Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1175d1bc-fda6-3e84-8819-50f144a48975.roa
File:                     1175d1bc-fda6-3e84-8819-50f144a48975.roa (raw, json)
Hash identifier:          MDpGAG/2eW8wYHCweqnrJY5BRHBqFZUJaFtGT4w+IrA=
Subject key identifier:   43:50:B4:EF:BB:3A:62:65:71:8F:47:9E:2E:53:2C:90:5A:51:4F:45
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F06723E51CED717CF9CC53E00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1175d1bc-fda6-3e84-8819-50f144a48975.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d81:3380::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:3e:51:ce:d7:17:cf:9c:c5:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=1a4114d5-658e-4950-bb74-966dfb2e58b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b4:f0:45:8b:60:b1:6a:5d:d5:bf:30:cb:62:
                    a9:a3:c9:05:fc:66:0a:1e:20:f4:4b:7f:80:09:52:
                    97:db:9e:71:c1:44:bc:3f:10:aa:34:d6:bf:7a:47:
                    eb:be:3d:38:3a:01:df:71:50:e0:db:c5:e1:5a:26:
                    13:36:63:77:6d:d7:84:c4:14:bd:69:44:88:1c:58:
                    ae:ad:50:d0:a6:87:ec:48:8b:ad:d7:69:d4:7f:a6:
                    e2:f4:02:e1:01:93:fe:08:ff:82:33:2c:e3:cc:d6:
                    d6:03:ec:8d:13:29:0c:6d:ab:32:25:4a:22:76:80:
                    97:94:e0:68:19:89:b1:2f:4f:28:e4:78:c8:6c:96:
                    b0:28:25:47:db:77:bf:f4:f2:7a:94:59:85:41:37:
                    a4:46:98:6b:15:46:07:cd:d2:ad:30:c8:89:ff:4c:
                    c2:7e:f0:b3:28:72:d9:73:04:4c:10:a2:d0:3b:ae:
                    5b:88:e4:cc:ba:9e:d8:4a:3c:90:d2:3f:66:a0:6f:
                    65:86:ec:6c:14:86:c1:2d:61:0b:f8:56:03:07:b4:
                    5f:29:10:76:05:77:4e:09:f2:fd:b7:2d:c5:7c:b3:
                    05:62:4a:5d:3b:82:ab:22:52:a4:8d:94:7a:3d:49:
                    bd:30:1f:ce:d5:33:8e:ab:a0:20:45:f2:bf:f6:9e:
                    fe:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:50:B4:EF:BB:3A:62:65:71:8F:47:9E:2E:53:2C:90:5A:51:4F:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1175d1bc-fda6-3e84-8819-50f144a48975.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:3380::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:6e:39:61:85:96:bd:4f:8f:b7:57:90:86:5c:e8:cf:4c:60:
         ab:dd:2c:3f:28:75:30:79:5c:9c:ee:59:29:78:c3:8c:94:b2:
         d1:5c:9b:4e:c3:99:16:cc:f1:30:20:ef:7e:08:b2:ec:dd:6e:
         67:fd:60:5e:56:e0:e7:3f:dc:ba:07:d5:27:85:2f:11:99:52:
         de:b5:90:81:10:fd:38:f5:e6:f2:48:8e:72:9f:1e:34:a9:b3:
         14:84:b2:3a:1e:f3:4a:b4:6b:69:5a:9b:a6:e5:28:52:f0:7d:
         3b:3c:5a:89:88:44:86:4c:9e:d1:a0:73:dc:45:85:44:67:ea:
         d9:93:b2:a7:5c:7e:2f:0c:1b:c6:70:cd:eb:89:5f:8d:f7:46:
         a8:1a:83:26:a1:ea:aa:48:8d:46:59:62:bd:1b:46:19:3b:d1:
         d2:43:5c:ef:85:5e:aa:73:00:87:cc:98:63:29:5e:f4:75:e4:
         5a:4d:0b:65:c3:14:1b:f2:de:88:b2:42:7f:f6:70:3a:0e:35:
         59:1b:23:39:2e:88:51:4b:0a:15:da:d4:26:97:15:e8:7c:d9:
         ec:7f:9b:b4:ec:71:ad:51:60:f8:93:5a:6d:9b:f9:dd:f7:a4:
         24:16:ab:b2:92:5d:5a:af:f7:ad:c1:bf:24:e0:83:c8:40:c5:
         cc:82:d4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:18:10 2026 by rpki-client