Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f970cde3-30bd-3207-884d-ac39710dcedf.roa
File:                     f970cde3-30bd-3207-884d-ac39710dcedf.roa (raw, json)
Hash identifier:          nnGbzMFn/3v2/ttpG1kHaIZ1IGCM6GVWk0oweA0utmM=
Subject key identifier:   9B:79:DA:9B:D0:23:71:63:A0:63:F6:68:10:BB:29:19:89:A0:57:A9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E97B4F7D9C860FCF7051A0300
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f970cde3-30bd-3207-884d-ac39710dcedf.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     19905
IP address blocks:        2604:2d81:2b80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b4:f7:d9:c8:60:fc:f7:05:1a:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=a3d719ef-34e3-4d6a-800f-ae0eba206ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b1:26:34:87:42:e3:79:8c:ef:12:e0:ba:d7:
                    3c:1c:66:12:f6:74:b3:4e:a9:42:91:2b:df:8f:9d:
                    bc:0e:96:18:16:82:99:3a:91:c1:98:09:30:cb:ce:
                    fa:4b:2a:6a:9b:55:29:6c:f9:63:88:04:54:91:c3:
                    16:71:60:f5:76:30:a1:e6:ce:f8:fd:c4:79:47:98:
                    d1:fc:8c:f7:50:d6:83:91:70:8f:c3:b2:cd:d2:d5:
                    10:26:f0:fe:ed:45:ee:dc:62:bb:a2:15:00:73:58:
                    54:1f:18:0f:61:4f:94:89:cb:8e:37:fa:76:11:69:
                    56:ee:06:d7:91:1d:08:97:99:7f:e3:c9:17:13:62:
                    b7:1a:a3:c4:c0:2e:19:21:b3:26:18:51:35:a9:35:
                    7e:42:a6:d7:b7:b7:a7:2a:fa:5e:fd:4a:3a:fb:e6:
                    0c:0b:dc:76:68:5e:e3:3a:3b:88:3e:ed:1b:af:1b:
                    6b:15:8b:49:4f:45:14:a1:a9:ee:d5:4c:f9:3f:bd:
                    74:45:05:01:e4:a7:b8:a1:b0:e9:53:fc:cf:0f:a8:
                    84:8f:15:16:23:75:df:63:86:7f:d2:2b:cc:8e:09:
                    38:6f:a6:c1:26:d4:86:b0:73:3d:bd:bf:c5:57:7e:
                    d6:98:1d:12:2d:74:d3:08:e6:ea:84:5c:bb:ec:c9:
                    1c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:79:DA:9B:D0:23:71:63:A0:63:F6:68:10:BB:29:19:89:A0:57:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f970cde3-30bd-3207-884d-ac39710dcedf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:2b80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:f7:1b:60:8c:95:bb:3e:b0:83:95:6c:8f:78:fd:be:73:72:
         73:61:58:b3:d6:63:59:7e:76:ab:2d:8a:d6:54:b3:96:e5:ca:
         fb:38:72:f4:6b:44:fd:af:82:a0:cf:a9:bb:e2:8c:0f:d2:ad:
         0f:31:0c:64:a0:b3:0a:81:51:97:02:96:e1:25:4d:a3:c6:25:
         1b:ad:72:da:c2:6b:cd:89:93:29:57:47:8a:4c:16:5b:35:34:
         21:b2:c6:95:f1:8c:88:44:be:ae:11:42:c6:26:e8:57:db:1d:
         4b:ae:b4:17:1a:64:f5:6a:6f:0e:c8:bd:41:4c:cf:14:e2:a3:
         3b:d8:01:90:e8:7b:72:d1:b3:9f:6b:53:60:f3:f9:6c:d6:fb:
         3a:38:7f:8c:8d:94:50:69:c1:b3:01:56:a8:e9:e3:42:7e:d1:
         c5:ef:10:46:e9:f2:6c:eb:14:73:b9:31:24:9f:33:9e:e4:b0:
         f4:d8:85:57:5e:a3:1d:3e:2a:9c:ac:bc:60:d8:fc:4a:5d:ff:
         ba:98:27:6f:94:1d:d1:fc:59:ed:35:63:a1:23:0b:d9:b6:c5:
         63:ba:fb:bd:2b:c6:8f:ea:d1:e6:eb:bd:be:ee:18:62:9b:81:
         e6:fe:2f:48:cf:1c:e6:a9:09:c3:53:65:b3:cc:f8:b1:8e:b1:
         c9:a8:19:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:57:24 2026 by rpki-client