Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f381fa0-4871-3813-a6fd-d671bd526843.roa
File:                     2f381fa0-4871-3813-a6fd-d671bd526843.roa (raw, json)
Hash identifier:          hf90eTQGlPqc2j9LwKxQsg7b2iCgrSLHTU+64q+OSW8=
Subject key identifier:   4F:8B:62:00:DA:92:FF:1F:AA:E3:6B:85:98:00:EB:23:0F:97:5A:B9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F3052752DAF9B8FBA77FB2AC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f381fa0-4871-3813-a6fd-d671bd526843.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:ec00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:75:2d:af:9b:8f:ba:77:fb:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=3b02e778-c9cf-4cc5-b02a-4c141ec31ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:64:44:8b:d6:03:f0:e7:49:43:7b:4f:89:1c:
                    2f:3d:83:55:f2:b6:0e:59:41:13:b9:bd:90:7b:3e:
                    6f:4b:3b:bc:3d:9c:2e:e9:14:f9:67:11:41:86:c9:
                    a7:4c:17:49:de:c3:16:2d:c2:d0:6d:24:f4:06:b2:
                    ff:63:52:ed:33:5b:02:fb:1a:41:46:8d:c8:9a:67:
                    1e:5c:07:a4:36:02:42:54:a2:11:c7:d2:8a:3b:53:
                    22:8c:37:f1:43:7e:79:24:ff:93:67:31:fe:e5:59:
                    82:45:3f:91:13:4e:2e:e2:9a:c6:d2:ea:be:62:12:
                    36:d9:10:ed:17:48:5d:88:11:36:97:c6:93:db:5c:
                    ad:a0:23:3d:7b:67:3a:ac:16:59:a1:c1:1c:4b:a0:
                    77:e6:ab:6d:ad:14:82:a0:68:80:55:7f:ad:12:99:
                    3b:50:e0:17:84:e6:ce:b7:5d:e7:d3:df:55:28:21:
                    06:d3:7b:03:24:8a:ab:81:37:36:17:d1:90:3a:57:
                    fb:c6:f0:17:3c:78:c6:50:a3:5e:cb:ee:55:ca:c3:
                    af:73:b3:f9:1a:7a:28:51:51:29:33:c2:32:0a:db:
                    ae:59:f1:c7:8e:57:25:7c:30:11:92:da:c5:f5:d9:
                    98:aa:e1:c9:1d:3e:d6:a7:cb:cc:20:2a:22:b2:a3:
                    50:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8B:62:00:DA:92:FF:1F:AA:E3:6B:85:98:00:EB:23:0F:97:5A:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f381fa0-4871-3813-a6fd-d671bd526843.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:ec00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:82:1f:05:a8:a7:f6:b8:81:5d:0c:5a:03:ff:8a:24:4b:ec:
         39:99:f1:20:37:54:79:59:31:62:d5:35:a9:47:e0:e9:46:10:
         ac:45:4d:16:5c:6b:f2:d6:e9:c2:5a:1c:b3:68:35:d9:78:7d:
         26:f0:97:72:be:00:c5:31:38:cf:7a:4d:8c:14:3c:50:8f:0c:
         df:d6:d5:50:9c:13:ec:2c:78:ef:77:81:5d:a9:48:ff:b0:8b:
         68:48:d7:7a:44:f6:e8:82:c3:84:c2:14:2f:b6:79:74:a7:1e:
         16:2d:98:bd:36:e7:b1:03:1f:fb:49:a1:f1:9c:f5:f4:84:32:
         c4:ed:ee:1b:4c:79:ab:fb:24:de:4d:76:f1:ca:f3:a4:1e:3a:
         17:ed:09:4f:d0:db:5a:ac:18:24:98:17:07:76:09:67:4e:44:
         0e:4f:16:ee:c0:1b:9c:13:bf:3c:74:39:d4:4d:e9:e8:9e:18:
         18:09:85:9a:32:d1:de:34:8a:92:3e:5f:ce:95:16:0d:9c:3f:
         09:7f:bb:0b:8d:b2:7e:f8:33:93:d9:2e:3c:80:fb:3d:59:dd:
         53:ea:89:8d:f9:21:24:48:af:c0:15:4e:df:0a:f4:f6:51:85:
         68:a1:60:f3:ae:82:83:f4:a3:27:43:c9:19:05:2c:61:09:88:
         50:41:99:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:32:11 2026 by rpki-client