Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5a157243-4009-3f64-afb9-775875702749.roa
File:                     5a157243-4009-3f64-afb9-775875702749.roa (raw, json)
Hash identifier:          19m2SDKfShrGxu0XUsLWNeXRTpVe8EhO9HIUe8/PgV0=
Subject key identifier:   01:09:A7:10:08:31:D1:C3:6D:18:14:BD:88:F3:3F:71:6A:B2:22:EA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4C3DE6B1637C617B997FC260
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5a157243-4009-3f64-afb9-775875702749.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     30036
IP address blocks:        2604:2d80:1b00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:e6:b1:63:7c:61:7b:99:7f:c2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=10c5356d-0fdc-4fd3-b47a-c25b85344209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:79:91:d9:b1:8b:d4:7a:84:58:53:7b:6e:d0:
                    ab:08:02:d9:27:8b:9e:d1:4e:7a:ea:52:8d:88:b2:
                    63:83:90:8b:d7:54:07:e6:f6:01:9b:5b:b0:03:86:
                    9d:db:41:eb:c9:46:73:aa:56:1a:b6:a7:8f:f1:b1:
                    32:56:9d:62:b1:ae:76:43:58:1b:4e:d5:93:28:4b:
                    73:0f:1a:2b:29:42:20:0c:89:79:73:49:22:48:8c:
                    e9:31:db:a1:e4:64:94:31:35:bc:68:77:87:ef:d9:
                    9d:05:1f:1d:31:41:c8:29:e3:49:d1:4a:e2:04:47:
                    97:1d:c0:9d:57:15:9c:25:6a:5d:a3:88:48:63:68:
                    1a:9f:46:59:5b:ac:36:dc:c1:8d:be:b0:ec:e7:03:
                    7f:c3:91:a8:a0:c2:5a:96:99:c0:9e:b2:64:42:36:
                    be:15:89:b0:83:d4:9e:7b:10:df:5c:c9:0d:03:d1:
                    8d:7a:52:06:73:a7:42:d9:f7:78:9f:48:51:56:dd:
                    fc:9d:79:65:51:28:9c:62:70:1f:92:c5:88:b7:af:
                    1e:90:85:14:49:3e:69:70:40:18:79:00:9e:80:84:
                    49:bb:7b:95:1f:02:6f:31:15:52:14:34:01:6f:43:
                    67:51:1c:93:2b:ff:32:03:e2:37:ac:10:ff:a7:56:
                    81:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:09:A7:10:08:31:D1:C3:6D:18:14:BD:88:F3:3F:71:6A:B2:22:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5a157243-4009-3f64-afb9-775875702749.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:1b00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:4d:0b:a3:ca:c4:0e:d5:7c:3b:a3:a4:29:1d:a9:bc:90:70:
         b0:25:3e:38:cd:3f:57:67:b9:a7:f9:ec:8d:7c:dc:56:05:f4:
         78:81:96:08:d0:3c:ba:37:4e:dd:8b:01:f5:7a:ed:83:75:de:
         92:37:a8:cf:d3:f8:dd:ea:4a:c9:ac:ae:26:7e:de:bd:17:4b:
         4b:0f:d4:ac:23:64:0a:c1:16:79:c7:40:80:82:bc:2a:e9:ac:
         e1:30:20:e4:3b:a9:04:90:1b:5d:b4:35:ca:10:e4:96:25:bf:
         19:6f:c1:e4:6c:30:99:a4:71:de:93:7c:0d:3b:3d:45:43:08:
         0c:4a:0d:fb:c3:c7:c2:7e:c5:98:e2:12:e6:35:92:8f:08:db:
         b9:c4:bc:c6:0f:18:34:4d:b0:13:d2:0a:f5:ae:1d:e3:d9:b7:
         66:aa:74:39:6d:59:66:35:7d:1e:c1:db:b7:cf:bc:38:66:6e:
         8f:b0:87:dc:9c:76:28:b2:9f:71:aa:49:07:46:35:29:6a:61:
         b7:50:42:b2:43:77:ec:bf:5d:50:de:9b:ae:2e:93:a5:47:43:
         c4:55:23:f8:03:9f:2b:81:9d:01:14:b4:3d:49:9c:c2:14:7c:
         a9:e1:91:f9:4f:8c:a3:0f:ed:2f:08:40:9e:c9:3a:1b:6e:8c:
         dd:29:f9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:22:19 2026 by rpki-client