Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a90b7cb1-0723-3eaa-a966-d4f43c33a2b8.roa
File:                     a90b7cb1-0723-3eaa-a966-d4f43c33a2b8.roa (raw, json)
Hash identifier:          rIQq3Cq0ug1U9xQ30wdHR4s/eqQsS5gmEwt2l5jJMDY=
Subject key identifier:   AF:9F:13:42:09:25:04:FD:A6:BD:FC:22:6F:B4:1A:75:F2:03:D4:73
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F49739E5AF955C4A58C0BCE40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a90b7cb1-0723-3eaa-a966-d4f43c33a2b8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d80:6a80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:9e:5a:f9:55:c4:a5:8c:0b:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ebd89010-1b69-46f1-82b2-59f098195267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fa:ce:d9:df:ae:9b:7d:0e:1c:2a:00:b2:d8:
                    f1:7b:f2:bb:af:39:74:e2:58:1b:3d:b1:a7:5f:79:
                    33:b3:27:51:81:4e:e1:f8:75:56:14:02:57:57:9b:
                    c5:e7:5d:07:76:b5:6e:09:45:7f:25:b2:b6:c0:7f:
                    38:86:8c:c1:72:ce:40:4b:e3:64:61:2f:10:06:9d:
                    41:36:32:13:a4:b0:c9:da:cb:b5:71:57:1b:0f:cf:
                    e7:ff:c7:0c:9c:b4:2f:f8:18:ea:26:07:ee:1d:e6:
                    6d:f0:fe:58:92:29:3f:5e:a0:f6:6e:80:e0:4c:f7:
                    c6:60:2b:e6:20:b8:f7:32:40:9d:88:55:f8:0e:0a:
                    b4:41:8a:ba:46:47:90:0b:3a:48:65:ea:36:dd:84:
                    8a:5d:ba:a0:cf:23:bd:04:b6:05:a1:28:ce:8b:25:
                    50:64:99:5f:5b:e6:3b:76:a6:92:e6:f4:98:25:53:
                    f1:72:2a:b8:ec:86:ef:16:29:3e:80:4c:98:00:ba:
                    0c:19:a2:21:1a:3a:54:de:e1:22:c3:2c:5e:25:93:
                    0a:88:aa:06:5b:c7:09:36:7f:38:7c:0d:fb:db:83:
                    8f:46:74:b1:2c:b8:bf:dc:e6:86:f8:fe:a6:64:6c:
                    59:77:cc:7e:b7:52:f1:3e:5d:6a:b3:d0:22:21:9b:
                    c0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9F:13:42:09:25:04:FD:A6:BD:FC:22:6F:B4:1A:75:F2:03:D4:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a90b7cb1-0723-3eaa-a966-d4f43c33a2b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:6a80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:00:f9:3a:74:70:57:8b:d1:06:3b:fc:c5:07:27:6e:8e:15:
         78:0b:dd:9e:bd:3e:29:b8:0c:43:0f:a1:c3:a7:17:e4:04:a5:
         cf:59:9c:d7:30:81:e0:17:fc:e5:43:e2:cf:92:20:3f:ac:d0:
         96:62:ad:02:09:ca:84:ba:9a:16:51:bf:1b:5a:95:b2:bb:c3:
         4b:3b:a8:43:29:90:54:ae:41:84:6a:9b:4b:a3:86:d9:08:91:
         86:f4:b9:db:9a:d7:b3:87:92:08:51:a8:97:88:1e:43:86:58:
         d6:32:fe:7a:d0:7d:ce:fb:2a:ca:60:7c:18:db:03:76:e5:bc:
         8c:0e:1e:6c:2a:77:4b:18:d4:6d:8c:0c:eb:32:5d:2b:b2:a8:
         16:3b:7c:8c:69:2b:c9:be:eb:ee:6b:85:9c:74:10:29:86:23:
         3f:38:d0:9f:c5:e7:1c:ef:32:64:e0:3e:9b:95:db:c3:02:2b:
         76:e4:8b:c5:e7:49:2b:16:78:45:8a:c3:74:38:d8:5c:1e:60:
         d0:fa:ea:61:54:b7:8a:19:d2:fb:ec:77:b9:ef:3a:f3:51:02:
         9f:1c:9b:ba:20:a3:0d:f7:50:c4:02:08:91:ed:c4:f6:2d:b2:
         fe:60:ca:d2:17:49:f5:17:1f:d1:63:1e:a9:07:b9:57:10:73:
         de:82:b2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:00:37 2026 by rpki-client