Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1c156b6a-6a62-3c17-9eac-0d8b93e24fa5.roa
File:                     1c156b6a-6a62-3c17-9eac-0d8b93e24fa5.roa (raw, json)
Hash identifier:          PY5p2UTP3Fbt61xLirVugvLNYPZOB6TOxNE4HUR/Khw=
Subject key identifier:   67:C1:72:C5:CA:8F:D3:66:D6:FD:2E:5B:C5:59:63:9F:5F:B7:65:08
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E0A6FF0F8D37C527FA75804C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1c156b6a-6a62-3c17-9eac-0d8b93e24fa5.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     30036
IP address blocks:        2604:2d80:3e00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:f0:f8:d3:7c:52:7f:a7:58:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=fd0ed9fa-457c-49a6-b82b-de1e3f94d302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d4:1a:3c:96:0a:7a:f5:17:d7:83:e3:e6:27:
                    d7:10:58:dc:47:c5:1e:6a:62:32:a8:38:a0:1f:3d:
                    11:47:30:c3:a7:01:d3:ef:1f:86:b7:6c:2c:c2:7b:
                    d4:cb:bc:62:47:93:4a:4c:9b:0d:95:9a:d9:76:c1:
                    e6:fd:2f:b5:1a:d4:7d:fa:48:29:77:23:3b:da:a3:
                    aa:b2:f2:d4:f8:8f:c4:13:61:02:1f:6b:03:6c:7c:
                    9e:46:57:3f:2d:0a:66:bc:5e:46:d1:2b:12:e7:fb:
                    5e:06:77:b0:ca:61:57:c7:62:bd:8b:e5:b1:3c:24:
                    cc:6c:bd:9c:81:1c:f9:76:e3:4b:20:e8:05:df:ec:
                    a4:5a:2f:5b:2d:c0:2d:1d:e3:2a:24:2f:67:db:dc:
                    bd:d8:b8:e6:20:52:ed:09:cc:49:1b:7e:6c:ef:9c:
                    d3:2a:a0:b6:c6:86:89:bf:98:f7:fd:03:8a:75:51:
                    74:e4:93:25:6d:e4:5d:9c:7f:74:86:f2:ea:53:cb:
                    61:e6:04:31:91:e4:4e:47:d1:61:2d:dc:a0:10:a6:
                    a9:13:90:9a:24:37:bf:7c:d1:e5:01:41:c6:76:f0:
                    35:95:87:5c:5d:79:21:31:3a:c4:25:2b:3b:d6:32:
                    20:57:40:cf:29:fe:23:bb:c8:89:1d:9b:05:d0:e3:
                    7f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C1:72:C5:CA:8F:D3:66:D6:FD:2E:5B:C5:59:63:9F:5F:B7:65:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1c156b6a-6a62-3c17-9eac-0d8b93e24fa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:3e00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:c9:01:fc:3c:ec:08:e0:ad:7f:a4:02:a5:bc:af:d6:d2:c3:
         b5:75:13:34:b5:c8:3d:3c:36:d6:aa:6a:75:01:e2:0b:11:4a:
         41:20:6f:fe:ca:1f:76:30:22:60:24:c1:5d:17:1e:0d:c5:43:
         53:e9:dd:f5:e1:b1:63:c3:e3:c3:de:ad:0b:88:e7:5c:ee:1e:
         eb:9f:df:63:49:2e:2f:5e:67:15:b9:03:cc:bf:19:46:f1:88:
         19:a6:f2:86:a6:a4:49:70:07:a5:34:75:02:23:e7:5a:19:18:
         33:ae:f6:19:18:be:2a:a9:51:0b:3f:af:75:7b:22:88:1c:b9:
         39:35:00:36:f0:bd:c8:d3:fd:6f:84:73:f3:90:8a:5e:77:01:
         30:22:9e:75:ad:56:45:5b:d2:ad:fa:53:ae:60:26:a4:d4:65:
         80:f6:d2:b6:9e:69:05:ea:44:bb:aa:35:92:d8:89:ec:d3:13:
         07:f0:9e:1a:41:42:22:47:eb:a4:82:15:99:f7:c0:39:61:6e:
         be:33:42:1f:0e:9f:f4:e0:3a:6c:c1:30:cd:d0:04:6b:98:81:
         b3:4f:22:c2:73:2c:04:7c:f8:ab:bc:31:4b:ae:8b:ac:e9:d9:
         74:f8:37:47:b8:39:67:79:5a:d0:03:78:06:5e:ba:c0:89:d6:
         e4:bb:8f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:13:25 2026 by rpki-client