Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c3572fd-df72-3a21-ac76-8fc376426a57.roa
File:                     8c3572fd-df72-3a21-ac76-8fc376426a57.roa (raw, json)
Hash identifier:          V+ygaYfVT6woyIu+VkfTmc5ibBsQR8adwOl+PFSpnns=
Subject key identifier:   C0:03:63:BB:49:07:34:24:14:4F:DA:83:4E:A0:34:3B:FA:DA:53:92
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24E132B29ED802F140D55B28
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c3572fd-df72-3a21-ac76-8fc376426a57.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2d80:8c80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:32:b2:9e:d8:02:f1:40:d5:5b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=c91f971e-335f-4b86-b012-1fafe8a27499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:be:10:c3:a2:aa:f3:c8:03:ea:68:ef:90:c6:
                    3a:db:a4:15:cf:de:3e:71:22:e6:9b:5b:79:71:2c:
                    9e:ee:a3:67:7a:ef:c0:f0:79:7c:c8:a4:2a:18:8b:
                    c0:f1:02:2b:7c:81:d8:b7:e4:53:e0:a4:a0:10:38:
                    41:7a:09:88:8c:0e:8a:0e:f8:dd:9f:40:a9:9c:b1:
                    6b:11:b9:08:c2:ec:33:0a:0d:88:29:47:cb:d9:a6:
                    c6:01:30:42:06:7a:f6:6b:a0:f2:39:0d:87:f7:e9:
                    5d:36:4f:88:d0:c9:98:63:ba:63:4b:a4:3e:aa:81:
                    5c:89:3e:b6:43:86:a8:c5:b1:5e:b2:57:30:a4:8f:
                    17:99:33:72:9b:4f:07:38:81:af:78:d7:a8:f6:c6:
                    3b:32:61:f7:b3:3a:b5:0e:16:cd:2d:79:ef:d7:05:
                    3b:91:06:09:4e:2b:3e:d5:cb:b2:a9:82:b2:97:ab:
                    6e:cb:a0:bf:bc:a9:61:f0:cb:57:d9:0d:3f:5c:c2:
                    64:c6:62:e0:f4:0e:83:58:ef:92:37:72:16:eb:2b:
                    ff:29:ea:31:2b:1c:00:b8:fc:d3:68:43:54:cb:68:
                    a9:ab:70:6e:97:42:ef:54:c9:41:7c:af:34:58:fe:
                    bf:9e:f5:61:8b:3a:69:2f:c6:70:30:40:e9:e1:36:
                    77:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:03:63:BB:49:07:34:24:14:4F:DA:83:4E:A0:34:3B:FA:DA:53:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c3572fd-df72-3a21-ac76-8fc376426a57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:8c80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:87:26:4b:f3:a0:1b:df:2f:72:24:81:61:c7:c4:b0:7e:37:
         1b:8b:e4:69:b8:f2:73:77:17:b3:24:b2:92:f6:4b:a5:92:68:
         4c:b7:33:5c:1c:4d:bf:de:64:10:6f:f3:8c:15:ba:c6:ff:26:
         c0:a1:b1:49:75:61:7c:fe:db:6d:f5:61:ee:f2:78:ef:36:b6:
         0f:6b:fb:28:47:52:52:89:3a:59:55:19:23:c7:d2:93:1f:eb:
         0e:e5:a7:1c:d1:20:eb:da:cb:a4:4c:5f:53:f5:c3:5e:9d:7f:
         ed:72:4c:c4:bd:6a:98:a8:ce:cf:46:d6:14:fa:10:db:42:36:
         41:0b:ea:6b:82:ae:1d:df:75:d1:d4:04:2f:36:ce:45:e8:ad:
         1e:cb:c5:58:c1:1b:da:ee:34:cc:d4:01:2a:96:3c:46:b7:77:
         e8:ae:b9:27:19:f0:a3:7c:2a:29:ac:ff:7c:98:b6:00:8f:ee:
         a6:1e:f0:27:31:9c:22:39:15:a5:dd:5a:78:26:42:98:46:22:
         ed:b7:5c:42:86:ba:d2:b4:e6:73:a5:ac:d4:f2:0a:71:5a:8b:
         c6:d5:79:e9:33:46:fe:c5:01:4e:57:c5:40:25:2d:a3:c1:91:
         19:3f:62:3f:96:b1:a4:07:22:6e:ea:a3:19:04:b2:3e:34:94:
         e1:cf:e9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:07:43 2026 by rpki-client