Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6087f274-05df-37ef-a775-fca9381b0329.roa
File:                     6087f274-05df-37ef-a775-fca9381b0329.roa (raw, json)
Hash identifier:          0ZgMXqi6BWx8M19csS5G6Ucl7gUPkkHPpJs67/1bJzQ=
Subject key identifier:   C9:7E:7D:50:A9:A3:68:D6:DC:F2:99:35:D8:EB:83:58:A2:5A:F2:F5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24E127A9C3C3AA3B52170900
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6087f274-05df-37ef-a775-fca9381b0329.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2d80:ad80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:27:a9:c3:c3:aa:3b:52:17:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=64dd17b3-1865-431b-9741-b3eaee1b772b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ac:a0:b3:66:2f:c1:8d:a3:96:49:60:5b:1f:
                    42:21:3c:6a:77:44:42:e1:db:32:07:09:9e:b1:0e:
                    c4:dd:38:47:64:d0:1c:9b:87:41:24:26:8c:d1:3d:
                    af:1a:12:bc:e1:47:b1:1f:93:3b:0d:44:21:89:d1:
                    fc:a5:e9:91:35:44:c9:bf:7f:78:1a:40:81:72:f8:
                    bc:c4:dc:8a:cd:08:c0:4f:90:82:d0:9f:8d:8b:7f:
                    b3:90:fb:87:21:fc:89:4e:93:ad:a7:43:27:48:22:
                    c9:7c:8b:a6:ba:c7:f6:63:61:7a:24:66:ba:e0:30:
                    9c:3f:d5:24:e4:80:62:b1:73:e6:9f:77:fd:f2:9c:
                    9b:28:21:6a:25:3f:5b:5c:5b:76:1d:20:12:9f:c2:
                    f8:43:fb:7c:c8:08:f3:37:c3:57:dd:21:b4:08:62:
                    92:39:53:4a:2f:89:f3:94:d2:ea:26:bb:ec:ae:7f:
                    57:1d:b9:99:f8:f8:90:f0:d5:13:e6:30:29:ce:55:
                    a4:aa:f2:e5:c6:10:5e:9b:cd:7f:fd:e6:cb:9c:2c:
                    f5:c4:c9:eb:76:3d:9a:35:66:05:f4:f5:c9:42:11:
                    74:c9:36:27:08:fb:cf:07:2c:dd:bd:79:7f:19:7e:
                    6c:40:6f:e4:7b:90:90:ce:ef:1d:22:09:9d:63:fb:
                    09:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7E:7D:50:A9:A3:68:D6:DC:F2:99:35:D8:EB:83:58:A2:5A:F2:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6087f274-05df-37ef-a775-fca9381b0329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:ad80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:78:ba:b3:ba:d7:a7:53:18:00:55:4c:89:75:94:3b:5e:5a:
         93:a9:7e:85:eb:33:37:0b:1a:6a:48:82:0d:d1:f9:83:b3:ca:
         a8:6e:e4:8a:72:77:32:0d:bd:2a:36:3e:92:4d:1e:c8:05:39:
         b7:90:c7:0f:ff:20:b6:be:60:21:0c:bc:0d:cb:17:45:36:2f:
         f2:1d:ff:0f:de:f2:03:75:f1:3f:2a:82:7e:60:f8:00:a4:4c:
         44:a7:14:3e:04:94:c8:e3:c1:11:cc:ab:9a:d9:86:3f:c1:f8:
         61:c5:92:17:e2:69:77:fd:ba:3b:5d:d0:05:a3:cb:f2:a4:aa:
         6c:d5:48:49:72:cc:ad:bf:27:01:b0:67:b7:ff:01:eb:49:d6:
         a8:44:fc:66:8a:b6:36:5c:bb:b9:62:50:e6:5a:cd:08:01:58:
         3d:fb:a3:e0:18:f5:92:ce:b7:0c:44:6f:d6:4b:d2:cb:24:a7:
         aa:f2:2a:23:94:2f:96:6f:63:1c:17:3d:d3:89:a4:90:85:35:
         f3:66:6c:4f:d5:29:f9:0a:8f:a3:f6:03:36:cf:2a:5c:47:8d:
         67:15:7b:76:37:6a:71:7d:59:d6:9b:8f:56:1d:e6:64:9a:8b:
         45:16:1a:a1:8e:ac:c7:c3:f6:30:9c:c2:28:06:01:39:4e:2a:
         ac:05:f6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:04:25 2026 by rpki-client