Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1d3b1ba6-5038-3423-bc8b-53c15bc6ad02.roa
File:                     1d3b1ba6-5038-3423-bc8b-53c15bc6ad02.roa (raw, json)
Hash identifier:          V6G3bONFhp92xz5KSKteeD1dQoA0U3Nf/TXAGiWS17g=
Subject key identifier:   E9:B3:CA:2D:AD:94:98:8C:EF:9C:0C:B2:CA:65:15:AA:5E:7D:44:EE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DC565C87A01F58134C631B360
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1d3b1ba6-5038-3423-bc8b-53c15bc6ad02.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     19905
IP address blocks:        2604:2d80:2a00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:c8:7a:01:f5:81:34:c6:31:b3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=04147caa-a182-48f2-8148-72a4d2cac38f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0b:e5:6d:9b:76:3e:8a:61:93:5b:09:a6:0a:
                    60:21:45:79:38:dc:9e:79:79:1d:5b:62:78:7a:41:
                    15:c6:fc:70:b8:b6:2c:6a:9b:f0:0e:a2:74:88:f4:
                    24:3f:52:bc:a0:0e:08:65:16:7e:03:1b:eb:1e:5b:
                    af:54:2f:5b:bd:63:18:ff:ff:31:f8:c6:c7:7a:3b:
                    af:7a:2a:3f:7a:0b:7c:21:22:4f:03:b8:93:fe:73:
                    c2:41:ee:44:e9:43:8d:84:c9:eb:02:d1:65:a2:0e:
                    dc:35:8a:35:89:59:0e:9c:73:2b:bc:29:9d:76:20:
                    e0:f1:58:33:00:af:b7:9a:13:06:7c:45:c3:c0:40:
                    8b:49:f0:72:2f:72:a3:bc:81:db:d3:1c:d2:76:dd:
                    61:9f:14:a5:d7:60:a6:28:c3:32:29:6f:a4:97:67:
                    e1:e8:26:a3:be:6b:25:86:56:0e:38:b4:53:8a:0d:
                    ea:e5:04:17:06:2a:51:18:c3:ba:7f:22:a9:55:0c:
                    2a:a1:4f:69:4d:a6:b9:1d:b5:4a:01:29:ae:7b:02:
                    23:46:a4:f8:0d:bd:82:9d:e6:3b:48:29:51:fd:f6:
                    34:23:62:c5:85:c1:07:a2:38:04:19:16:ab:06:da:
                    7e:cc:da:65:e5:de:cd:9a:63:f3:74:74:16:13:94:
                    83:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B3:CA:2D:AD:94:98:8C:EF:9C:0C:B2:CA:65:15:AA:5E:7D:44:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1d3b1ba6-5038-3423-bc8b-53c15bc6ad02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:2a00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:cf:a2:ca:1c:ed:7e:1e:cd:f3:1a:2e:00:f1:73:66:34:b6:
         37:cc:82:90:29:1c:fd:09:7b:ed:04:6b:b6:b5:ce:e6:ea:ce:
         3a:43:f4:33:5e:37:f7:64:f6:fb:ed:97:5c:1b:a1:cc:4b:07:
         ca:b7:b4:c0:35:81:f9:fd:bc:85:31:5d:14:eb:a8:70:48:33:
         eb:af:88:72:5c:f4:9e:14:e9:50:89:07:c9:4e:92:49:bf:2d:
         d2:68:d5:af:54:29:09:ad:af:aa:3c:92:98:6a:d0:d5:19:09:
         26:9f:07:89:85:27:79:10:2a:69:f5:b3:37:32:ff:98:09:30:
         ef:a0:9d:4f:8b:9a:2c:11:03:8c:9c:4c:59:69:88:7a:45:e3:
         63:ae:b2:08:63:48:1c:d5:6b:41:1d:2c:89:20:4c:ad:05:26:
         a0:89:f6:39:59:0f:2d:8f:8f:a7:3f:cd:a4:df:18:19:49:e6:
         45:64:02:e1:15:1e:b9:9a:fa:44:62:27:35:0b:f2:95:39:5a:
         58:4b:34:b4:90:f8:d0:a1:d3:b5:c7:0a:b2:c4:b4:1a:f3:71:
         80:df:95:a6:12:6c:18:67:20:fd:a0:12:94:f5:99:76:51:7a:
         0f:13:4f:d2:ea:cf:e4:a3:6b:0b:33:fe:f5:36:2b:1a:40:19:
         f4:ff:e0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:58:00 2026 by rpki-client