:2f:e0:d4:7f:e6:b7:09:17:
                    a9:4e:06:3e:f4:a7:ee:14:da:0e:20:53:65:28:70:
                    3f:e7:37:62:35:f7:b5:30:b0:ab:3c:de:a8:c9:b9:
                    da:c7:0f:2c:3e:3a:3c:98:a4:fc:b0:30:69:f8:19:
                    f5:48:5e:6d:64:8e:c3:ac:61:25:63:94:cf:a0:0b:
                    a9:ee:93:76:7b:82:cb:41:91:76:43:fa:59:16:ac:
                    c5:ec:ad:81:5e:50:dc:c7:d1:8e:08:a1:11:fb:db:
                    af:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:FA:A7:6A:4F:9D:D1:D3:9D:90:51:9D:75:F9:FF:93:B1:3C:6B:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffe5e1f8-35b6-30b0-975c-9fa550943ebe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:a800::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:a8:5d:3c:67:fc:d2:ae:25:6e:f1:09:69:95:57:e8:31:0d:
         0c:d1:b3:50:59:dc:ff:0a:c4:fa:9b:95:45:2b:0f:60:20:9f:
         bc:a9:95:f8:41:4d:87:b3:4e:f8:86:9f:34:90:ee:e8:4b:59:
         b5:a1:27:99:75:1a:7e:b4:d9:53:d0:36:14:30:fc:36:c7:62:
         58:cd:c6:27:e5:ad:8b:10:cb:70:3d:25:03:98:8f:17:bb:38:
         23:d1:40:5a:06:ce:28:7b:15:3e:a3:ff:2f:92:dd:39:73:40:
         ce:c9:11:32:fe:cf:ac:c3:c1:a6:3f:5c:d5:bf:c2:0a:a4:fc:
         47:c6:6f:d1:16:55:f1:25:70:01:37:bf:72:56:f3:6e:2f:63:
         d1:21:4f:05:c9:95:1a:47:c0:de:6f:39:3d:49:5f:a1:29:54:
         08:2d:fc:58:32:a1:e7:1c:23:94:45:f5:82:07:8e:df:1a:eb:
         8c:ea:31:d9:05:b8:df:13:90:30:11:f2:41:21:e9:55:5e:8d:
         e7:08:6f:db:31:7a:75:22:f5:16:1a:ec:78:c7:15:c4:f7:3c:
         82:eb:54:ce:9c:df:d3:1f:b6:c6:1c:ac:48:c8:dd:e2:41:26:
         57:d0:da:36:b9:8b:cd:50:51:fb:f0:ae:ff:67:7c:b2:4c:38:
         c4:e0:c9:64
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6qUZj8LFw2T39v5EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk
NzVmZDEwMTktZDMxYS00ZThlLWEwZWEtOTQzNjhkNDNhMjI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshAze6aCaEfDOaA2FfMmhWleY2EO32v2hrd+
FZh/83ATyDcFB0acQO3FL1OHqcVWX/5UMqqHEKSEJf8+eTz48S1R3Lpbs20IeSFz
+wGLOwViWEaFi++RlQ1nempVMpDlXI4sDgcixWhwfdXnpmA5sV+SjEeJEkXA8g3K
dJmDcPC7b2JXVBGfJQMMrm3zVHV33QfUiw5sTaniK2ZpL+DUf+a3CRepTgY+9Kfu
FNoOIFNlKHA/5zdiNfe1MLCrPN6oybnaxw8sPjo8mKT8sDBp+Bn1SF5tZI7DrGEl
Y5TPoAup7pN2e4LLQZF2Q/pZFqzF7K2BXlDcx9GOCKER+9uvBwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHj6p2pPndHTnZBRnXX5/5OxPGsjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmZlNWUxZjgtMzViNi0z
MGIwLTk3NWMtOWZhNTUwOTQzZWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgKgA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD2oXTxn/NKuJW7xCWmVV+gxDQzRs1BZ3P8KxPqblUUrD2Agn7yp
lfhBTYezTviGnzSQ7uhLWbWhJ5l1Gn602VPQNhQw/DbHYljNxiflrYsQy3A9JQOY
jxe7OCPRQFoGzih7FT6j/y+S3TlzQM7JETL+z6zDwaY/XNW/wgqk/EfGb9EWVfEl
cAE3v3JW824vY9EhTwXJlRpHwN5vOT1JX6EpVAgt/FgyoeccI5RF9YIHjt8a64zq
MdkFuN8TkDAR8kEh6VVejecIb9sxenUi9RYa7HjHFcT3PILrVM6c39MftsYcrEjI
3eJBJlfQ2ja5i81QUfvwrv9nfLJMOMTgyWQ=
-----END CERTIFICATE-----
Generated at Fri Aug 21 02:26:00 2026 by rpki-client