Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d1da06b-e05d-3fcc-a30a-595fa04e8926.roa
File:                     4d1da06b-e05d-3fcc-a30a-595fa04e8926.roa (raw, json)
Hash identifier:          gWCG0CRHBUanWTenyNvLrSWBkk/Zds5VfGM7tPB9/aY=
Subject key identifier:   69:CF:2F:DA:DD:C5:E3:0D:2D:27:A1:14:70:0D:89:51:96:62:2E:02
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E7BCA35684183989733EF6AE0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d1da06b-e05d-3fcc-a30a-595fa04e8926.roa
Signing time:             Mon 13 Jul 2026 09:00:12 +0000
ROA not before:           Mon 13 Jul 2026 09:00:12 +0000
ROA not after:            Sun 11 Oct 2026 09:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d81:3e80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7b:ca:35:68:41:83:98:97:33:ef:6a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 09:00:12 2026 GMT
            Not After : Oct 11 09:00:12 2026 GMT
        Subject: CN=912174b6-8c58-4d5f-84fd-df8d6e877560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ee:37:77:37:27:05:8b:74:ce:00:e5:60:b3:
                    91:65:07:03:d2:eb:47:79:3d:fc:1b:fb:e8:6c:ec:
                    0c:91:8b:4f:53:38:6f:5a:57:c5:ab:55:da:e3:99:
                    8f:75:d4:77:21:f1:d8:de:53:ad:f1:ca:ae:23:74:
                    44:f2:49:1b:19:b6:a0:db:af:97:6e:12:b1:9c:44:
                    ab:35:07:97:ea:88:e6:1d:a4:8d:f4:f1:95:5a:58:
                    0f:cd:10:62:29:35:1a:3c:c3:db:86:44:17:6d:83:
                    61:f5:fc:4b:24:45:2b:7c:47:27:4d:1b:7b:56:87:
                    fb:d8:25:8d:3e:ce:c6:a4:13:f6:12:89:5a:0d:02:
                    1f:1d:d0:3c:33:3d:b5:ed:51:e8:94:56:41:57:09:
                    c3:29:8d:ed:d6:98:b1:ef:2d:ec:ee:ce:7e:ce:d5:
                    8f:05:ab:2e:4f:2e:54:8e:3e:06:eb:20:f9:39:4f:
                    10:81:21:5d:4b:48:40:8f:10:68:fd:29:67:24:0b:
                    8f:31:c3:bd:ae:83:4f:7f:7f:b5:64:5a:c6:bd:48:
                    7d:e9:f8:36:e4:a5:ee:5b:26:bf:31:c1:e6:f4:4a:
                    3c:8b:d2:27:74:93:c1:19:5e:55:f8:af:88:d3:35:
                    06:d2:8b:f4:64:e1:7d:cc:b1:1c:e5:a4:fd:99:96:
                    b1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CF:2F:DA:DD:C5:E3:0D:2D:27:A1:14:70:0D:89:51:96:62:2E:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d1da06b-e05d-3fcc-a30a-595fa04e8926.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:3e80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:dd:86:b0:05:47:e0:3c:48:de:bf:5a:94:c7:a7:64:f9:5d:
         66:3f:da:35:10:b1:8e:d5:18:1c:56:bc:5a:7d:37:f6:2f:66:
         67:33:0a:bb:46:04:63:a3:c6:1e:3c:36:12:75:09:19:fa:6c:
         ab:c1:93:61:37:85:16:33:96:04:8a:5b:d1:37:f5:7a:23:b5:
         78:56:01:37:5b:2b:9e:b1:c3:f7:48:e2:ec:ae:c1:15:d0:ec:
         2a:84:ec:59:86:80:e3:58:73:07:38:d8:39:86:5b:17:a7:d2:
         e1:cd:34:b1:34:08:47:91:90:ef:01:97:45:24:42:e6:31:7d:
         04:eb:9b:70:a7:04:04:94:67:c8:45:b5:63:de:18:27:d0:9a:
         84:03:9b:f5:27:0d:54:c6:82:78:89:8d:f7:bd:bc:1b:08:e2:
         e8:d8:68:02:4a:30:ea:e0:ab:ee:1b:6b:72:40:35:fb:f3:97:
         1f:62:ab:e7:89:bb:48:15:8a:49:e0:b6:b9:b4:fa:ed:88:fd:
         6d:c5:91:73:e0:a6:b7:63:7d:d9:8a:c6:33:c5:48:3d:ee:a6:
         c2:3c:36:10:fb:95:e2:4f:3e:db:52:92:0b:39:d0:96:5d:14:
         18:ac:f0:3f:79:db:49:f5:22:37:50:2d:d7:80:0e:35:35:9c:
         90:57:8b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:47 2026 by rpki-client