Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d9d941c-1ea8-34ec-bffb-5dc7daaba735.roa
File:                     4d9d941c-1ea8-34ec-bffb-5dc7daaba735.roa (raw, json)
Hash identifier:          COLNRQ50lUXCgQ5TNDkIIg0fUJ3z2DFZKFejTN2ukl4=
Subject key identifier:   30:02:54:43:94:8D:76:9D:59:92:7C:40:32:A4:8D:56:B3:23:00:30
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E5619E7AEE0FB1A6E0DDFC680
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d9d941c-1ea8-34ec-bffb-5dc7daaba735.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:cc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:19:e7:ae:e0:fb:1a:6e:0d:df:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=0a170817-d885-44fe-949e-3be56371ae06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d5:e0:c0:90:0d:39:ce:a9:a4:f7:a9:e1:dc:
                    7e:e0:6d:2a:6a:db:d5:d5:42:26:89:f6:5b:17:86:
                    ad:f0:08:c3:06:59:e8:cb:1e:26:ee:d7:85:0f:ca:
                    63:d8:6a:36:9c:37:7e:33:a8:69:50:f6:02:30:b8:
                    24:28:07:58:f1:19:f1:67:dd:cc:04:44:0a:df:f1:
                    7a:97:cc:12:96:0a:8c:cc:30:4b:b9:47:3d:33:51:
                    3f:ab:cf:8d:6b:9a:95:93:f3:e2:6f:d0:4d:8d:86:
                    25:c4:05:74:15:8d:df:74:e6:1f:5a:75:c2:1b:01:
                    7a:20:39:be:a1:d1:19:f0:0b:01:24:38:36:49:a0:
                    59:f5:35:2b:6f:ee:81:a7:fe:0f:88:f5:38:b6:f3:
                    75:c8:af:8f:36:cc:20:2c:ba:91:80:67:0a:af:8c:
                    7d:4d:eb:aa:b3:87:4b:ee:24:81:7f:bd:16:96:a3:
                    a4:72:f0:67:ac:45:8f:6e:92:c4:10:54:d6:d8:2d:
                    57:52:d6:34:e8:8e:67:d8:f4:a7:9c:12:69:d3:07:
                    2b:74:07:9a:90:6c:40:a1:84:fa:5e:00:37:c1:aa:
                    2e:b9:70:a9:64:66:fb:29:4f:6b:7a:ba:25:62:a2:
                    25:94:39:4a:d8:ad:10:82:b0:6d:a3:dd:59:5a:0c:
                    8f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:02:54:43:94:8D:76:9D:59:92:7C:40:32:A4:8D:56:B3:23:00:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d9d941c-1ea8-34ec-bffb-5dc7daaba735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:cc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:f3:e8:fc:32:59:1e:2d:af:45:d7:cc:4f:08:d8:f5:6a:19:
         53:7b:c9:cb:54:9d:3c:0f:bf:45:da:b8:1f:3d:ed:66:17:7e:
         ba:2e:dd:4d:ba:35:ad:f8:38:0c:4d:a9:92:10:b3:19:46:e3:
         4b:7d:d4:be:77:f8:9f:63:cc:77:c6:cc:9f:a5:45:44:41:ab:
         f9:b7:59:90:4a:95:a4:14:87:de:09:6d:8f:4e:2e:35:90:ab:
         98:7d:97:2c:a2:cf:72:ce:c9:d6:c8:47:77:88:e3:b0:cf:46:
         f1:7c:1e:15:79:83:89:10:0d:17:5a:4c:1d:bb:c7:64:d8:c6:
         4f:f5:8f:f4:15:4f:27:a4:8c:9a:1c:65:52:09:38:6a:db:e2:
         4b:78:04:2e:74:32:df:2f:27:ec:f0:47:eb:f2:93:42:a8:b6:
         f6:53:4a:db:d3:2a:e2:74:4b:df:ef:bb:e2:90:b7:8c:24:b9:
         b3:ae:a5:01:5b:d4:0e:68:3d:e9:b4:ae:5c:60:b6:22:63:20:
         ff:e7:9c:bb:df:da:1e:fb:95:d7:38:58:8d:e9:77:d2:52:c0:
         96:b5:a7:10:b9:ad:62:7e:a8:5e:ec:d6:af:53:73:c8:f4:fa:
         9d:2d:4f:de:f1:e7:b3:e0:56:73:be:52:42:1f:4d:21:21:ec:
         5a:2c:10:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:38:25 2026 by rpki-client