Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cb5a1d3-7b63-3bf5-99e5-83506e506053.roa
File:                     9cb5a1d3-7b63-3bf5-99e5-83506e506053.roa (raw, json)
Hash identifier:          AWfAjiOp6KPbM9p/ElexnBtYjR83aOt2jP/INr1hIyw=
Subject key identifier:   FB:CF:FC:3E:83:FF:E7:62:10:AE:B4:9D:6D:34:B7:3E:2B:DD:D9:44
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4989191CFC383AFEADC46680
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cb5a1d3-7b63-3bf5-99e5-83506e506053.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:a700::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:19:1c:fc:38:3a:fe:ad:c4:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f4e87401-f790-4e1a-8595-802abe698b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:10:c0:68:77:11:91:64:cd:8b:01:4e:33:3e:
                    27:6e:da:5e:b9:ab:f4:ac:dc:fd:82:a9:a1:c9:29:
                    98:35:96:3d:ba:96:4a:e1:84:37:05:b6:88:09:0f:
                    b7:50:03:a3:74:9c:89:b3:48:0d:95:08:d9:bb:b9:
                    a9:a7:9d:75:99:73:cc:21:ca:d8:7b:27:1d:be:34:
                    7a:21:2f:10:0b:f5:cd:ea:78:32:43:81:35:68:b4:
                    dd:42:6e:86:e6:69:a6:6b:54:60:0a:34:db:a9:3c:
                    ef:ae:79:71:04:e0:93:9e:cb:b0:ad:4b:44:47:f9:
                    95:22:4b:a4:7d:95:c9:82:72:98:f6:e6:f5:36:ca:
                    a9:14:35:57:c2:86:88:76:89:e3:94:df:74:ed:ff:
                    68:14:7b:23:c1:04:44:f8:ad:3d:dd:54:38:76:b8:
                    7c:02:19:02:72:34:be:25:fa:05:7a:b2:a5:99:3f:
                    a6:f0:da:ec:5a:2f:29:ac:64:af:fb:03:cd:dd:fa:
                    b6:48:95:2e:e4:04:b2:ee:b5:ef:76:45:f1:ed:fc:
                    c8:32:f0:54:e8:74:52:cb:f4:c6:70:fc:26:cd:fe:
                    37:bc:5f:2f:97:f3:75:c7:16:7a:2c:af:55:28:87:
                    87:4d:e7:3c:8d:81:29:79:a7:97:9f:e4:ac:f8:1f:
                    1d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:CF:FC:3E:83:FF:E7:62:10:AE:B4:9D:6D:34:B7:3E:2B:DD:D9:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cb5a1d3-7b63-3bf5-99e5-83506e506053.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:a700::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:c0:b9:c2:4f:90:d8:92:9a:27:7f:96:9f:5d:47:a5:50:40:
         36:09:1d:b0:cb:1b:58:ea:7e:36:b4:7d:e1:b7:15:5c:f4:2a:
         ff:36:82:ce:c4:7f:18:d7:52:a4:6c:60:11:b8:5b:29:e2:32:
         6b:97:88:6f:35:44:af:4b:eb:1a:60:52:3f:5a:9f:8f:84:c2:
         73:cd:93:e5:af:d9:12:52:0f:16:18:9b:b4:c5:37:2e:28:ef:
         a4:a5:9a:86:61:e1:c7:60:e1:5d:aa:b6:b1:1e:a6:63:08:61:
         d1:20:bb:32:b6:c4:39:ca:46:b0:be:47:fe:37:48:ed:bd:6c:
         bf:7f:a3:b9:01:2d:86:ba:94:8f:d2:14:00:95:e1:68:71:99:
         53:ed:ff:6c:64:27:9a:15:52:17:7c:0a:5b:7f:92:7e:f0:22:
         70:aa:58:d6:5a:08:08:14:ab:d5:ce:39:b7:04:8b:32:17:1d:
         58:11:14:02:74:61:8f:84:1f:a2:42:4d:0d:bb:46:e4:4e:73:
         d9:f9:34:96:10:3e:14:76:40:22:21:9c:0a:09:fd:fd:3e:d2:
         e4:e8:bd:fb:09:e9:11:70:73:36:97:56:da:ac:91:ce:48:5e:
         10:03:9d:70:54:4f:bf:c6:5e:7d:92:2f:18:69:d6:f5:b1:b0:
         56:42:f1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:34:57 2026 by rpki-client