Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/19ede046-1785-37f6-bded-3d2d1e9bd10a.roa
File:                     19ede046-1785-37f6-bded-3d2d1e9bd10a.roa (raw, json)
Hash identifier:          81wGTDx89+pTVS4FUczyBdy7xSiYL4C7MPCA2HLrD5A=
Subject key identifier:   A9:E0:8B:71:66:2F:AB:61:48:0A:7B:FC:FC:88:48:D9:CB:A7:64:58
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CAE5E6E63734458E2A8BDFFC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/19ede046-1785-37f6-bded-3d2d1e9bd10a.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        2604:2d81:c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:6e:63:73:44:58:e2:a8:bd:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=4524ba9b-5060-4f3a-adea-c56362316afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:60:0e:be:a5:d4:c7:a3:4b:8c:fe:b2:9a:1d:
                    98:fc:aa:ce:93:05:85:79:4d:a1:61:9e:3e:a6:8e:
                    89:76:c6:7f:3f:b1:67:66:b9:19:36:76:e1:1c:8e:
                    c4:32:29:56:d2:67:bc:16:2b:70:a3:ae:c7:36:58:
                    b4:ea:19:b6:f5:bc:9e:d9:ae:7d:9b:42:54:a9:75:
                    4c:11:4f:6f:79:79:5c:d7:f1:56:6a:de:b3:61:42:
                    ed:02:a6:9f:a3:dc:26:ce:d4:e4:b3:44:f7:d7:78:
                    aa:64:66:c4:d5:cf:c2:07:09:68:85:94:f7:a0:3a:
                    b9:25:1b:9c:7e:6e:4d:f0:41:fd:67:ca:fa:65:a7:
                    f8:be:b8:85:e2:74:78:b8:5b:fa:84:76:17:0d:0e:
                    e8:2c:cf:ad:20:1b:ab:33:6c:07:59:0d:80:1b:26:
                    a3:d8:ff:ca:93:52:ac:31:4a:63:6e:a9:f1:da:5e:
                    77:fe:9f:ba:15:62:d7:41:3d:e9:04:85:78:94:6d:
                    c4:a9:58:7c:91:32:ee:c4:e2:64:0b:ae:e2:ed:8c:
                    18:03:20:9a:2c:a7:a3:6e:96:e8:06:68:43:27:d7:
                    7c:a3:6d:a7:43:ae:b8:bb:c3:ee:7c:fc:77:cf:f9:
                    50:31:0c:cd:4c:83:d0:56:26:1c:dc:98:6c:6f:02:
                    d8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E0:8B:71:66:2F:AB:61:48:0A:7B:FC:FC:88:48:D9:CB:A7:64:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/19ede046-1785-37f6-bded-3d2d1e9bd10a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:9d:36:8b:ec:7a:d4:8f:90:9d:f4:7b:39:9a:20:05:82:e1:
         ad:8c:c3:03:9d:f1:1f:d6:42:ad:65:c2:46:bd:ad:b9:2e:11:
         e4:1b:8c:aa:f2:b1:01:5b:81:f4:97:7d:4c:80:c2:f0:28:da:
         3b:dc:b9:88:9f:0e:e1:31:b3:4e:c1:06:e4:9a:d7:eb:e4:31:
         69:9d:f1:e7:8d:0b:56:8b:72:a3:e2:45:20:de:af:7e:7a:89:
         84:65:ac:03:0c:6c:c6:12:b5:6c:90:e6:f6:7e:10:37:1c:41:
         95:e9:06:57:b1:19:29:b4:73:be:06:42:02:18:d7:7e:47:a2:
         a8:31:b8:80:f1:4e:46:b9:8f:34:6a:83:79:62:92:fd:85:7a:
         f9:17:7b:d7:da:13:ee:2f:1b:04:45:04:c6:dc:43:c5:53:9a:
         3e:62:7f:6c:dd:c2:33:b8:98:49:0b:b8:87:22:7d:eb:33:89:
         c5:e8:98:9b:46:28:4f:0f:3c:89:3e:00:94:cc:84:04:6f:9c:
         c5:87:4b:25:cc:8e:7b:9c:9b:b8:40:97:ae:c2:c4:39:5f:b4:
         21:23:ee:90:d0:ee:ea:d4:8c:b0:f0:9d:8a:a1:c8:e8:5b:38:
         a7:d9:4d:74:2b:57:27:d8:20:8d:b5:ed:b2:5d:84:aa:a6:29:
         dc:c9:64:56
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyuXm5jc0RY4qi9/8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
NDUyNGJhOWItNTA2MC00ZjNhLWFkZWEtYzU2MzYyMzE2YWZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GAOvqXUx6NLjP6ymh2Y/KrOkwWFeU2hYZ4+
po6JdsZ/P7FnZrkZNnbhHI7EMilW0me8Fitwo67HNli06hm29bye2a59m0JUqXVM
EU9veXlc1/FWat6zYULtAqafo9wmztTks0T313iqZGbE1c/CBwlohZT3oDq5JRuc
fm5N8EH9Z8r6Zaf4vriF4nR4uFv6hHYXDQ7oLM+tIBurM2wHWQ2AGyaj2P/Kk1Ks
MUpjbqnx2l53/p+6FWLXQT3pBIV4lG3EqVh8kTLuxOJkC67i7YwYAyCaLKejbpbo
BmhDJ9d8o22nQ664u8PufPx3z/lQMQzNTIPQViYc3JhsbwLYewIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKngi3FmL6thSAp7/PyISNnLp2RYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTllZGUwNDYtMTc4NS0z
N2Y2LWJkZWQtM2QyZDFlOWJkMTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgQww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAXp02i+x61I+QnfR7OZogBYLhrYzDA53xH9ZCrWXCRr2tuS4R5BuM
qvKxAVuB9Jd9TIDC8CjaO9y5iJ8O4TGzTsEG5JrX6+QxaZ3x540LVotyo+JFIN6v
fnqJhGWsAwxsxhK1bJDm9n4QNxxBlekGV7EZKbRzvgZCAhjXfkeiqDG4gPFORrmP
NGqDeWKS/YV6+Rd719oT7i8bBEUExtxDxVOaPmJ/bN3CM7iYSQu4hyJ96zOJxeiY
m0YoTw88iT4AlMyEBG+cxYdLJcyOe5ybuECXrsLEOV+0ISPukNDu6tSMsPCdiqHI
6Fs4p9lNdCtXJ9ggjbXtsl2EqqYp3MlkVg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:09:37 2026 by rpki-client