Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/57d65a38-9af3-35a5-98f9-108f91553994.roa
File:                     57d65a38-9af3-35a5-98f9-108f91553994.roa (raw, json)
Hash identifier:          j0vsNJDOnPhymFsgkf74zju88bDPE1wfCyk1BIWqA38=
Subject key identifier:   69:29:45:D6:CB:91:2D:F6:49:69:79:3B:29:CD:48:FE:5E:D0:7B:C5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F498A0DA276F78A183B7B02E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/57d65a38-9af3-35a5-98f9-108f91553994.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d80:9b00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:0d:a2:76:f7:8a:18:3b:7b:02:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=33f38eba-1eb2-4bf6-bea2-4638a03b1e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:98:56:b4:53:76:d6:9a:7a:db:42:03:db:43:
                    98:73:af:91:f3:72:9f:bf:d7:e1:1a:60:44:1b:38:
                    1a:a2:dd:75:9a:7c:dc:fe:f9:63:af:03:82:17:ce:
                    c9:9c:85:ca:0a:59:c5:99:2c:fe:53:ed:72:2d:b3:
                    29:57:6f:d0:e8:96:d4:64:a5:36:95:5f:f9:41:80:
                    47:7a:0f:63:02:58:ec:74:8f:09:b1:92:e2:3f:f3:
                    4d:bf:83:8f:fd:3e:03:7e:b7:23:81:88:e4:3b:cc:
                    04:8e:ac:05:84:be:cb:ca:3b:a9:99:cf:71:fe:96:
                    b2:5a:1f:b2:57:68:d9:ef:0c:34:64:59:ca:d7:c7:
                    e3:56:84:99:cf:ef:a2:89:cb:17:a8:8a:8c:69:8b:
                    ae:ba:0c:6d:67:d4:d4:c6:a3:19:b5:24:58:b1:b4:
                    19:6a:9b:1b:ec:ff:a5:90:4e:99:3f:14:96:fd:06:
                    df:cd:ee:a3:7c:24:76:ba:ff:1a:f6:12:cd:e7:c5:
                    e3:fb:59:20:78:4e:85:6b:0d:82:62:20:f3:b2:38:
                    4f:8f:1d:9e:19:4d:74:9a:5f:32:43:34:94:00:c2:
                    81:c8:e4:77:6c:0c:a1:51:31:eb:a9:46:03:02:f0:
                    d9:55:67:76:55:86:31:1f:cd:63:6d:92:44:60:df:
                    89:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:29:45:D6:CB:91:2D:F6:49:69:79:3B:29:CD:48:FE:5E:D0:7B:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/57d65a38-9af3-35a5-98f9-108f91553994.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:9b00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:b3:6d:b1:0f:fd:95:cb:88:46:ed:87:8a:fa:05:24:6a:79:
         4d:b2:ba:4c:01:9b:da:1c:db:e9:62:7b:d2:23:00:71:54:2b:
         de:e8:a5:48:57:e9:c6:f1:2a:d1:e8:27:93:53:aa:f6:dd:a1:
         7e:17:91:84:00:87:0b:78:68:59:df:12:5d:46:8f:b8:d3:c6:
         29:4e:14:8d:65:a4:7e:d4:37:fd:ac:26:20:c0:58:28:38:8a:
         ec:58:b7:8d:0d:14:be:24:93:b7:13:3a:4e:6b:d4:f4:d3:cd:
         e8:39:f4:ec:7d:64:2f:9c:98:d6:17:e3:11:73:91:4f:70:39:
         ec:12:ae:5b:e0:82:ad:c6:1d:32:0e:f7:e1:03:7f:b9:2c:b9:
         50:0b:ba:d3:e2:22:40:23:41:64:4c:ae:fa:07:90:3a:71:d9:
         55:c2:fd:ba:cd:f6:a4:0d:2d:b9:ec:75:b4:9a:1f:f5:b3:84:
         87:fb:13:e7:7d:21:82:f3:8a:e6:60:c5:2b:b7:7b:67:98:97:
         4a:1a:ae:94:13:6c:de:e7:e5:61:43:33:59:36:74:64:53:99:
         9a:3e:f4:84:8e:ab:ed:94:11:4a:58:8f:12:b1:2a:32:de:ea:
         1f:81:72:d0:12:9c:44:9c:01:aa:ba:ce:9c:4b:a1:cc:91:02:
         89:92:d1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:20:49 2026 by rpki-client