Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d8e995d3-ac0d-3419-87df-3571d3767041.roa
File:                     d8e995d3-ac0d-3419-87df-3571d3767041.roa (raw, json)
Hash identifier:          i5/fdVHmu80btsKovhIbYh1C6CpQB48EA9kiOJ+LcPA=
Subject key identifier:   4C:BA:51:82:33:F1:38:70:79:03:82:D5:81:64:2D:30:B6:7C:4F:DD
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DCC605E02CC200960C0D98558
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d8e995d3-ac0d-3419-87df-3571d3767041.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     30036
IP address blocks:        2604:2d81:3c00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:5e:02:cc:20:09:60:c0:d9:85:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=b6554c16-541c-4ec1-8064-e0e5a0a9b2d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ec:52:b3:06:d9:30:d0:7b:b1:18:eb:ca:87:
                    89:d2:20:42:81:36:a5:ef:20:62:b8:bc:dc:d8:0d:
                    2b:4a:c8:c3:e2:66:cf:98:66:b4:8b:bc:98:dd:1e:
                    c9:65:15:c5:8d:47:d8:7e:11:a6:e8:ea:4b:b2:51:
                    65:4b:76:5b:c5:bb:9b:e1:fc:18:71:6f:bb:40:ed:
                    0e:cb:80:e0:fd:35:1b:40:58:eb:fe:b3:e1:bd:3d:
                    a6:d8:01:b9:61:79:46:6e:02:05:34:19:e9:3b:48:
                    81:6e:ae:f7:00:f1:ff:a8:34:c3:cf:21:66:8a:f4:
                    09:a8:6b:75:37:3b:26:a3:fd:15:e1:b3:e4:68:e6:
                    bf:88:f3:16:fb:31:84:50:cf:26:3a:75:87:99:af:
                    21:48:12:03:33:67:8f:c5:ed:b9:8f:e4:cd:ea:bd:
                    e9:4c:f8:b0:91:48:2c:f3:e2:ed:69:c1:34:07:1b:
                    87:73:22:45:74:66:67:86:9e:2c:96:84:7e:e7:f5:
                    cd:71:00:d3:c8:e2:be:81:1e:1f:1a:41:e7:41:b3:
                    fb:89:83:4f:43:d4:0b:a3:6f:01:46:2f:a0:13:90:
                    bd:93:ed:6c:dd:f6:da:0f:1b:10:97:cd:c2:9f:86:
                    de:fd:7f:f9:04:f6:07:82:15:e2:fa:b9:38:90:98:
                    aa:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BA:51:82:33:F1:38:70:79:03:82:D5:81:64:2D:30:B6:7C:4F:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d8e995d3-ac0d-3419-87df-3571d3767041.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:3c00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:09:5d:9d:e2:67:1e:6e:43:e3:4a:ed:59:07:a0:d1:4a:85:
         92:19:11:00:b3:cd:ff:72:b3:f0:7b:16:55:01:f4:ca:5c:8f:
         93:90:f9:9e:98:29:79:64:49:8a:ab:14:e9:a4:38:4e:51:c5:
         65:8d:e3:cb:dd:75:cc:1c:a4:2d:8c:7c:ca:bf:9a:f0:2a:cb:
         1a:25:52:f1:b8:73:9b:2c:74:d8:7d:36:67:4e:33:28:85:e9:
         39:53:27:24:c8:41:41:f8:61:fa:7e:70:e4:ea:aa:c9:64:a1:
         d9:3b:57:cd:11:8e:e6:05:98:20:c8:cf:14:f0:02:b5:13:54:
         17:14:5e:2a:5d:af:fe:2f:ad:81:d6:cf:65:3d:cf:18:9a:7c:
         0c:24:60:1b:09:a2:5b:e1:dc:17:c3:be:87:68:25:97:c4:07:
         f9:6e:96:30:c9:0e:a7:7d:d2:84:9e:e0:1e:93:47:4e:90:1a:
         4a:f9:fd:8c:d2:87:fa:c6:ab:d9:8e:8d:27:dd:e1:a1:39:d3:
         cb:85:ec:9f:0f:9e:4d:85:23:e3:b5:93:3f:a5:df:40:28:81:
         fb:7e:b2:ed:9e:fd:a4:08:f8:c0:93:29:8e:df:9a:49:26:1f:
         90:86:55:38:99:a4:43:22:9f:6a:ce:d2:1d:87:aa:e6:4a:b2:
         f7:12:81:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:09:33 2026 by rpki-client