Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e6441802-94db-3325-970d-8640e7861565.roa
File:                     e6441802-94db-3325-970d-8640e7861565.roa (raw, json)
Hash identifier:          2wP3mfMZhL5qtaSVZMvJj95CBuEgDqt3clLE+/uS7cM=
Subject key identifier:   AF:D3:B3:B0:BD:FE:E4:4A:42:70:FC:A2:8A:85:AC:19:54:4F:A4:35
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F19FD006B5AB70F329D99BBC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e6441802-94db-3325-970d-8640e7861565.roa
Signing time:             Tue 08 Sep 2026 01:00:12 +0000
ROA not before:           Tue 08 Sep 2026 01:00:12 +0000
ROA not after:            Mon 07 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d81:1100::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:19:fd:00:6b:5a:b7:0f:32:9d:99:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep  8 01:00:12 2026 GMT
            Not After : Dec  7 02:00:12 2026 GMT
        Subject: CN=e3563f13-3508-4d5a-b58d-c61762a78aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:da:b4:d8:48:3b:16:49:53:29:37:3b:97:b3:
                    da:b5:67:45:a7:1f:85:fb:a3:0f:a1:30:16:41:99:
                    a3:a6:b9:13:f9:38:22:f1:fa:fb:c2:cf:0f:6a:12:
                    18:a1:36:4c:74:21:62:49:a2:44:a4:93:ff:65:57:
                    af:05:8e:0a:b7:0a:2f:03:11:4c:73:71:89:d4:e2:
                    b7:82:65:98:0f:cd:f1:85:22:b5:b1:6b:82:9e:61:
                    ce:3f:46:ec:fc:7a:f2:f3:f6:c7:6b:ea:64:93:86:
                    8f:19:7f:fb:eb:39:31:cd:41:3d:78:34:59:e5:e9:
                    fd:eb:24:d4:39:7c:09:e7:0c:d0:30:4c:b0:c5:5d:
                    74:ef:d4:8f:55:18:c6:d5:a0:a6:15:89:23:2f:48:
                    6c:55:83:63:11:69:2d:7b:42:45:4e:68:22:5b:17:
                    80:1d:72:1e:32:05:75:45:3d:07:c7:49:33:e8:a6:
                    29:41:5f:c6:75:f2:fc:8f:d9:b2:59:8e:fb:ca:70:
                    f9:9a:1a:68:fa:25:15:6e:c4:b5:1e:96:65:bf:95:
                    62:6d:a6:5e:90:93:c8:a5:16:56:24:dd:72:0d:51:
                    9e:fb:54:7a:dd:5d:f9:3b:14:52:b5:78:2f:0e:6a:
                    5c:ed:6a:79:f1:32:7e:39:75:4a:b9:05:e0:12:93:
                    46:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D3:B3:B0:BD:FE:E4:4A:42:70:FC:A2:8A:85:AC:19:54:4F:A4:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e6441802-94db-3325-970d-8640e7861565.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1100::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:1b:f7:49:e0:6d:0f:7a:b7:96:26:6c:ee:ae:ff:73:7b:ed:
         12:fb:63:31:54:e9:ab:af:76:22:a6:52:73:ba:8b:93:d0:5c:
         81:6f:ec:39:77:f6:e7:59:41:89:51:b7:11:39:1e:e4:9a:da:
         81:ba:13:34:65:33:0a:30:bf:da:b0:7d:17:8c:cb:7b:81:2d:
         89:2e:57:12:f2:a9:9b:d2:f4:01:aa:9a:be:4d:d9:e4:dd:c0:
         19:b8:49:01:50:27:9b:19:61:93:d9:3b:97:90:52:ca:f6:0b:
         cf:02:01:8e:eb:1f:a5:2d:36:de:b3:6b:fd:24:8d:80:de:3a:
         19:9f:3c:2d:c2:15:04:d5:1a:8b:56:e5:c9:94:e6:ca:3b:26:
         68:30:a2:68:9c:c3:a0:4d:61:9e:2f:99:03:c7:fc:6b:84:83:
         25:88:47:82:be:a2:38:54:8b:17:fd:0f:a7:b1:f6:00:87:03:
         12:d1:8b:08:b6:c9:97:4d:49:f5:36:a2:89:11:fc:b1:c0:f0:
         62:b3:88:e5:db:37:5d:36:f5:7b:4d:70:5f:ee:88:e7:db:5e:
         09:0e:70:11:eb:68:85:d7:9c:02:32:b4:e2:5f:5d:e0:9d:72:
         a8:64:f1:b6:3c:fe:25:22:17:ae:53:56:67:6b:34:b8:e6:9d:
         d2:37:b7:eb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8Z/QBrWrcPMp2Zu8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk
ZTM1NjNmMTMtMzUwOC00ZDVhLWI1OGQtYzYxNzYyYTc4YWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNq02Eg7FklTKTc7l7PatWdFpx+F+6MPoTAW
QZmjprkT+Tgi8fr7ws8PahIYoTZMdCFiSaJEpJP/ZVevBY4KtwovAxFMc3GJ1OK3
gmWYD83xhSK1sWuCnmHOP0bs/Hry8/bHa+pkk4aPGX/76zkxzUE9eDRZ5en96yTU
OXwJ5wzQMEywxV1079SPVRjG1aCmFYkjL0hsVYNjEWkte0JFTmgiWxeAHXIeMgV1
RT0Hx0kz6KYpQV/GdfL8j9myWY77ynD5mhpo+iUVbsS1HpZlv5VibaZekJPIpRZW
JN1yDVGe+1R63V35OxRStXgvDmpc7Wp58TJ+OXVKuQXgEpNGzQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFK/Ts7C9/uRKQnD8ooqFrBlUT6Q1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTY0NDE4MDItOTRkYi0z
MzI1LTk3MGQtODY0MGU3ODYxNTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgREA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAMb90ngbQ96t5YmbO6u/3N77RL7YzFU6auvdiKmUnO6i5PQXIFv
7Dl39udZQYlRtxE5HuSa2oG6EzRlMwowv9qwfReMy3uBLYkuVxLyqZvS9AGqmr5N
2eTdwBm4SQFQJ5sZYZPZO5eQUsr2C88CAY7rH6UtNt6za/0kjYDeOhmfPC3CFQTV
GotW5cmU5so7Jmgwomicw6BNYZ4vmQPH/GuEgyWIR4K+ojhUixf9D6ex9gCHAxLR
iwi2yZdNSfU2ookR/LHA8GKziOXbN1029XtNcF/uiOfbXgkOcBHraIXXnAIytOJf
XeCdcqhk8bY8/iUiF65TVmdrNLjmndI3t+s=
-----END CERTIFICATE-----
Generated at Tue Sep 29 20:23:53 2026 by rpki-client