Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ad8ea64-8dc3-39da-8f38-c99a9ff65096.roa
File:                     0ad8ea64-8dc3-39da-8f38-c99a9ff65096.roa (raw, json)
Hash identifier:          FB5uV06TF+8Edpl36aWIuXqdzyHGdogyk15aqJUqnQU=
Subject key identifier:   DC:F3:89:B9:9B:B4:0C:36:37:56:79:B9:66:C3:AF:44:E1:B2:2D:96
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79D158DF988C314E0827A00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ad8ea64-8dc3-39da-8f38-c99a9ff65096.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:bf00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:15:8d:f9:88:c3:14:e0:82:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d1c161af-be5e-4637-9259-6cd31e100f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3a:de:b7:a7:32:4c:a6:c9:8e:6d:6b:d5:e4:
                    24:33:ac:4d:f3:18:df:d2:cf:d5:26:65:60:29:98:
                    65:a2:64:b4:0e:59:dc:41:f3:b7:77:03:6d:89:ed:
                    94:bc:6a:6d:94:b9:b8:c1:7a:06:28:20:1b:6a:f6:
                    cd:0d:f9:81:54:fc:5d:9a:aa:aa:31:a8:3c:b1:2b:
                    23:12:49:d0:2e:00:a9:60:1c:7c:60:cd:79:61:4a:
                    17:f2:31:1b:f6:18:b1:34:53:2a:8b:2a:e2:15:58:
                    46:f1:76:14:37:39:90:5c:a6:d5:82:70:09:2b:af:
                    d8:62:86:fb:d5:6b:10:06:1a:4d:ba:b1:92:7d:99:
                    77:a7:9c:0d:43:3c:5a:de:f6:2e:f6:22:5e:8e:12:
                    46:9f:25:07:d9:d2:56:bc:ed:d3:b8:64:0a:43:6a:
                    bd:65:ce:96:a7:9d:96:a5:33:a2:ec:a7:c9:65:a3:
                    6d:20:fd:86:9e:37:b3:bf:3f:48:28:14:6f:6c:ac:
                    a8:a1:78:2b:67:45:da:50:eb:83:3b:83:9a:fc:32:
                    94:3c:37:49:80:72:e7:f5:6a:17:a0:ea:61:4b:a8:
                    89:5a:5d:27:ef:87:d3:97:9b:95:2a:96:01:88:1e:
                    6e:ec:0e:da:7f:76:9f:25:7e:86:96:fe:61:51:d3:
                    e8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F3:89:B9:9B:B4:0C:36:37:56:79:B9:66:C3:AF:44:E1:B2:2D:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ad8ea64-8dc3-39da-8f38-c99a9ff65096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:bf00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:85:df:af:2c:50:07:34:b3:4f:e3:1c:73:fb:3f:af:4f:74:
         0b:cb:61:2f:91:6d:bc:05:58:e6:d4:9f:80:73:46:8f:4d:a0:
         c6:ff:96:da:5c:d9:d3:55:fa:0e:86:84:c0:55:18:a8:9f:b5:
         4e:a2:10:0c:b2:6f:69:b2:da:00:a0:bb:ba:3b:f9:55:13:0c:
         db:e2:27:fc:05:ee:70:98:b0:48:0d:4d:2e:3c:6c:50:e9:3a:
         91:2c:b2:e8:a3:e6:ed:6d:f4:55:37:0d:8f:13:b6:14:64:72:
         95:a0:70:23:dd:05:a3:80:aa:93:e9:1a:96:16:d3:21:59:ce:
         e0:11:aa:03:8b:a3:1b:7e:e5:ab:06:fc:a5:f4:5d:1d:f4:eb:
         1c:74:de:d6:ad:7d:2e:22:50:d1:82:e9:ac:3b:9c:c1:2f:91:
         63:be:a4:35:c9:b5:9a:de:63:c1:9b:39:5c:f0:a3:b8:d8:a6:
         ae:7d:32:f2:de:6f:90:96:64:03:5a:b4:03:64:2d:2a:9c:5b:
         0f:d2:57:6d:30:ce:08:d2:4c:ea:ba:6b:c6:40:bc:17:e9:43:
         80:72:de:75:54:bf:15:c5:b1:a8:3f:0a:37:bd:30:25:a9:dc:
         ab:2c:2e:83:64:b4:db:e0:1d:04:d6:71:64:f2:c0:a2:ad:82:
         c7:bd:10:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:15:41 2026 by rpki-client