Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11bb1a26-aa2c-3dfd-b959-a33694de395f.roa
File:                     11bb1a26-aa2c-3dfd-b959-a33694de395f.roa (raw, json)
Hash identifier:          FCWDxzSvt2lWaTVY5Slh3+p7GxG90joGvOfo5do0RMQ=
Subject key identifier:   D8:B2:16:79:4B:76:C2:90:46:93:CB:27:BC:3A:F0:24:2A:03:70:68
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059B4A452F2AE08FC17A8E40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11bb1a26-aa2c-3dfd-b959-a33694de395f.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        2604:2d80:b280::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:4a:45:2f:2a:e0:8f:c1:7a:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=a2ecd3f3-1ffe-488a-8df9-0f4114ca3ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7a:fe:56:49:9e:65:b2:b4:28:06:bb:e3:36:
                    19:6f:e9:91:2e:45:ad:fa:94:4e:82:bb:8f:41:c0:
                    19:dc:66:86:13:ad:8e:1b:10:9d:96:19:74:f4:67:
                    b1:18:11:d3:54:d7:60:bf:cb:d4:68:d3:cf:f0:d0:
                    8b:2e:aa:06:8e:34:ba:f9:64:d3:28:16:f7:08:f0:
                    78:13:40:bc:fe:e2:fd:8e:7c:eb:18:54:23:3f:79:
                    6e:49:b5:b4:04:da:d9:cf:0b:13:91:64:e1:c3:87:
                    f7:10:58:4d:03:34:2f:fb:fe:18:f7:11:f7:a5:20:
                    64:da:42:95:a5:33:f9:ef:88:b2:26:c6:b9:e7:96:
                    ac:44:aa:90:c6:02:ab:63:40:1c:0f:ad:7d:40:41:
                    c5:f9:f1:df:ba:b1:16:73:86:c0:26:a1:23:a4:c4:
                    2f:b3:02:ad:2d:e9:96:ae:d0:0a:a0:62:73:84:7e:
                    df:59:13:a0:c7:ed:17:38:f0:0c:13:3f:32:bc:26:
                    72:11:80:08:17:02:6d:a1:85:05:4b:66:96:f1:5c:
                    c6:ec:9a:2c:8d:c6:e0:c4:22:eb:ff:b3:a6:23:0f:
                    b5:4a:16:db:1a:95:8c:ae:f4:f2:5a:ef:5c:02:6a:
                    fe:8f:2b:e0:97:70:23:9f:3c:bf:05:4f:3e:79:b4:
                    50:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B2:16:79:4B:76:C2:90:46:93:CB:27:BC:3A:F0:24:2A:03:70:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11bb1a26-aa2c-3dfd-b959-a33694de395f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:b280::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:b7:c8:a8:ef:5b:9d:99:0a:ca:24:f6:2d:05:85:d0:5d:cc:
         7d:c5:30:4b:22:3a:50:6f:1a:0a:13:ea:a0:77:fa:f7:d2:15:
         5e:18:6a:4b:d3:5f:a1:ef:82:98:62:a8:8e:84:9a:c0:cd:16:
         b1:e5:4b:fd:73:e2:d9:93:42:4d:fd:44:fb:49:2d:93:87:8c:
         9a:f3:71:67:63:d4:df:93:06:69:8d:1b:b0:83:69:6c:25:75:
         54:34:6c:13:e1:46:cf:96:70:b2:83:95:33:34:7c:27:25:ef:
         5c:be:33:3a:ca:66:1d:d1:6b:56:7e:d1:c6:25:fc:0b:3d:76:
         d9:2f:38:67:8d:b9:65:fb:a6:c8:04:04:fa:8a:0c:5b:86:ab:
         01:fc:de:3c:48:62:a3:e8:5e:d9:8a:3b:70:30:53:79:8a:a0:
         3c:d3:1c:05:19:ac:62:92:78:3b:0b:eb:d8:c1:68:8a:66:b9:
         3f:4d:5e:74:dc:ff:a8:19:41:8f:dd:41:ff:c3:c9:5a:31:4f:
         f1:16:c1:7b:a9:17:08:da:25:59:ee:45:ac:a4:58:34:28:e8:
         81:93:4e:5e:2b:72:c4:0f:b2:e3:b9:10:d8:3c:c1:b6:7e:ee:
         d9:18:85:28:63:03:33:96:35:67:59:2c:5e:68:d0:f7:a1:9d:
         78:7c:42:c1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4Fm0pFLyrgj8F6jkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
YTJlY2QzZjMtMWZmZS00ODhhLThkZjktMGY0MTE0Y2EzZWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3r+VkmeZbK0KAa74zYZb+mRLkWt+pROgruP
QcAZ3GaGE62OGxCdlhl09GexGBHTVNdgv8vUaNPP8NCLLqoGjjS6+WTTKBb3CPB4
E0C8/uL9jnzrGFQjP3luSbW0BNrZzwsTkWThw4f3EFhNAzQv+/4Y9xH3pSBk2kKV
pTP574iyJsa555asRKqQxgKrY0AcD619QEHF+fHfurEWc4bAJqEjpMQvswKtLemW
rtAKoGJzhH7fWROgx+0XOPAMEz8yvCZyEYAIFwJtoYUFS2aW8VzG7JosjcbgxCLr
/7OmIw+1ShbbGpWMrvTyWu9cAmr+jyvgl3Ajnzy/BU8+ebRQYQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNiyFnlLdsKQRpPLJ7w68CQqA3BoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTFiYjFhMjYtYWEyYy0z
ZGZkLWI5NTktYTMzNjk0ZGUzOTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgLKA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAK3yKjvW52ZCsok9i0FhdBdzH3FMEsiOlBvGgoT6qB3+vfSFV4Y
akvTX6HvgphiqI6EmsDNFrHlS/1z4tmTQk39RPtJLZOHjJrzcWdj1N+TBmmNG7CD
aWwldVQ0bBPhRs+WcLKDlTM0fCcl71y+MzrKZh3Ra1Z+0cYl/As9dtkvOGeNuWX7
psgEBPqKDFuGqwH83jxIYqPoXtmKO3AwU3mKoDzTHAUZrGKSeDsL69jBaIpmuT9N
XnTc/6gZQY/dQf/DyVoxT/EWwXupFwjaJVnuRaykWDQo6IGTTl4rcsQPsuO5ENg8
wbZ+7tkYhShjAzOWNWdZLF5o0PehnXh8QsE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:09:20 2026 by rpki-client