Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb54073c-ffad-32f9-a0d1-cd7c488d583b.roa
File:                     eb54073c-ffad-32f9-a0d1-cd7c488d583b.roa (raw, json)
Hash identifier:          JwjGuCrF1RCBOBvVt2G32MzFiOgzNlMYKyGjcyZavx0=
Subject key identifier:   9D:0C:7C:3C:DD:2E:D8:63:FD:02:3F:5D:B0:37:A2:26:6A:DF:F9:BB
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F497495B8845878B7577C6500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb54073c-ffad-32f9-a0d1-cd7c488d583b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:d880::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:95:b8:84:58:78:b7:57:7c:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7a1fab32-ab22-44b5-a0ae-b530164afb82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cc:0d:d8:2e:26:b1:51:fc:cf:33:bd:a1:fe:
                    5a:4f:7d:c2:a5:cc:e1:2b:7b:fa:a2:fc:a1:0c:7a:
                    76:5a:29:a7:76:ea:32:ea:51:58:e1:0f:2f:f8:c7:
                    bf:cf:34:4a:d9:96:5f:9a:3a:f7:9e:0e:f1:82:5a:
                    13:c2:43:45:16:bc:d4:56:39:e2:45:8f:61:9f:e5:
                    32:a2:26:63:0a:dc:f9:dc:1e:e0:25:5d:7b:17:7e:
                    3e:eb:fc:2f:90:86:e6:46:5c:2b:f4:7c:9c:60:b6:
                    97:17:d9:7b:ad:f5:5d:67:6e:28:72:6c:e0:c4:1c:
                    0e:ed:2e:13:d2:97:e5:1e:3b:da:b4:fd:58:a0:db:
                    56:67:68:42:1f:81:0d:d7:2e:6f:3d:57:7e:d4:62:
                    ad:7a:31:92:ea:1a:d5:a2:c1:db:08:55:d3:73:58:
                    77:6a:4d:f5:59:75:c6:43:37:c1:cd:0c:cd:29:2a:
                    f5:0c:0d:0a:a3:cf:cb:27:88:df:fd:cc:65:d2:67:
                    34:3a:cb:0f:bf:de:28:52:85:cd:fc:19:82:cd:02:
                    ca:79:b7:db:a5:98:76:29:9f:0a:d8:1d:f7:ea:e8:
                    5f:11:bc:c3:f6:a9:0d:52:b7:70:db:5c:c0:e1:87:
                    4a:1c:ce:70:eb:df:1c:91:4c:48:d3:00:14:9c:bb:
                    fa:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0C:7C:3C:DD:2E:D8:63:FD:02:3F:5D:B0:37:A2:26:6A:DF:F9:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb54073c-ffad-32f9-a0d1-cd7c488d583b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:d880::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:15:aa:33:ea:ac:41:38:c5:4c:53:d5:a3:c1:85:dc:d9:ee:
         04:86:3d:70:c1:81:45:da:9d:29:d6:eb:5d:4e:ec:a2:f9:0a:
         b6:d2:70:25:fa:31:f6:73:75:c0:31:00:8e:8a:c0:8f:d8:58:
         f8:b4:7e:b6:66:8b:84:4c:c4:d8:9a:e7:9a:95:65:7b:56:bf:
         1d:4c:c1:94:ab:fe:95:28:73:68:ec:99:29:70:d2:d5:86:b6:
         31:29:a7:d6:93:a9:bc:32:85:2e:42:6b:11:7d:04:10:cb:78:
         e9:cd:5c:94:04:0c:62:f2:b2:df:7b:c9:9a:63:cd:67:cf:eb:
         48:1e:fe:36:90:51:89:39:9f:7a:73:5d:46:e8:91:dc:ec:7f:
         3e:d7:a9:9e:10:a7:56:46:88:c3:90:f7:d4:77:34:49:12:0d:
         04:a9:bc:78:f8:f5:3d:85:d8:1b:c0:53:72:e3:e4:55:cb:3e:
         24:40:54:b7:8a:47:b0:8e:8f:a4:94:db:98:a6:90:27:bb:93:
         38:42:7a:d1:3e:71:57:09:ec:6e:47:6b:3d:62:18:c5:c7:b5:
         91:cb:62:c9:3c:e5:41:49:2d:69:dc:d2:2a:1e:c0:a9:63:72:
         11:66:36:76:7f:b3:bb:62:36:bd:82:5e:84:c6:d8:48:25:ac:
         11:ac:a3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:59:38 2026 by rpki-client