Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/47ca150e-1d35-3ae7-bf7a-3f8bd4092e2e.roa
File:                     47ca150e-1d35-3ae7-bf7a-3f8bd4092e2e.roa (raw, json)
Hash identifier:          TThQ+FhUztVBxoBdHgjdJzOHhRiUfjwj8Q0dDbfsTeA=
Subject key identifier:   5E:7A:25:D0:66:AF:CE:99:EF:9D:4E:CD:8B:BB:C9:18:6F:87:2A:2A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F49276940D5E9050BCC587F80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/47ca150e-1d35-3ae7-bf7a-3f8bd4092e2e.roa
Signing time:             Thu 24 Sep 2026 22:28:52 +0000
ROA not before:           Thu 24 Sep 2026 22:28:52 +0000
ROA not after:            Wed 23 Dec 2026 23:28:52 +0000
asID:                     30036
IP address blocks:        2604:2d80:5400::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:27:69:40:d5:e9:05:0b:cc:58:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 24 22:28:52 2026 GMT
            Not After : Dec 23 23:28:52 2026 GMT
        Subject: CN=d13ac271-6bf5-420b-968f-86139eabc6b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:db:c7:11:20:64:f4:80:1b:fa:0a:ee:81:1a:
                    51:a1:61:67:7a:3d:3d:7a:d3:0a:c4:c1:ed:9f:48:
                    93:3c:fa:c9:b7:62:f2:49:cd:b5:b9:b6:a4:94:d4:
                    35:d8:e3:a6:b7:cd:8c:26:40:dd:29:aa:59:dc:fb:
                    c5:84:35:f0:8a:e2:04:b0:e3:2b:55:60:37:b8:3a:
                    55:de:fc:8e:76:c6:21:a4:62:c3:48:c7:b4:a7:d9:
                    69:a5:25:34:04:88:b1:c8:55:98:98:64:94:a8:10:
                    34:be:0c:0d:cf:a4:2b:90:ef:9c:e5:ae:4f:67:6e:
                    55:2d:8c:a1:d4:ac:48:50:21:1c:69:40:4f:56:ef:
                    9a:95:3b:41:fe:58:ec:f8:93:3a:65:2c:4d:a2:f7:
                    70:9b:45:a9:d6:a6:7e:e6:6b:d4:1e:b1:b8:5f:7a:
                    d1:db:a6:79:b6:98:93:5a:41:d7:19:c2:22:81:73:
                    be:d5:13:ba:98:0c:9b:5f:1d:96:b4:40:5a:b1:e9:
                    16:52:cb:43:7e:0b:b5:ee:5c:16:4e:fc:f0:a4:26:
                    8c:43:39:ce:cf:ff:b4:2f:5a:8d:ed:90:a3:f6:f2:
                    0c:fd:51:57:18:40:ee:85:fe:78:a2:dc:4c:7b:05:
                    63:3b:a3:5f:ee:31:1d:ad:e3:e0:4d:3d:6c:b5:4a:
                    64:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7A:25:D0:66:AF:CE:99:EF:9D:4E:CD:8B:BB:C9:18:6F:87:2A:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/47ca150e-1d35-3ae7-bf7a-3f8bd4092e2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:5400::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:23:8b:97:aa:27:01:e6:80:4b:20:85:55:8c:70:58:1f:af:
         b9:44:05:7f:74:94:a0:8b:3f:8e:f4:6c:de:8e:d2:04:9d:cb:
         49:9b:f3:e0:78:2e:b8:fd:ce:03:c9:95:da:d2:0a:25:8a:2c:
         98:dc:c5:d4:4f:7e:a7:87:e4:9f:2d:45:19:78:3c:b0:d5:d5:
         21:45:a4:be:42:19:f8:ee:8b:c2:d4:e4:16:a9:79:9a:7c:6a:
         dc:5d:bd:e0:6e:20:1b:3e:cf:1a:9c:78:69:81:97:f2:97:4c:
         61:68:b1:57:bd:36:4d:03:d1:0e:d6:ca:bb:d1:08:0e:a3:98:
         a1:e8:cb:0c:83:36:9d:2b:a0:13:f6:f7:0e:fb:f4:c7:bb:6a:
         e0:20:2e:e6:4a:40:b5:78:13:59:59:c6:cd:af:79:cd:9f:62:
         f4:32:6e:25:e4:36:2e:ff:e3:71:11:b8:5c:f5:01:6d:a8:89:
         8b:1c:dd:ab:b0:2e:69:5c:15:fb:b7:e8:37:85:8e:93:89:3d:
         0d:11:5b:22:e5:7e:9e:f4:bd:0b:a5:16:6c:f6:a1:67:d7:1b:
         8b:7d:79:a6:71:e8:a7:b0:84:a0:9f:8c:cd:e1:e3:19:5e:07:
         f4:d4:25:59:f7:66:e2:64:53:a9:41:36:67:6a:de:d5:50:b6:
         08:35:c0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:49:34 2026 by rpki-client