Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/14e7ce23-b634-37fe-a764-f8453fd0477a.roa
File:                     14e7ce23-b634-37fe-a764-f8453fd0477a.roa (raw, json)
Hash identifier:          UpGsKS5N6TElYZiaKF2F0uSI+Ua0bMQyH4ZbzBm9tDo=
Subject key identifier:   86:74:61:B8:F8:FC:D7:8B:6A:67:E5:CC:ED:66:D6:18:E0:0B:BF:ED
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4C3DE3F6170C2C024F0BC0C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/14e7ce23-b634-37fe-a764-f8453fd0477a.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     30036
IP address blocks:        2604:2d80:e800::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:e3:f6:17:0c:2c:02:4f:0b:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=1b7328bf-3c80-492b-8201-f951b3055126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:12:b3:7f:e5:c1:e3:5d:ff:64:07:e3:46:53:
                    fe:ca:ec:44:02:e0:a0:71:80:f4:5f:49:7c:01:37:
                    0a:e1:5c:2a:28:8e:1d:f1:fb:b6:ec:d3:2b:32:42:
                    23:32:51:26:4a:da:3d:3b:83:27:aa:80:3e:50:31:
                    af:ac:ca:d6:97:e1:c1:9f:14:c1:0b:60:76:9c:7e:
                    35:d9:e5:f8:8b:23:b7:31:a4:06:f8:1c:02:91:79:
                    60:cb:91:cd:86:70:c7:b3:74:d1:0c:11:ea:8c:09:
                    9d:9d:5f:34:84:5b:0c:44:e5:f6:2d:ad:90:72:3c:
                    b9:f7:00:4f:e0:a9:0b:67:00:0d:7c:74:f0:81:0b:
                    39:4e:8d:f4:9d:57:67:cc:bf:bf:08:00:97:5e:ad:
                    93:68:62:a3:6d:f2:49:20:5c:6f:09:ad:00:36:b8:
                    2c:34:ee:da:c7:f8:c3:3a:67:2a:40:df:28:a2:6d:
                    11:c8:f3:91:89:70:4a:ce:5a:18:b9:37:10:87:fc:
                    62:db:66:16:a2:31:41:70:34:0a:1a:c5:36:57:0a:
                    6b:fe:ed:33:b7:84:4d:03:6e:cc:05:25:11:21:bc:
                    57:8d:9b:07:db:8d:52:be:c9:77:86:04:27:42:e6:
                    cc:24:98:19:1d:74:06:bb:00:da:d3:67:ad:da:c1:
                    e1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:74:61:B8:F8:FC:D7:8B:6A:67:E5:CC:ED:66:D6:18:E0:0B:BF:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/14e7ce23-b634-37fe-a764-f8453fd0477a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:e800::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:85:da:b2:1b:0a:42:e6:71:1f:83:2d:b5:ab:0c:79:1d:3b:
         bd:a6:df:6a:f9:d5:00:9a:32:69:ca:e8:d1:19:b5:26:e2:1b:
         59:9a:b4:fd:a7:ca:a5:56:bb:4e:65:48:49:59:90:98:73:f3:
         1a:9e:22:f6:e1:51:00:7a:30:71:19:28:3c:f1:c1:65:08:1e:
         48:95:a9:9e:f0:1b:f9:8d:d4:d2:22:11:92:f9:88:4b:db:f0:
         52:d5:57:38:c4:f3:81:43:13:64:15:68:7d:41:d9:bc:7b:26:
         21:5b:25:74:bb:32:ad:7f:19:45:63:09:79:b6:15:3d:d3:10:
         53:2e:10:61:d9:ec:ac:40:0c:47:06:bc:30:65:1e:fd:e8:d2:
         56:53:4a:66:20:28:28:3d:4c:63:f9:03:40:3e:7b:43:ae:41:
         ac:a4:8b:ae:42:6e:53:0d:be:7d:2b:ef:8e:2d:4a:72:65:88:
         8e:a0:c0:cd:a8:3c:33:2d:8b:4b:7b:ea:89:fa:16:25:fc:7e:
         f4:32:07:2b:92:72:aa:87:6f:47:bc:35:97:7b:85:28:1d:26:
         a2:ae:04:02:0d:67:08:db:46:17:39:42:03:25:c6:1a:52:ba:
         bf:ee:62:23:c5:86:66:be:ff:48:8a:1a:ac:4d:d2:e5:4a:74:
         11:8a:b1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:18:22 2026 by rpki-client