Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/48879af0-7da1-3dad-8f70-acec7b8206e1.roa
File:                     48879af0-7da1-3dad-8f70-acec7b8206e1.roa (raw, json)
Hash identifier:          j5YXQFsQLBrqNGGqqqNiYM1U15UjROykyzkoMNpN/Uo=
Subject key identifier:   62:AA:2C:BE:F2:1A:D3:0D:A6:88:55:D7:3E:3B:65:A6:4B:E4:92:4F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F497466FB3A737C1D23B6A1B4
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/48879af0-7da1-3dad-8f70-acec7b8206e1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:5880::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:66:fb:3a:73:7c:1d:23:b6:a1:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f0be93f6-91a9-4b01-ae65-f040ede8fe42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ad:54:16:73:29:0c:c9:ea:41:82:72:91:de:
                    46:c4:0c:3c:75:80:0b:b8:1f:ac:fb:71:30:ff:0a:
                    ed:ae:13:46:0b:6a:a2:06:f0:8b:cf:8e:aa:e3:44:
                    a7:06:84:28:6b:e7:bf:47:50:40:93:a3:f6:7b:32:
                    46:9d:7a:a4:67:3f:96:5b:c1:35:12:44:1f:df:ec:
                    df:ef:e1:46:20:8d:b0:2c:6a:97:ec:75:b7:d0:d4:
                    9e:9f:18:69:d4:33:a4:c2:2b:12:d3:86:dd:8b:1e:
                    2a:87:f4:95:9b:50:f9:15:ca:76:b3:a8:ba:47:8a:
                    db:48:6e:94:d6:cb:8c:02:c2:52:bb:ab:b5:97:17:
                    b4:7c:d4:a2:d8:3f:fb:09:a2:1c:41:43:ae:72:d7:
                    28:dd:47:d9:2b:31:c9:53:20:13:ec:f8:36:cf:ee:
                    56:f8:3c:69:a1:a8:66:ec:b2:9a:97:09:1b:5b:a2:
                    1d:c0:3a:23:f6:f0:2c:cb:40:09:bd:34:fb:b5:af:
                    0d:5c:1a:ae:69:6e:9d:99:bf:3a:ee:dd:1c:1a:74:
                    b4:e6:a5:a1:ec:a5:41:04:3f:1c:48:7e:01:80:c8:
                    73:0d:0b:13:b9:b8:c3:92:28:d1:ea:0f:0a:cc:ae:
                    7c:f6:f8:73:bb:7d:79:f4:dc:92:35:b9:3f:9c:e1:
                    c6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AA:2C:BE:F2:1A:D3:0D:A6:88:55:D7:3E:3B:65:A6:4B:E4:92:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/48879af0-7da1-3dad-8f70-acec7b8206e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:5880::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:5f:df:c6:b0:af:fb:b2:52:0a:66:10:be:08:73:55:bf:d2:
         8b:8f:2a:b2:7e:50:cc:20:9f:fd:6c:b7:5b:57:92:1f:55:6a:
         57:45:eb:08:eb:98:b1:d6:07:fc:af:08:90:14:8e:3b:36:26:
         fd:52:36:6a:f2:b6:7a:69:f0:aa:a0:db:b8:98:a8:0b:f7:00:
         23:36:27:ad:b9:de:24:a3:5b:97:9b:2b:2f:92:7e:2c:62:bd:
         2e:79:ce:7f:ff:a0:d9:b1:ce:1f:f8:0f:d4:7d:84:f8:fb:39:
         77:60:cd:bf:e9:76:f2:b7:69:14:80:79:1a:15:96:ff:5e:7d:
         21:7a:9b:e8:47:d5:93:32:9c:61:92:8a:b7:09:e6:2e:b9:c2:
         87:d5:71:e1:73:83:fa:eb:47:80:93:4c:9e:e6:cc:bb:41:b5:
         4f:8c:1b:05:e6:09:cc:1c:06:4c:7e:e4:c8:4e:60:b5:14:b4:
         2a:a9:83:cb:38:18:f1:3f:0b:d0:13:ff:9e:76:b8:ab:8d:88:
         cf:33:6c:a3:90:4f:fa:12:8b:0b:64:41:15:6f:79:4e:9b:e4:
         b9:93:00:b1:4f:13:9b:6d:68:b4:ac:54:87:eb:94:5e:a0:50:
         3c:c4:ca:91:eb:a8:4e:3e:d9:ce:15:e9:8e:74:83:94:0f:e2:
         16:7c:e2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:14:27 2026 by rpki-client