Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc3d16c5-e2ce-3ef2-9016-970d333eb5ec.roa
File:                     dc3d16c5-e2ce-3ef2-9016-970d333eb5ec.roa (raw, json)
Hash identifier:          QMXq0MICwWGcJPhx6o1V2QhjFEpi6OFS519ramBUrrw=
Subject key identifier:   99:0B:2C:A8:C1:86:BC:5B:42:A2:9E:31:B2:85:F0:5C:50:55:08:96
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E90BA5DBE9B1607B5F981F680
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc3d16c5-e2ce-3ef2-9016-970d333eb5ec.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     19905
IP address blocks:        2604:2d80:7800::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:5d:be:9b:16:07:b5:f9:81:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=a974ab58-4c95-484d-874c-95bbf3763348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:87:6a:e4:31:56:24:1e:02:c8:56:69:c3:b7:
                    ac:ff:6f:d2:fa:f1:cc:45:9f:e8:47:03:4f:27:56:
                    45:5e:a1:e9:a8:10:28:f3:b0:82:7a:ce:fe:74:ae:
                    f8:12:1f:f2:d7:73:77:23:07:eb:bc:b5:1b:d4:46:
                    3d:c2:77:9b:83:43:d6:07:d2:3c:48:8c:07:aa:c4:
                    d0:e8:53:c8:94:49:95:eb:27:74:c0:25:81:f8:39:
                    59:b2:41:ff:35:36:67:2f:d9:d3:80:33:77:13:cb:
                    20:fc:17:9e:33:a9:31:f4:0f:c1:0f:7d:87:3a:94:
                    f3:27:6d:e2:aa:ff:cb:cb:0b:35:75:98:7d:d2:8b:
                    b9:46:28:74:23:25:58:ab:58:65:30:6a:43:c1:54:
                    e4:6d:e5:e3:2e:98:b2:ab:ec:35:a5:2f:f5:f5:64:
                    35:86:6d:e9:30:9b:e8:43:95:62:52:28:6d:5d:22:
                    92:d5:f0:72:01:a8:2f:ab:ea:cc:37:aa:e9:13:b3:
                    ca:6c:cb:9b:c1:b7:80:d6:3d:76:e3:6c:1d:ea:bd:
                    7b:ab:9e:16:46:92:dc:ba:52:0c:f8:ae:f7:f0:50:
                    b1:49:7c:9f:b0:62:c1:53:89:ad:05:a4:49:86:c9:
                    f9:c9:d5:a4:03:43:95:bd:d5:cc:a9:1d:d2:6a:06:
                    a6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0B:2C:A8:C1:86:BC:5B:42:A2:9E:31:B2:85:F0:5C:50:55:08:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc3d16c5-e2ce-3ef2-9016-970d333eb5ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7800::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:6c:dd:f8:90:71:0e:7d:20:1b:db:63:71:d6:ca:01:31:aa:
         41:fe:30:6b:9c:5d:33:4c:57:3f:1b:3f:d4:f2:e5:4f:c0:e8:
         6b:ca:8d:43:a0:02:c8:97:0e:56:af:62:a7:7c:f7:98:e2:06:
         ca:da:32:39:39:ea:c5:f4:cc:df:cc:a7:08:d2:42:6b:9e:34:
         bd:c4:c8:6d:c1:66:1a:82:49:d2:66:19:1e:f7:45:31:cc:7a:
         d5:b5:4e:7d:6a:38:fe:87:18:a0:1a:62:18:1d:52:13:7f:70:
         8f:6b:5f:6c:ad:d5:fc:60:9e:82:51:8b:f7:00:5f:cf:82:30:
         72:59:99:22:08:21:7b:f5:76:de:d0:ab:6f:0b:42:a1:37:be:
         5f:8a:c8:63:4f:36:5d:a0:f9:0a:dc:1e:2b:d6:f2:e6:50:59:
         c0:5b:f1:87:fd:09:d2:7b:26:90:e4:02:51:0c:11:c9:7a:4d:
         6f:f2:c8:47:5a:8f:64:9d:0f:d6:03:fc:4d:90:10:dd:4a:1e:
         49:9d:02:72:97:98:c3:c4:85:c1:5a:c8:ad:06:4a:a4:26:74:
         ff:93:46:5d:18:c1:0a:03:26:71:a5:7f:f9:b1:48:7b:e3:d3:
         92:cb:3f:23:8c:84:74:fa:84:ee:f5:ea:12:0f:6a:e3:1f:dd:
         e5:2b:36:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:33 2026 by rpki-client