Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6d043f20-64a9-360c-9318-038cdf8c1d00.roa
File:                     6d043f20-64a9-360c-9318-038cdf8c1d00.roa (raw, json)
Hash identifier:          I/C6b2gIOTDssAOTvpax+OVAdUwzhwM9GZ4OLpQFDaE=
Subject key identifier:   61:FA:E2:3D:41:87:29:5B:1D:54:EE:0D:31:3D:9F:41:51:A3:54:7A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E043613BF967C63852FF1B000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6d043f20-64a9-360c-9318-038cdf8c1d00.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     30036
IP address blocks:        2604:2d80:d600::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:13:bf:96:7c:63:85:2f:f1:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=7e35ade3-be64-4057-88f7-41e2e1e9887d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:71:fe:a9:91:8a:63:06:a0:ed:ca:1e:6f:f7:
                    1d:80:e7:b5:d2:11:b1:94:64:2b:d1:5e:c1:c7:39:
                    26:51:c7:dd:2e:8c:90:d6:b6:65:fc:a9:9a:00:02:
                    c9:e0:1e:b4:da:10:7c:f6:82:1c:50:c5:1d:35:c2:
                    4f:94:8e:a3:85:a3:df:44:51:f1:cb:fc:c6:fc:01:
                    da:df:72:11:ab:d9:ba:33:a0:5b:a0:9f:8e:f4:fb:
                    31:88:39:fb:26:c2:4f:04:d2:a2:8b:26:f9:04:a2:
                    16:fe:03:b1:d7:e0:f3:87:fb:15:78:20:4c:2a:c2:
                    57:7e:11:9f:0b:d6:70:80:6e:fa:c8:e3:e5:43:af:
                    a6:49:54:23:ec:00:17:87:ff:08:68:18:fb:ac:9f:
                    33:7c:2d:a1:5a:4b:25:b2:5a:c5:dc:83:80:3a:a3:
                    87:5e:9d:d2:84:1b:65:26:e7:b7:ee:13:aa:7c:60:
                    27:50:46:f3:cc:a3:ed:b7:a2:98:99:c6:90:c1:a6:
                    23:26:d0:5a:bf:de:8a:4d:01:18:60:e5:f0:a6:0d:
                    a9:c8:ac:0d:a9:b3:fd:c4:fd:18:be:8e:3c:82:57:
                    02:1a:6b:48:c9:ab:64:e9:6b:a7:45:e7:c6:a8:e1:
                    d8:ae:50:b9:38:38:72:f7:ee:05:f0:fb:db:c0:cf:
                    96:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FA:E2:3D:41:87:29:5B:1D:54:EE:0D:31:3D:9F:41:51:A3:54:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6d043f20-64a9-360c-9318-038cdf8c1d00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:d600::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:7c:16:e5:1b:78:32:cf:fb:88:75:9f:e4:5f:5c:72:bf:20:
         21:f3:cb:70:4c:27:61:ee:63:89:b6:24:96:84:30:80:aa:7a:
         fe:82:48:a4:b4:61:1d:89:fe:2a:d8:f7:2e:f5:79:c9:a3:41:
         b0:6f:23:f3:af:b4:97:12:88:8a:c3:79:c1:4f:1f:3a:24:ba:
         89:81:ac:f3:8e:86:c0:f3:4c:56:25:bb:1d:97:08:40:69:ba:
         be:08:df:ba:82:79:81:1d:24:0a:14:8d:47:d3:60:49:d8:2a:
         61:8f:7b:c4:44:f5:94:aa:e8:b9:72:22:2b:e2:c2:4c:f6:df:
         38:32:cb:3b:6d:43:13:23:68:cb:96:9b:81:ca:b5:7f:1c:04:
         34:e2:31:8e:94:b6:90:3b:d0:04:21:c4:d8:b9:6f:71:a0:0f:
         17:43:f4:08:f1:86:6a:1f:0c:4b:bf:49:f5:36:05:55:72:e3:
         68:fb:fd:ff:03:be:6c:f4:24:13:7b:64:87:11:8c:0d:27:95:
         02:ff:b4:59:2c:e2:62:a2:6c:61:a0:8d:bb:f6:ae:be:59:f1:
         0a:65:0e:d6:75:7e:ce:56:31:a2:73:5c:b2:b9:72:fd:34:79:
         76:c2:8a:70:ed:b4:23:03:f5:2e:ee:57:fa:75:03:b8:f5:44:
         c4:5c:f0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:37:11 2026 by rpki-client