Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ca038ca-01d4-3085-bff0-b339906772a4.roa
File:                     5ca038ca-01d4-3085-bff0-b339906772a4.roa (raw, json)
Hash identifier:          uvYHcp/GWvsstW7kXSQIJWb55IZqNfvgc8kI+dyTKwM=
Subject key identifier:   1D:87:FB:34:F3:F8:AD:39:D4:EE:66:5D:07:DC:0A:9F:8B:51:D1:8A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059C61B19BBDB6F37004BD00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ca038ca-01d4-3085-bff0-b339906772a4.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        2604:2d80:1480::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:61:b1:9b:bd:b6:f3:70:04:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=a1e37c10-2b5d-49af-ad64-3863baec427a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:27:80:14:7f:7e:17:e8:41:23:9f:99:71:66:
                    7f:2d:82:e0:9c:68:04:ba:0e:70:e9:35:ab:40:68:
                    f7:4e:08:d2:07:0c:de:1a:50:84:58:55:3a:98:14:
                    7b:16:b3:7b:6d:bd:3f:58:de:9c:81:98:5a:2c:f9:
                    9c:66:56:7e:17:f5:b7:fb:f8:6d:f8:d1:97:a9:17:
                    a5:e4:56:87:39:fe:ae:01:ce:f8:f8:25:d8:4e:d0:
                    47:3f:b0:9d:6e:71:29:ff:49:cf:fb:99:52:f2:11:
                    ef:c2:2f:19:c8:09:5d:aa:e7:28:18:a0:da:9e:56:
                    f9:4c:74:82:b5:75:62:6d:0a:27:14:c9:08:c3:04:
                    6a:1f:02:aa:d2:e1:f7:0b:0c:ed:b0:8d:b5:15:7e:
                    75:f1:53:e5:b6:d4:2d:88:e9:80:71:71:74:ed:62:
                    90:b1:7d:95:26:b7:d3:72:e4:26:4e:44:18:3d:b5:
                    18:e8:bd:b0:7d:e0:30:0b:60:31:3c:36:83:0f:8f:
                    20:b8:9e:36:4a:47:e9:74:44:6e:7c:d0:2a:7e:f3:
                    ec:d8:ba:21:5b:da:75:53:2e:89:c1:99:f8:3c:a2:
                    55:30:c3:2b:c2:69:a1:bb:a4:5b:8c:a5:91:c1:94:
                    6b:a6:04:4d:96:6b:dc:5c:71:24:ba:14:52:98:01:
                    21:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:87:FB:34:F3:F8:AD:39:D4:EE:66:5D:07:DC:0A:9F:8B:51:D1:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ca038ca-01d4-3085-bff0-b339906772a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:1480::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:e2:e1:cf:10:0a:7c:43:eb:15:47:20:75:fb:5f:51:25:51:
         5b:14:13:88:c4:9c:3b:10:80:62:60:e1:78:df:11:7d:94:83:
         99:cf:f9:68:02:81:77:c7:8a:d2:b2:e4:77:05:c4:a0:25:bf:
         51:54:5b:0d:74:e5:34:46:f7:2b:dc:03:b6:0e:f9:a7:c9:ff:
         86:b5:a8:3a:11:cb:da:41:54:d0:4d:b5:1b:4c:95:dd:57:bf:
         bb:ff:ae:5f:93:88:9d:83:cf:f5:ec:ce:ce:ca:8e:75:6d:e6:
         a7:95:87:06:0d:05:a1:a3:6c:88:bb:63:f6:b4:f9:dc:98:fe:
         80:78:3d:79:16:30:a6:a0:55:e8:0b:32:70:53:66:8e:d0:d1:
         aa:6e:b5:ac:be:c2:ab:e7:82:f4:9f:96:6f:54:5f:1d:f7:a2:
         3c:46:fc:16:59:ae:2a:09:12:8a:34:53:d9:84:ef:a2:ba:a4:
         8e:a3:6e:ad:11:f8:4e:db:3d:61:fc:58:c3:a6:4a:64:02:31:
         33:38:76:87:f7:b8:1f:46:ec:5a:e9:36:33:5f:7d:12:63:6d:
         d0:11:de:fd:1a:57:2a:60:73:c2:68:ab:eb:94:da:1b:cb:d1:
         ff:8d:53:61:74:fe:91:ec:8c:0c:5c:8f:8d:bf:41:a5:01:98:
         ae:9e:ab:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:43:09 2026 by rpki-client