Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/687f65d2-eb58-3eee-bd80-b9aa039300aa.roa
File:                     687f65d2-eb58-3eee-bd80-b9aa039300aa.roa (raw, json)
Hash identifier:          ZweJ+K0wIaoJe7+sU7VEUhwSkEL9XxtXtsuQPGxwC/c=
Subject key identifier:   29:03:4E:A5:48:D2:E2:F6:E4:CB:42:E3:06:F4:B7:13:A4:8F:A6:D2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F498BE3FF9834C6D994AB22C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/687f65d2-eb58-3eee-bd80-b9aa039300aa.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d80:b480::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:e3:ff:98:34:c6:d9:94:ab:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=76cc3f98-b395-41d4-9c16-538ad1791d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ba:23:bf:00:44:77:d3:75:61:f8:83:55:2a:
                    5c:05:07:40:37:cb:35:11:35:ea:6d:21:78:9f:4d:
                    b7:8f:6d:66:b1:71:5c:57:ad:01:1e:45:eb:a3:22:
                    9a:94:f6:96:c7:28:20:c7:df:e0:2e:b0:45:83:f7:
                    72:e5:b4:c9:78:40:a5:db:69:0a:af:64:62:5b:0a:
                    a5:fb:82:3f:ab:f7:4c:e1:4b:4c:95:3a:13:40:ff:
                    9a:bd:04:56:d4:c6:40:d7:bc:08:0c:62:02:b7:4d:
                    1b:13:24:27:45:ed:94:45:3d:66:ef:24:75:08:47:
                    2f:a7:9f:b7:df:e7:a3:de:7f:70:c7:11:c3:cf:81:
                    05:97:41:21:2d:a9:74:b8:09:5e:a7:50:b1:64:2e:
                    2b:1c:45:18:e0:c2:15:b1:92:c6:f5:da:bf:2b:d2:
                    60:fc:d4:30:e5:bd:4f:5e:84:18:e9:02:bd:50:bf:
                    ed:94:a9:94:6b:f2:10:79:6d:bb:c8:78:b4:df:a5:
                    e5:fe:54:2c:6a:20:d3:e5:0f:09:d0:fc:d5:fb:f4:
                    32:29:a0:1c:05:32:65:bf:44:62:fc:82:ae:df:7d:
                    34:5f:ef:1e:60:de:54:13:b7:90:e8:4c:9d:fe:0c:
                    bb:4a:02:f7:66:f7:e1:12:8d:46:9c:0b:4d:68:d1:
                    b3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:03:4E:A5:48:D2:E2:F6:E4:CB:42:E3:06:F4:B7:13:A4:8F:A6:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/687f65d2-eb58-3eee-bd80-b9aa039300aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:b480::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:7d:e9:f1:7f:34:cf:1d:d6:4d:e9:1c:a6:ad:a7:f8:a6:ec:
         da:92:78:9e:d9:09:5f:45:bf:88:df:e4:89:be:29:a5:56:57:
         51:b7:9c:48:37:18:f1:06:af:70:fe:d1:b8:6d:95:c3:12:cf:
         bb:db:cb:79:d5:d6:6f:0a:ef:58:2c:02:c9:72:af:a4:c4:d3:
         9a:6f:23:2f:f7:14:76:8b:52:51:bb:61:6b:88:2c:82:fb:19:
         0a:8b:60:63:a9:77:5d:65:9d:fe:cd:40:86:96:7c:d7:30:7a:
         28:bc:df:3b:72:14:0a:1a:96:f7:5e:4c:88:86:2e:cb:02:26:
         2c:72:de:d4:4c:95:22:1e:17:21:81:14:85:f2:3f:ae:43:8e:
         db:2c:f5:55:4b:48:41:d4:a7:13:1a:26:06:b0:f0:51:f5:af:
         6c:a3:b6:f7:ae:4d:71:0f:84:c7:94:fe:51:28:f5:68:b6:04:
         28:39:45:78:9e:67:41:14:bf:50:c3:75:d9:f0:dc:65:30:84:
         6e:fc:4f:e2:89:3c:1c:55:65:35:f0:90:67:61:df:39:8f:c7:
         a5:a5:2f:44:f2:86:f6:a9:e4:e7:96:c2:28:8f:87:35:03:0d:
         2f:03:ad:24:39:96:a4:12:99:12:73:d0:28:2b:f2:86:45:96:
         95:90:75:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:59:48 2026 by rpki-client