Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d1da06b-e05d-3fcc-a30a-595fa04e8926.roa
File:                     4d1da06b-e05d-3fcc-a30a-595fa04e8926.roa (raw, json)
Hash identifier:          pUpCkchnLX/a8OsyCxUN97mnUu7VCRGodDFhU8J20sE=
Subject key identifier:   5F:59:4E:78:01:2B:DE:88:41:D3:2D:17:97:13:84:93:6F:A3:EF:8C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F1E2D005CC7E7EA1C66268780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d1da06b-e05d-3fcc-a30a-595fa04e8926.roa
Signing time:             Wed 09 Sep 2026 13:00:11 +0000
ROA not before:           Wed 09 Sep 2026 13:00:11 +0000
ROA not after:            Tue 08 Dec 2026 14:00:11 +0000
asID:                     30036
IP address blocks:        2604:2d81:3e80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:2d:00:5c:c7:e7:ea:1c:66:26:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep  9 13:00:11 2026 GMT
            Not After : Dec  8 14:00:11 2026 GMT
        Subject: CN=55430a88-bffd-4497-91bf-eafef4c3e970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:82:7f:7d:14:0f:8a:41:db:91:4e:ee:4e:ad:
                    d5:37:34:9a:ee:ad:84:6f:de:07:a6:7a:4d:de:00:
                    ec:aa:4b:42:84:41:5e:d0:29:e4:23:7a:49:2f:4a:
                    3e:c9:2e:31:26:9f:94:fc:0e:b7:06:df:fc:3e:89:
                    26:28:ba:66:d8:30:ea:b0:cc:0c:45:db:71:3d:c6:
                    a7:5f:fd:0c:4c:e1:fc:60:a0:ff:f1:03:7c:97:53:
                    97:50:2a:52:c6:ab:62:3c:5a:64:98:8f:bb:7a:88:
                    12:57:64:67:75:b6:66:4b:a8:06:f7:d2:68:0e:c4:
                    d0:3a:5e:9b:50:d0:3e:ff:ae:12:64:6c:36:6b:e5:
                    f2:c8:40:f5:42:89:95:7d:06:f6:24:4e:8c:06:38:
                    32:c6:13:d2:57:5c:d8:76:30:3d:24:64:b0:c2:c7:
                    eb:b2:be:5d:7a:31:f7:9e:90:07:77:a3:5d:bc:0e:
                    56:5d:3d:7d:4e:f0:85:22:7f:9f:14:87:b8:c6:18:
                    56:d2:bb:f2:c9:35:e0:35:f5:ac:9e:bc:f3:a7:30:
                    17:88:9d:11:78:00:80:8f:93:d6:37:d5:c7:dc:da:
                    4e:62:cf:08:2e:45:1a:cc:89:d2:8d:06:3e:f2:a2:
                    ce:77:ba:39:6f:2b:64:b9:35:25:b8:4a:24:1b:cf:
                    8f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:59:4E:78:01:2B:DE:88:41:D3:2D:17:97:13:84:93:6F:A3:EF:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d1da06b-e05d-3fcc-a30a-595fa04e8926.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:3e80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:09:3c:bb:3c:b5:78:97:0e:c9:12:72:5b:4e:c5:56:b4:73:
         bb:0d:7e:f4:b3:95:7e:b0:be:60:48:2a:e1:81:10:3a:91:ee:
         7f:c9:00:65:92:6c:0c:36:b4:c7:41:2e:b1:0e:b0:01:15:34:
         63:35:3b:55:4c:ea:00:d8:0d:4c:fd:12:b7:7a:34:9f:8d:9c:
         fa:a7:59:94:14:5b:ce:99:a5:a3:ec:19:16:ff:68:b5:9b:96:
         8d:e7:3c:9f:13:37:56:5b:5d:57:90:e5:72:5d:8b:40:f6:d5:
         4a:f4:6f:a7:53:de:7a:e7:3d:d2:fc:f4:92:32:6d:f7:b2:6f:
         76:5b:de:48:c1:5f:7e:14:48:e9:ab:03:24:f3:7d:6f:d5:0d:
         76:99:8e:9b:f3:e3:e9:33:85:ed:2b:b1:fd:da:53:39:bf:ad:
         c9:f8:e8:35:3e:15:49:b9:d8:5a:3d:0e:1d:24:cb:e6:cb:27:
         92:7b:f1:d9:21:e6:57:49:4e:68:31:41:e2:8f:d1:da:22:19:
         ba:6e:1b:cb:06:85:2b:d6:d2:7b:f9:a7:1b:29:b6:a3:6c:d1:
         7c:46:a3:22:73:fd:ad:5e:af:8f:27:f6:92:2a:5f:66:f0:dc:
         7e:ba:4c:4d:35:f4:96:5c:3e:41:06:2d:eb:34:66:1a:d7:31:
         0c:b5:0a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:07:14 2026 by rpki-client