Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/60315558-cef3-3a5d-9147-45a00cc61720.roa
File:                     60315558-cef3-3a5d-9147-45a00cc61720.roa (raw, json)
Hash identifier:          112f45sEscCvgj0rY6ctrh5bm0oNPNC0W4mVJgjozKw=
Subject key identifier:   99:09:16:5A:AE:E8:4D:C1:54:2C:C9:F2:4F:CB:83:24:62:46:FF:26
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F497323A5DB3CFE2A57AD7C80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/60315558-cef3-3a5d-9147-45a00cc61720.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d80:2000::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:23:a5:db:3c:fe:2a:57:ad:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=58dff302-b22a-4939-85ca-729309a240fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0b:73:45:ad:91:85:0b:20:dd:72:33:cf:03:
                    df:26:c9:e5:e9:a5:ee:0d:25:9c:96:ca:23:97:7a:
                    62:74:6a:ac:45:7c:58:45:03:b9:81:5c:8a:57:6c:
                    91:96:68:9f:61:a3:fa:64:95:b8:3c:ad:9a:7d:b8:
                    8b:14:60:a9:43:4a:1c:24:ed:64:55:c1:c8:fd:ad:
                    e9:59:ae:0b:54:cd:c8:68:68:58:e9:30:b9:73:f6:
                    9d:04:67:76:9b:45:fc:b1:9b:85:81:02:fd:d1:ac:
                    80:cb:5d:a0:99:67:3e:df:28:89:d6:4c:d7:1b:7e:
                    14:ef:89:2c:e4:d0:1f:2e:5f:c9:05:e8:5d:cd:92:
                    e7:75:32:bf:43:a5:0a:09:c0:15:a4:fe:45:40:4a:
                    62:13:e7:a1:32:ff:5e:ae:6e:57:9b:34:95:6e:3d:
                    52:62:c6:de:ee:2f:81:15:da:1d:0e:63:29:8d:51:
                    b0:29:58:e9:72:37:53:d9:33:6a:ab:17:c4:cd:88:
                    7b:af:20:48:bf:7d:e1:61:0e:6b:67:02:f2:41:36:
                    ca:4e:80:ef:b5:81:e7:00:17:0a:8b:f4:d0:09:12:
                    b6:6b:63:4f:1b:5d:e1:b5:b5:97:cf:f3:96:7c:25:
                    4c:29:b9:8f:3a:ec:9c:8d:1a:48:3f:42:4d:a8:b5:
                    4a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:09:16:5A:AE:E8:4D:C1:54:2C:C9:F2:4F:CB:83:24:62:46:FF:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/60315558-cef3-3a5d-9147-45a00cc61720.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:2000::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:02:3a:f0:27:ae:4d:29:67:dc:cf:1e:a5:7b:c6:96:7b:3f:
         d5:9d:db:4c:d0:46:61:9a:02:8f:34:0a:89:42:49:c3:75:9e:
         47:87:0b:d1:a2:99:ef:82:a6:96:8b:8e:f0:94:c4:40:f1:24:
         e0:48:ac:27:69:52:8c:cf:df:40:96:ef:4e:e1:99:16:9c:f0:
         a0:35:13:bb:41:9e:60:3e:31:c1:c2:19:2e:28:c8:14:8c:9a:
         90:c8:43:38:a8:29:a1:86:ba:77:fd:63:d1:d9:c9:cf:7c:e8:
         e4:00:35:30:f9:f5:d0:d1:2d:41:47:1f:6c:06:3a:83:2a:12:
         0c:97:1b:b4:37:7c:df:fa:33:98:aa:1a:d0:12:7a:de:c3:82:
         29:75:33:d8:83:5b:33:a9:8f:24:19:07:6f:69:ab:6e:78:c2:
         27:6f:ef:f5:bb:52:12:cb:dd:be:f3:5e:52:ce:12:74:2d:61:
         f1:1c:e3:73:e6:bd:ca:59:5b:44:e9:83:ce:82:10:91:25:45:
         ba:8c:d2:7d:f5:03:70:3e:f9:9d:95:33:65:4f:4a:09:12:19:
         9d:02:01:19:22:e6:fe:55:6b:bc:0e:31:26:68:1c:ab:df:da:
         ee:1c:7a:da:33:ff:41:8e:17:f5:d1:4f:5f:82:d3:23:ff:32:
         8d:db:b9:6a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JcyOl2zz+KletfIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NThkZmYzMDItYjIyYS00OTM5LTg1Y2EtNzI5MzA5YTI0MGZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQtzRa2RhQsg3XIzzwPfJsnl6aXuDSWclsoj
l3pidGqsRXxYRQO5gVyKV2yRlmifYaP6ZJW4PK2afbiLFGCpQ0ocJO1kVcHI/a3p
Wa4LVM3IaGhY6TC5c/adBGd2m0X8sZuFgQL90ayAy12gmWc+3yiJ1kzXG34U74ks
5NAfLl/JBehdzZLndTK/Q6UKCcAVpP5FQEpiE+ehMv9erm5XmzSVbj1SYsbe7i+B
FdodDmMpjVGwKVjpcjdT2TNqqxfEzYh7ryBIv33hYQ5rZwLyQTbKToDvtYHnABcK
i/TQCRK2a2NPG13htbWXz/OWfCVMKbmPOuycjRpIP0JNqLVKwQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJkJFlqu6E3BVCzJ8k/LgyRiRv8mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjAzMTU1NTgtY2VmMy0z
YTVkLTkxNDctNDVhMDBjYzYxNzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgCAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADkCOvAnrk0pZ9zPHqV7xpZ7P9Wd20zQRmGaAo80ColCScN1nkeH
C9Gime+CppaLjvCUxEDxJOBIrCdpUozP30CW707hmRac8KA1E7tBnmA+McHCGS4o
yBSMmpDIQzioKaGGunf9Y9HZyc986OQANTD59dDRLUFHH2wGOoMqEgyXG7Q3fN/6
M5iqGtASet7Dgil1M9iDWzOpjyQZB29pq254widv7/W7UhLL3b7zXlLOEnQtYfEc
43PmvcpZW0Tpg86CEJElRbqM0n31A3A++Z2VM2VPSgkSGZ0CARki5v5Va7wOMSZo
HKvf2u4cetoz/0GOF/XRT1+C0yP/Mo3buWo=
-----END CERTIFICATE-----
Generated at Wed Sep 30 20:09:44 2026 by rpki-client