Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6240cee6-1e14-3e37-bf10-08847f3f442c.roa
File:                     6240cee6-1e14-3e37-bf10-08847f3f442c.roa (raw, json)
Hash identifier:          4s4Lho/frRByALYGe8mrmcR99WGMavFR2ZqXaiJmLqY=
Subject key identifier:   5B:EE:DD:12:96:B6:CF:8E:39:EF:61:C9:2D:6B:99:FA:A3:68:B3:5F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E8DEFB213D11042D4EB49ADC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6240cee6-1e14-3e37-bf10-08847f3f442c.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:9c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:b2:13:d1:10:42:d4:eb:49:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=b5304f75-27a5-49f9-b586-600ec9730fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4c:8c:20:18:79:77:13:b4:82:39:47:df:c4:
                    6b:54:6f:5d:80:34:98:bb:a0:46:20:16:1a:91:c1:
                    5a:b9:6a:eb:80:b0:84:94:70:9c:9b:96:92:9a:f5:
                    31:07:db:f1:20:7c:a8:df:f6:a5:15:59:41:4f:35:
                    c9:13:d4:1b:17:a4:bb:ab:47:d5:02:50:80:a8:0a:
                    6d:6c:b0:d3:66:ab:47:89:23:8c:73:6e:e7:f9:3b:
                    14:9e:df:cf:81:2f:83:92:86:7e:84:5c:59:7b:93:
                    0e:a1:48:9b:9c:c3:35:ff:e2:20:31:ea:c5:fc:1b:
                    e3:4a:51:67:2b:d5:54:ce:cf:26:d2:4d:15:fb:b2:
                    d8:63:cb:b1:b2:29:00:51:cb:c8:9b:a0:83:01:6e:
                    2c:a6:82:4f:21:1a:e5:55:ba:9f:db:6c:4b:07:25:
                    c8:87:74:e7:83:56:eb:4d:d3:68:f9:90:5e:70:a1:
                    40:94:b1:b0:d2:50:76:cc:3a:06:f8:ed:85:86:97:
                    e4:f7:14:21:18:c7:df:d2:ec:68:35:9f:ce:dc:7c:
                    98:af:05:b4:ea:d1:ca:c5:a4:ed:7d:63:b7:c0:45:
                    3a:07:77:1a:2b:5d:90:3f:42:6d:a1:06:bd:ea:23:
                    8a:26:0b:8f:de:0a:aa:4e:ee:ea:5c:c9:69:75:45:
                    f5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EE:DD:12:96:B6:CF:8E:39:EF:61:C9:2D:6B:99:FA:A3:68:B3:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6240cee6-1e14-3e37-bf10-08847f3f442c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:9c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:b7:d1:ad:bd:b3:b6:0a:38:8e:dd:fc:ff:cd:9b:35:69:41:
         e9:e9:5b:80:6d:ae:6e:bb:83:84:75:dc:0c:a1:28:45:0c:ac:
         69:f6:ac:81:2d:c9:6e:a9:e3:58:9e:46:55:36:2b:ae:2e:3e:
         2b:7f:52:97:f3:df:f9:39:c2:4f:be:94:35:fe:a7:66:4e:50:
         9f:9c:0f:dc:e7:38:ed:8a:01:9c:bc:dd:e2:10:f0:f2:15:c0:
         e3:1b:07:aa:dc:6a:f1:b3:f5:4d:81:91:ff:9c:06:67:a0:a9:
         df:5c:86:c0:5f:3b:3b:66:8b:53:48:0e:c9:fa:e7:be:47:2a:
         6d:33:42:34:49:74:69:21:db:55:13:97:af:a6:d7:40:85:b5:
         23:bf:7b:80:c8:69:b2:3e:ba:70:37:66:79:88:fc:4a:d5:c1:
         a1:29:bc:2c:4e:dd:0b:ac:8d:6b:27:64:4e:3d:c0:f7:9b:e0:
         2e:4f:c5:d7:95:6e:2f:43:fe:d0:9e:84:e1:2f:3b:d9:b4:99:
         f9:e6:15:a7:0e:9c:5b:2f:77:85:72:85:57:46:f1:a1:e4:aa:
         2e:27:89:f9:e7:f7:0f:25:36:6e:81:06:10:15:77:6b:be:dc:
         1c:16:84:e8:11:24:93:40:06:b9:bf:a5:39:0e:27:8e:5c:d3:
         58:c1:b6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:47:11 2026 by rpki-client