Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fdf347de-3b5e-37c2-8bd8-1a979dd36df7.roa
File:                     fdf347de-3b5e-37c2-8bd8-1a979dd36df7.roa (raw, json)
Hash identifier:          LLY6thit51Eo9eOlBOfSQqCT4/18rToaYkGvcxgep6c=
Subject key identifier:   CB:63:92:38:47:DE:3E:28:3E:35:B8:F2:9A:C2:46:73:E4:3E:18:5C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4974A6E2416874788E15D100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fdf347de-3b5e-37c2-8bd8-1a979dd36df7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d80:6280::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:a6:e2:41:68:74:78:8e:15:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9755fef2-8950-4df6-b666-6564e082c382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0d:82:b4:ef:e2:78:e9:2d:bc:25:26:48:98:
                    c9:35:7a:48:22:51:31:52:50:c2:3a:6b:ae:c4:a3:
                    9c:60:b2:d4:c1:2f:45:c1:55:99:97:d8:2c:2e:42:
                    31:b9:87:2a:55:f8:12:a7:53:03:51:6e:d3:b2:eb:
                    b9:a4:3f:13:cf:66:85:4a:57:f4:fc:c4:25:aa:27:
                    8e:77:b1:49:c4:bd:8e:47:1f:23:6b:a5:34:d1:db:
                    0b:65:e7:73:d3:f3:e4:2e:5b:17:97:a8:ad:05:d0:
                    65:e3:1e:32:78:ac:3b:aa:cd:dc:1b:4c:85:09:86:
                    d9:9e:63:7a:c7:7c:28:a8:4b:64:a1:21:f1:dd:cb:
                    ae:7c:4d:97:e5:f4:05:de:21:14:7a:0f:19:76:28:
                    eb:a3:fa:59:c2:2e:cb:0d:80:49:25:fd:2d:85:d1:
                    22:42:d6:95:a4:38:87:4c:15:70:e2:c5:2a:f4:0d:
                    37:63:aa:d4:7f:53:9a:26:7a:ed:bc:fd:41:9c:b5:
                    f6:12:e7:14:c9:9a:60:3b:0d:65:2c:40:36:db:eb:
                    9a:52:ad:a0:34:e3:75:98:34:f6:36:e1:f7:17:cd:
                    e8:57:72:bf:90:62:07:eb:53:94:11:34:8b:bd:d4:
                    c8:da:8e:9b:4b:d1:f0:af:aa:85:23:9a:89:a7:ea:
                    48:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:63:92:38:47:DE:3E:28:3E:35:B8:F2:9A:C2:46:73:E4:3E:18:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fdf347de-3b5e-37c2-8bd8-1a979dd36df7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:6280::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:a6:bc:7a:db:98:99:45:e6:b1:a1:c2:43:c6:96:76:20:80:
         2d:a8:2c:31:fa:ad:72:91:f8:c6:2c:62:39:29:54:d4:7d:b8:
         c9:6d:e4:a9:2b:b6:82:a6:34:b0:b9:ca:c5:bd:6f:95:94:68:
         4a:52:24:63:69:5a:19:5d:8f:18:e9:39:02:63:e2:09:4d:e1:
         48:2b:06:f0:8e:59:43:13:66:ae:64:10:2b:14:45:f6:85:0e:
         cb:bf:b6:13:11:40:80:61:35:a2:33:b4:68:6d:91:8c:43:e9:
         60:b9:28:46:6d:32:73:5c:7f:83:fa:8c:f6:53:e2:06:c2:09:
         d2:d7:8b:30:c5:79:81:00:dc:13:2b:dc:b0:cd:fd:a4:93:a2:
         7c:97:4a:7c:b6:55:07:ec:6e:bb:fa:5f:09:39:e9:b8:be:21:
         5e:fd:5a:ca:36:f4:88:c0:ec:45:1d:30:9d:13:41:97:c5:80:
         ae:08:b4:e9:da:cf:23:8c:49:92:c2:8c:0d:65:2a:0f:a2:c4:
         ab:e5:21:6a:bc:44:51:61:23:96:fa:bc:74:16:6c:29:16:89:
         21:4c:fe:ff:9c:fd:1b:dc:b3:07:ab:56:cf:ba:c0:1c:72:96:
         bc:03:33:9b:ce:1b:1c:3a:28:66:c9:86:95:6f:20:c1:90:a6:
         d4:ce:04:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:40:01 2026 by rpki-client