Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad249888-96cc-302f-bc25-68d383f2be2c.roa
File:                     ad249888-96cc-302f-bc25-68d383f2be2c.roa (raw, json)
Hash identifier:          +NSangsMGTrQQir1ltkCy+WC9fq6YfNBphfRcOoZljw=
Subject key identifier:   F9:C4:A8:8C:E5:40:4E:78:0D:6F:96:8B:36:0C:BF:8A:64:23:00:A3
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E7D2F7F726D2EBCBEAE772000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad249888-96cc-302f-bc25-68d383f2be2c.roa
Signing time:             Mon 13 Jul 2026 21:00:12 +0000
ROA not before:           Mon 13 Jul 2026 21:00:12 +0000
ROA not after:            Sun 11 Oct 2026 21:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d81:2780::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7d:2f:7f:72:6d:2e:bc:be:ae:77:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 21:00:12 2026 GMT
            Not After : Oct 11 21:00:12 2026 GMT
        Subject: CN=c8f42b95-9510-4f1d-938e-f8147b550e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:33:71:83:38:9d:5f:e7:04:f7:53:9b:5f:51:
                    40:8e:a3:6c:66:76:73:5c:ad:d8:05:5c:4d:fd:a3:
                    5a:2e:9f:17:a1:69:1d:f7:71:f1:d2:72:75:f8:89:
                    0f:1d:79:d1:85:4d:ff:3a:97:e0:ac:f4:3b:1a:7a:
                    35:83:86:e7:c0:9b:07:4d:49:ea:bc:48:a3:a8:98:
                    3a:3a:fe:b1:06:e7:10:b7:4b:66:f2:cb:88:7b:c5:
                    26:fd:f8:f1:5b:1d:8d:e8:3b:61:af:4c:74:f2:62:
                    de:06:c3:16:09:07:37:a7:e5:f2:50:30:97:d0:ea:
                    a6:7e:fe:22:5f:68:23:1a:f5:39:19:e7:23:9e:51:
                    46:54:8c:cd:ad:c2:1e:41:64:93:6a:a8:b0:9c:15:
                    52:63:46:39:ba:cc:ce:3b:0d:f0:bb:8c:cc:c3:3b:
                    a8:73:29:80:1c:ba:4a:5f:c8:44:94:90:34:09:a9:
                    99:3b:84:d2:88:6d:81:85:0b:6e:01:cd:0e:e3:cb:
                    b6:49:5e:9b:94:b8:44:cc:fe:48:95:63:b2:07:c4:
                    30:aa:80:99:2c:94:6a:d5:c2:09:9b:49:11:06:40:
                    d5:18:b7:41:4a:89:13:50:49:a6:d0:20:e6:ac:71:
                    51:21:21:f4:ff:f7:fc:dd:1d:2b:4b:56:5d:83:aa:
                    7b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C4:A8:8C:E5:40:4E:78:0D:6F:96:8B:36:0C:BF:8A:64:23:00:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad249888-96cc-302f-bc25-68d383f2be2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:2780::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:56:bc:ab:e4:e1:75:ef:48:7b:ec:e7:92:1d:4e:fe:5f:35:
         92:b7:96:6f:93:16:e6:15:fa:91:06:bc:20:74:98:59:d3:b6:
         04:cb:28:3a:e1:c8:13:ad:9e:01:6f:2f:ca:8e:79:56:67:b0:
         17:d8:b9:a7:42:9b:59:56:07:ec:6c:15:39:a3:c8:82:a0:bf:
         7e:2a:f8:6d:22:14:ed:7c:cd:e8:57:a2:09:6f:7b:ed:f9:0c:
         10:d5:a0:9f:8f:1b:b7:76:59:1a:e6:49:8e:4d:67:86:1b:34:
         53:57:83:ad:71:a3:67:b0:2e:eb:f8:64:5d:0d:94:31:12:4e:
         04:ca:dc:6e:6c:06:f4:e7:db:a9:22:a4:d8:fa:81:06:84:9c:
         75:db:bb:86:60:88:09:57:03:00:e7:4f:31:91:78:6c:b8:5b:
         11:88:05:94:36:ac:57:2c:33:cb:c4:0a:16:0a:17:3f:0d:59:
         97:84:e4:0d:30:59:e0:b8:17:81:e1:15:06:a9:32:26:c4:f8:
         1b:72:63:10:43:7e:f9:29:15:02:a6:55:6a:66:fa:37:ee:d7:
         2f:41:76:df:c8:22:17:4e:de:4f:b7:f5:e7:7f:13:eb:af:ae:
         95:47:0e:2d:0a:c6:f4:43:c4:6b:64:a2:63:67:45:ad:db:77:
         36:7c:cd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:03:16 2026 by rpki-client