Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1935d091-7453-3287-9f5b-6dd4add7c894.roa
File:                     1935d091-7453-3287-9f5b-6dd4add7c894.roa (raw, json)
Hash identifier:          ftlaU0NGDRAbjToUKAj5MesI9GpEuw1SsTZz0upEv2c=
Subject key identifier:   48:AC:E2:22:B0:B2:05:E2:F5:9F:8D:5E:23:85:1D:EE:32:40:62:E6
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F497352D3520D6D573E56C780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1935d091-7453-3287-9f5b-6dd4add7c894.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:ab00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:52:d3:52:0d:6d:57:3e:56:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f2a00e81-d78c-4a2c-8016-0a8d3d743c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e8:f6:db:e1:38:24:d5:a5:5a:48:28:53:d1:
                    79:57:74:64:73:c7:96:92:4d:00:cb:8f:30:32:32:
                    8d:2b:55:8a:2e:10:6f:d7:fe:5c:93:fb:41:75:1f:
                    f4:f1:2a:02:cd:b7:a1:8b:0b:b0:b3:a9:47:9c:82:
                    1e:e7:24:1e:c6:c5:57:b6:9f:68:84:4f:a8:32:b8:
                    ca:6a:e9:12:1d:72:41:7c:bf:de:89:b0:fc:2c:3a:
                    a3:0e:0b:c8:21:70:df:85:44:84:ef:0f:c1:f7:27:
                    41:a1:a9:d4:16:cb:a8:cf:5d:b9:a9:62:ed:dc:bf:
                    c6:e3:ea:fa:bd:f6:88:86:b7:2e:36:5b:28:9d:b0:
                    c8:3e:ff:cc:ed:cb:d4:b6:bd:65:ac:27:d0:b2:21:
                    aa:ab:c4:4c:ee:b2:1f:b3:4c:79:ea:05:31:33:7b:
                    71:b3:c0:61:9e:53:32:bb:a0:cd:e7:11:a0:a7:d7:
                    3d:da:a1:d3:9a:d1:ce:4d:53:d2:f5:e0:b2:b3:61:
                    c7:55:14:04:c9:96:0e:a7:dd:cf:7b:22:94:b8:bd:
                    d6:6f:94:80:26:b3:0f:4c:f7:7e:32:8d:77:01:32:
                    f7:f4:e3:b6:63:1e:37:37:2f:00:98:cd:ea:7b:13:
                    b4:b7:23:f0:6e:70:35:72:99:a3:f3:33:56:41:45:
                    d0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AC:E2:22:B0:B2:05:E2:F5:9F:8D:5E:23:85:1D:EE:32:40:62:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1935d091-7453-3287-9f5b-6dd4add7c894.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:ab00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:6e:cd:fb:7a:79:a1:b6:2a:b2:e4:79:e9:6f:87:52:a7:2c:
         0a:f2:01:7a:aa:22:f5:b0:72:8b:81:b9:39:dc:89:b0:50:46:
         8e:2d:2a:1f:db:dd:c3:f3:b2:06:aa:6e:b3:ed:02:33:2e:e4:
         a8:4a:32:cd:77:3e:07:32:d5:da:cf:37:3a:a9:11:6b:db:91:
         b4:93:79:97:db:d8:1f:a9:a3:1b:f4:85:1e:5b:87:8b:ef:67:
         d0:a6:e2:2a:32:d7:a5:d7:fd:63:ef:c3:46:e7:14:d9:a2:50:
         9c:ee:81:6b:c6:e6:90:48:8a:74:09:4b:90:16:8e:f2:88:e4:
         05:13:9a:38:3f:19:40:58:25:4b:0b:15:b2:39:6f:bc:c4:90:
         ed:c2:c9:d5:4c:25:c1:81:8c:98:8f:6c:5f:62:70:a0:a4:16:
         29:92:82:ab:93:08:58:84:c0:e0:7f:f5:da:29:1c:4e:91:f7:
         56:ca:9c:72:85:51:ee:c3:b9:02:88:fc:78:6b:2e:1b:75:c2:
         9b:17:d3:6d:00:b9:b5:2f:87:98:f8:c2:a0:04:29:84:5c:89:
         5e:80:33:94:21:8a:15:07:c1:25:bf:0c:0c:bd:b2:d4:2a:d8:
         df:7e:f4:43:b3:f3:5b:a6:1e:ae:e4:dc:ed:7e:92:74:81:96:
         ca:d1:e7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:43:48 2026 by rpki-client