Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/642ab5a3-a8af-3d7d-9bcb-77bad9afe2cc.roa
File:                     642ab5a3-a8af-3d7d-9bcb-77bad9afe2cc.roa (raw, json)
Hash identifier:          3bWSNARkQQajBngrVU8Kee1qhTYz6GFyLvfxqjOhAFU=
Subject key identifier:   6B:44:EE:C5:9D:65:7F:F3:E1:47:E4:54:FC:54:5B:3B:36:52:35:18
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CCFD7403AD44CADA5562C6C00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/642ab5a3-a8af-3d7d-9bcb-77bad9afe2cc.roa
Signing time:             Tue 10 Feb 2026 02:00:31 +0000
ROA not before:           Tue 10 Feb 2026 02:00:31 +0000
ROA not after:            Mon 11 May 2026 01:00:31 +0000
asID:                     30036
IP address blocks:        2604:2d81:1000::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cf:d7:40:3a:d4:4c:ad:a5:56:2c:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 10 02:00:31 2026 GMT
            Not After : May 11 01:00:31 2026 GMT
        Subject: CN=424ff4dd-f1c2-4dbe-9eb3-bc0687650755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8f:69:d9:47:3b:85:0c:61:8b:b4:f2:48:5d:
                    36:f9:09:40:f9:8e:cc:7f:ee:4a:19:07:9c:cf:13:
                    ca:18:62:0e:81:3a:35:52:c5:70:e1:f7:9d:71:d3:
                    2a:2d:fd:75:62:f8:cf:af:86:87:44:52:28:fb:4e:
                    86:91:3a:52:39:b7:e8:76:9e:51:83:60:f0:fb:0e:
                    d0:b8:92:f7:71:99:55:72:fb:41:ed:e4:0f:eb:1a:
                    f3:38:a3:92:77:5f:57:f8:79:84:4a:8e:81:99:91:
                    d9:56:f0:1e:6e:73:2d:54:e8:31:93:82:83:24:8a:
                    14:de:f7:ad:e1:e4:37:9e:d4:52:ae:7a:2e:e2:a0:
                    1d:0a:af:c7:0d:da:ba:1c:3e:41:56:88:b6:1d:38:
                    25:40:c0:42:7d:5c:bc:9c:28:41:a1:a4:e9:36:25:
                    32:f5:4e:3e:29:5d:5c:b0:a0:9c:aa:02:d7:8b:e8:
                    d3:5b:45:87:54:4d:8e:d5:f2:70:43:5e:b7:7f:88:
                    4f:b4:d5:cc:81:d7:17:dd:0b:6c:56:09:7c:e6:35:
                    54:91:93:ae:d2:a8:c1:4d:9a:be:16:68:ca:02:69:
                    98:ae:7b:db:da:d3:80:80:73:ac:e6:42:55:4f:5b:
                    80:ba:8f:31:11:23:02:b1:3a:ef:3b:9c:1c:b6:d6:
                    07:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:44:EE:C5:9D:65:7F:F3:E1:47:E4:54:FC:54:5B:3B:36:52:35:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/642ab5a3-a8af-3d7d-9bcb-77bad9afe2cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1000::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:3c:58:da:c2:a0:23:16:e3:c0:d8:24:6d:e6:73:cc:70:c3:
         7b:d4:a5:0a:ae:ca:da:6e:96:a2:79:a1:dd:35:15:fa:e9:fc:
         33:1b:2c:84:95:a4:14:51:b7:0b:52:3d:47:c3:82:9e:bd:37:
         7d:86:7e:e9:d3:c7:14:99:82:d2:ad:8e:76:9a:7b:98:13:ae:
         85:71:75:f4:bb:d7:b9:eb:e3:f7:3a:a2:84:46:72:d8:23:8d:
         34:66:b6:f9:8d:e7:af:19:2e:52:d5:22:9c:51:3c:d8:93:7a:
         8e:bd:42:a9:88:73:e2:a0:3a:5e:15:fd:29:8f:bb:23:a9:cc:
         5c:30:3d:68:f4:34:2c:5f:a1:1b:24:da:ca:1a:8e:65:03:34:
         b1:99:77:9b:24:2a:2c:9f:7d:9c:77:2a:13:dd:f6:9f:c3:b2:
         6e:bd:c9:2e:af:83:01:28:42:07:14:c9:23:59:6d:d0:87:93:
         ae:1e:01:fe:6d:ba:29:71:65:53:fe:47:a3:cf:af:41:38:5a:
         28:1d:26:bb:e7:00:95:e1:4c:2d:ba:b9:69:03:ce:eb:c7:a3:
         c7:97:b8:95:89:29:ee:e0:08:ee:86:94:2f:10:06:9f:09:2f:
         53:5d:02:48:4a:27:02:f5:f6:f7:f2:62:ac:c7:d1:25:b4:08:
         5e:e5:99:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:39:55 2026 by rpki-client