Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ced27730-8460-33af-9791-605fb1792856.roa
File:                     ced27730-8460-33af-9791-605fb1792856.roa (raw, json)
Hash identifier:          xkjCmj9OpQ2yLG3TDVBv/vWtJQW4TWG7eqZH3ZCDOT4=
Subject key identifier:   78:B4:47:12:55:C3:F7:19:51:99:4C:D9:F3:4B:10:D9:C0:E9:60:A3
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24DF9093B3EA9A2D08E12400
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ced27730-8460-33af-9791-605fb1792856.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2d80:9d00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:90:93:b3:ea:9a:2d:08:e1:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=bdb00b6c-2f55-40a6-8ee5-51b3ce471460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c2:79:24:5f:f3:3b:58:37:5f:22:bd:22:4b:
                    95:f5:b7:53:7d:13:cc:49:f7:b6:7a:8a:e7:0d:b7:
                    85:d0:50:7f:ad:8e:c3:f3:90:4a:a1:bb:34:0e:0c:
                    c8:ba:76:7c:0c:75:3f:48:f9:c3:53:70:9e:a9:0c:
                    d9:e6:ae:7c:e6:d2:33:57:17:34:6c:92:85:51:e2:
                    0c:a3:df:be:6c:76:5b:2e:ec:49:33:d7:5b:e9:ef:
                    c4:e1:9d:65:a7:74:8f:01:52:fb:90:a6:74:1d:4e:
                    a4:86:55:99:ad:e4:4d:82:bc:52:60:73:08:b3:4e:
                    d1:45:64:fb:a6:8c:82:d9:0e:d1:c6:89:e0:74:4f:
                    7a:b9:19:9e:9c:82:f3:db:1c:6b:28:2e:82:49:53:
                    c6:70:c3:78:b3:ac:32:97:c7:72:4c:29:29:27:fd:
                    63:3a:88:98:29:10:62:7c:74:83:33:f5:98:ac:78:
                    27:99:33:8c:e1:75:f5:48:a6:dd:5e:a5:55:9e:ce:
                    bb:ef:af:3d:b5:47:4b:59:28:98:b4:14:66:6c:3c:
                    bc:f3:c7:b3:3d:77:f5:1a:08:85:10:5e:f8:65:d4:
                    b8:64:d0:ba:14:ff:c3:f3:95:15:77:15:6e:ed:37:
                    29:65:8a:eb:03:49:51:d6:fd:f7:79:54:3e:5d:17:
                    0f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B4:47:12:55:C3:F7:19:51:99:4C:D9:F3:4B:10:D9:C0:E9:60:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ced27730-8460-33af-9791-605fb1792856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:9d00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:e7:c4:bd:90:47:74:0b:c2:1b:57:21:72:31:e1:98:2c:e1:
         6e:87:a8:41:ec:93:17:27:47:56:63:f6:f6:ba:41:00:a0:c0:
         c5:4b:f6:43:7d:72:a4:cb:cf:7a:0c:73:fd:1e:6f:62:5b:a7:
         0d:9d:bd:47:ea:84:fb:cb:34:3c:c1:51:a4:79:7b:42:5e:3f:
         82:37:d2:53:10:6b:51:0a:10:d2:3c:13:15:6f:0c:0a:c4:37:
         b5:33:0e:80:bc:36:3f:7a:35:cd:c5:4d:d7:57:aa:6c:55:fb:
         7d:d7:64:05:c4:9a:ed:07:3d:4c:12:4f:32:82:13:08:d4:19:
         e8:78:ae:ca:52:d9:b6:6a:f3:0b:11:fa:c0:b0:49:45:b3:bc:
         fa:bb:70:2a:d4:66:c0:2b:43:c1:28:a5:38:18:56:dd:91:42:
         50:c0:78:31:6a:d5:c5:e7:ed:f3:c5:c5:dc:25:e0:aa:94:6c:
         ae:0f:c8:db:bf:e0:fb:ed:3c:68:0e:52:83:8b:c9:cd:3a:1c:
         48:c9:3a:bc:13:91:da:00:67:75:f3:4e:0a:ac:e1:13:29:47:
         ca:22:cd:49:72:04:36:b8:7c:d5:80:93:65:b4:12:48:b3:da:
         01:f3:b3:ac:55:2e:63:3b:c9:40:92:ca:b0:34:49:85:f1:89:
         e9:8c:09:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:43:11 2026 by rpki-client