Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76b314a2-1ada-3cc9-93bf-0713174d9917.roa
File:                     76b314a2-1ada-3cc9-93bf-0713174d9917.roa (raw, json)
Hash identifier:          HNDEqCS4MA6xzYQbU8I7c9giLuf7idq+h4w1uZVQnaU=
Subject key identifier:   2E:7A:43:3E:55:5E:6F:22:78:01:0D:F9:2D:E6:16:62:60:CD:4B:3B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D2644ABC3D9E5F21B5C61BFC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76b314a2-1ada-3cc9-93bf-0713174d9917.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     30036
IP address blocks:        2604:2d81:800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:ab:c3:d9:e5:f2:1b:5c:61:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=d1e8da6d-317a-4ba1-ba37-c0fcf8761c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:54:65:66:a1:84:0f:7d:50:c5:a9:d8:a2:45:
                    a8:30:d4:4a:af:ac:93:c0:c9:99:b0:c1:06:94:22:
                    4e:d6:b6:03:ff:d3:91:04:86:d4:4f:89:6b:0b:39:
                    99:65:c8:cb:fb:49:5a:9f:a8:93:02:64:db:5f:c8:
                    55:1c:e6:ba:b2:e5:a2:e0:2a:1e:20:b5:9e:3a:cd:
                    b1:ba:e0:bd:73:21:46:3c:ee:14:e3:78:54:5f:3e:
                    ae:83:ea:b6:10:71:c6:f2:07:ed:cd:a4:3f:bf:33:
                    3e:e5:99:dc:54:42:3b:50:f9:42:b2:28:81:0e:31:
                    a6:c9:97:5f:f6:52:3c:71:e7:c9:32:eb:a3:67:d8:
                    9f:21:8b:3e:5c:b1:90:0c:9d:80:4a:54:cb:bb:f0:
                    e3:b5:87:9a:a6:97:39:ff:e5:97:e6:28:6b:50:33:
                    87:40:f4:32:be:07:d0:5f:3e:dd:9d:5a:2e:94:3e:
                    f9:8b:c8:d6:94:54:bc:28:05:fa:b6:36:2e:52:3d:
                    f8:f3:6d:5d:07:b0:a0:ae:b5:c1:03:88:1a:70:51:
                    e5:b0:6c:dd:29:b9:78:61:7d:70:51:5f:02:08:7e:
                    41:4d:0c:16:ea:8c:29:47:8e:f7:b3:46:b9:8f:64:
                    50:cd:d7:61:17:9b:3b:7b:a6:6b:7b:40:3c:f2:23:
                    3c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7A:43:3E:55:5E:6F:22:78:01:0D:F9:2D:E6:16:62:60:CD:4B:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76b314a2-1ada-3cc9-93bf-0713174d9917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:a2:46:a7:40:74:ad:e1:36:e6:48:91:b2:9f:74:b5:c8:51:
         84:79:86:1a:ec:a2:2e:ca:43:20:17:57:60:38:cd:2d:d2:3a:
         83:8a:ef:ab:0c:92:14:47:a1:db:79:e0:ab:f3:6f:dd:a2:f2:
         90:ba:ee:a8:e5:5e:41:4e:0c:1e:6a:09:67:b7:eb:b7:7a:df:
         a5:5f:e5:68:39:18:62:8a:78:0d:a3:f5:cd:9f:fc:dd:69:28:
         9d:57:8b:87:e0:dd:51:5b:32:79:20:98:dc:08:76:8b:ed:3b:
         44:38:4f:73:d4:0d:98:48:a5:c4:e7:b3:5e:a5:40:5b:ca:3e:
         5c:6f:5a:e1:13:68:ce:b5:ea:02:36:72:c5:38:d0:f4:6f:b6:
         62:bc:55:e1:7a:b7:8d:21:6c:d6:09:5e:af:17:4e:a7:b8:d2:
         92:07:49:a8:26:a9:18:7f:88:1f:9f:c5:2a:ad:d6:7c:af:39:
         4d:f8:5c:7b:50:81:89:25:b8:51:93:34:60:ae:ae:65:49:2c:
         e3:f0:30:89:ca:4e:c9:1f:e3:d1:37:8e:0c:7d:2e:16:5e:39:
         4e:88:b7:35:b3:b2:84:bf:f8:6e:e7:e2:ae:e6:9e:85:7a:4e:
         83:c8:c9:a7:37:9b:ac:b3:15:90:90:08:89:1c:52:7a:1f:db:
         06:da:1f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:06:36 2026 by rpki-client