Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0538e659-a944-3257-be44-736283fffb2a.roa
File:                     0538e659-a944-3257-be44-736283fffb2a.roa (raw, json)
Hash identifier:          83w8zKtrjMp9DS5TF6/MMKVwlL2sCAmZwe0OT2myPu4=
Subject key identifier:   53:8B:C1:8F:3E:A9:D3:53:9D:9F:10:68:EA:C5:CD:46:AD:56:D0:D7
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D2A74FB4B1B89DA1EA90F2300
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0538e659-a944-3257-be44-736283fffb2a.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2d81:2400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:fb:4b:1b:89:da:1e:a9:0f:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=fb501e38-44b0-48e0-8a46-a5305009ac8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:52:af:b9:a5:28:ce:02:ab:d4:37:df:6a:b2:
                    8f:76:b6:50:7c:12:76:d0:68:3c:ee:08:ec:13:56:
                    93:d6:9b:06:d5:c0:b4:50:c8:f3:ca:ab:65:6d:2e:
                    6c:dd:c8:d5:fa:ce:14:b8:81:2e:05:63:2f:0d:55:
                    ce:3b:f0:f8:d5:bd:92:57:b2:e6:57:18:19:97:c4:
                    30:27:c8:a0:4b:cd:b2:be:b3:b9:98:44:28:69:f6:
                    07:dc:ce:69:7b:17:56:78:27:b5:b2:18:97:de:e1:
                    0c:7c:1f:04:99:7f:52:77:93:57:53:97:a5:41:61:
                    72:2e:bd:66:28:5f:e4:66:c6:65:94:67:1b:3e:2b:
                    7a:66:59:a6:c2:c0:08:10:d7:c1:24:72:6f:1b:ed:
                    47:5f:eb:77:3e:08:57:f3:df:98:f5:ec:08:10:67:
                    50:c4:bc:74:73:f2:ca:6e:dc:d0:32:0c:33:cb:a5:
                    63:bf:0e:4f:76:41:a2:5b:8e:1f:8e:b7:54:4b:d9:
                    c2:2d:38:55:85:b4:86:bd:76:d5:38:1a:6f:cc:74:
                    fe:b0:63:09:08:1e:e5:55:e1:7a:82:7b:3a:94:b8:
                    1c:41:13:76:9c:3b:64:4f:a2:0f:20:89:ac:14:71:
                    bd:02:37:be:7e:91:99:21:ac:39:6a:4b:c7:73:2d:
                    97:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8B:C1:8F:3E:A9:D3:53:9D:9F:10:68:EA:C5:CD:46:AD:56:D0:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0538e659-a944-3257-be44-736283fffb2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:2400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:d1:2d:db:98:ec:bd:fc:01:ae:19:5d:98:13:92:01:47:4e:
         e2:d2:74:48:c4:16:5b:5d:26:3d:e5:95:58:0e:06:a0:0f:c1:
         b2:af:bb:26:2e:53:fc:06:59:79:12:ba:4b:b5:d6:a8:a0:54:
         bd:b8:bc:72:6f:82:4b:2f:79:4f:86:c4:ff:ab:ec:c4:4e:45:
         5b:7e:eb:af:6e:9e:40:ee:67:8f:d1:b2:49:7f:e4:ae:c5:f6:
         f4:50:3f:0b:06:34:42:d4:ad:05:cc:32:06:d3:5c:02:81:c1:
         47:e2:77:98:2d:01:1b:de:c5:95:a6:72:36:6a:17:b4:f3:ee:
         2a:39:dc:ec:39:ad:4b:73:46:bd:8b:e4:16:0e:69:72:70:ed:
         eb:3f:fd:fe:71:ba:10:2f:a7:4d:76:e6:86:8e:8e:dd:cf:8e:
         f8:51:4e:4a:be:da:c3:55:f8:5d:59:6f:50:6e:c2:c8:bb:c4:
         a7:cb:78:fa:50:12:40:a6:68:8b:64:4d:bc:37:bb:f6:2f:06:
         14:62:9e:3b:da:04:18:d4:08:b2:17:12:2c:8c:e1:c7:71:51:
         c7:a4:a5:70:3c:89:d5:89:f9:ef:16:e7:a3:b3:45:2c:5b:b6:
         b9:fb:cc:6c:a9:98:b3:78:8d:d1:d0:0a:87:5b:01:1e:90:62:
         5e:1a:89:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:20:14 2026 by rpki-client