Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d75649a1-b301-3715-8538-a3a7b4010c93.roa
File:                     d75649a1-b301-3715-8538-a3a7b4010c93.roa (raw, json)
Hash identifier:          6yWSXtkNolSsiKbLR8tRXn1sOHNpWOM5EBkIEiZkoEM=
Subject key identifier:   68:C4:D3:02:6B:7B:24:D0:8C:83:09:51:08:B9:4C:0A:34:3D:B9:3A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24DF7FCF59363EC513934EC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d75649a1-b301-3715-8538-a3a7b4010c93.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2d80:ac00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:7f:cf:59:36:3e:c5:13:93:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=ebfc0d14-a1e3-4cb8-9a17-d701bf0edd63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c8:d9:18:ad:2d:de:2a:35:eb:d2:20:6f:b8:
                    a1:47:a0:7c:d9:3b:d6:90:7f:ab:5a:1b:27:ef:f0:
                    f5:99:45:28:98:f3:51:37:47:aa:43:8d:19:2d:11:
                    92:22:a3:fc:91:78:08:33:37:49:e1:02:63:01:bb:
                    9e:97:2a:76:9c:e0:32:11:9c:05:56:32:5b:d1:9d:
                    f9:33:26:99:14:5b:81:c1:69:b6:df:73:ff:ec:a6:
                    89:5b:01:99:0b:fb:6d:49:a1:77:00:e1:bc:5d:a6:
                    56:a9:6c:f7:11:7e:9e:93:c6:42:b0:b1:a1:2c:0c:
                    c5:22:9c:87:75:53:9e:70:9d:2c:08:d9:32:da:f6:
                    5e:01:35:36:dc:e6:67:5c:8d:0b:6b:ef:20:a9:26:
                    c8:30:0b:41:82:2a:db:a4:8b:c2:33:02:3d:5f:08:
                    35:ea:23:b9:4a:6f:78:af:0f:94:b8:64:04:6c:6c:
                    91:03:9c:0e:37:45:3d:75:5b:83:c4:0d:24:20:c1:
                    e0:b9:d1:32:fa:50:50:86:fe:74:00:e0:9f:4f:51:
                    7c:f9:e8:ba:f9:fe:9b:fc:cd:85:e1:83:7c:1b:1a:
                    59:ec:4a:d1:6c:3a:a1:b2:40:bc:84:e0:f8:11:53:
                    9e:d2:66:52:29:22:f5:1f:e8:cb:ea:02:30:c7:4e:
                    54:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C4:D3:02:6B:7B:24:D0:8C:83:09:51:08:B9:4C:0A:34:3D:B9:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d75649a1-b301-3715-8538-a3a7b4010c93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:ac00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:94:a6:b7:fb:3f:14:59:97:da:ee:c3:3a:05:da:db:45:0e:
         6d:2f:fa:c6:5d:2d:00:3b:d6:c4:51:12:fa:0e:05:83:b0:3a:
         54:75:7c:3f:11:32:6f:81:48:fc:6c:58:55:53:32:5c:55:46:
         52:7c:a7:70:30:1e:b8:27:cd:88:ef:41:ee:b5:d1:f3:fc:e4:
         c5:74:8d:3d:7c:ba:ba:27:dc:64:23:67:57:fa:fa:07:22:c4:
         0d:3b:bf:64:98:e0:77:8e:fa:6a:5a:ac:a0:30:c4:14:a0:1d:
         bc:10:ba:60:01:1e:65:25:90:79:97:17:80:4a:93:a4:02:cc:
         c2:8a:9a:ec:f0:bc:62:54:6f:dc:bf:23:71:c6:c5:8b:29:bd:
         ac:62:4f:0c:3f:59:8c:f8:3f:37:6e:4e:af:84:8c:dd:8e:ad:
         0b:de:26:37:ff:40:7a:e1:90:4c:42:8f:08:91:92:6d:c8:3c:
         92:3c:bd:f7:d8:b1:11:52:12:12:14:44:59:d6:6b:e0:c3:61:
         f9:dc:9d:22:b0:33:5f:b6:15:f4:38:7d:08:e7:e1:a0:9c:dc:
         28:83:c8:a0:1b:78:e4:30:8f:a6:df:64:63:62:0f:e2:b9:af:
         ad:29:de:81:a4:a2:53:ce:6a:73:d1:54:08:73:5e:81:f0:a9:
         77:a2:24:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:43:35 2026 by rpki-client