Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/77633310-8b30-354f-9e02-273bb1ce6755.roa
File:                     77633310-8b30-354f-9e02-273bb1ce6755.roa (raw, json)
Hash identifier:          vqBk4lyuj6Mq1+atnP9ke74cDA/JUDUvRWNyEQ1aFIc=
Subject key identifier:   39:ED:D1:BF:8C:24:D5:00:73:96:E1:B0:63:FD:82:33:B6:3B:DE:28
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D75D523C84E33B07622125D40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/77633310-8b30-354f-9e02-273bb1ce6755.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     30036
IP address blocks:        2604:2d80:7000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:23:c8:4e:33:b0:76:22:12:5d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=dccc3835-1aea-4965-899d-f3a3f05f4ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cf:c6:4d:b2:93:5c:5e:18:39:bd:d3:c7:06:
                    ba:57:ed:4f:0e:c2:b1:a1:43:6f:ea:29:66:75:a7:
                    0c:47:fa:43:93:b6:aa:83:30:a3:e4:47:81:7f:04:
                    cf:01:a8:fc:2e:37:cf:45:b3:7a:17:b4:3d:47:1b:
                    03:d5:d2:0d:b1:fb:18:90:ac:92:48:a9:a4:10:06:
                    91:ed:68:80:12:c8:69:48:87:1e:7c:ca:90:e7:6b:
                    cd:ba:7f:ab:75:7c:bd:e6:52:a7:c4:fa:16:ac:97:
                    90:0f:61:d3:e5:ed:f3:e4:54:cb:c1:63:f3:bf:93:
                    7e:46:bd:7e:7c:91:53:55:fd:34:cc:51:31:75:a3:
                    06:55:4b:c3:d8:cb:4a:e6:83:20:6a:60:d1:5c:50:
                    9e:32:df:d0:a6:6c:82:8e:a9:15:8c:58:96:c5:c0:
                    cc:f0:ac:b1:3a:04:73:b4:37:fb:12:75:d8:f9:68:
                    df:47:7e:f7:17:15:0e:3a:39:26:d3:a1:6e:6a:a3:
                    07:df:42:37:ee:ea:da:66:03:a6:ac:64:41:bd:98:
                    1a:eb:dd:b8:ff:40:3b:6d:ea:4d:a6:29:34:29:4f:
                    27:97:81:dd:84:9f:ed:5e:7f:e4:50:16:50:46:85:
                    8f:71:81:f3:4c:02:90:43:7c:4f:c9:9b:80:30:cb:
                    0e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:ED:D1:BF:8C:24:D5:00:73:96:E1:B0:63:FD:82:33:B6:3B:DE:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/77633310-8b30-354f-9e02-273bb1ce6755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:ff:cc:e6:39:3a:de:2a:fd:54:1e:53:35:de:56:79:25:ed:
         e6:cd:ea:52:a3:a3:cc:9a:56:2a:c5:6f:5b:bb:b4:c7:9e:33:
         95:25:69:14:48:f2:04:e5:14:7f:68:af:01:64:c3:ba:2f:1b:
         4f:eb:1b:ef:e0:78:23:73:32:05:20:37:7a:b0:7d:6a:e8:a2:
         32:48:ad:ff:b5:70:01:28:3f:df:ba:84:78:21:e7:0a:e4:28:
         15:08:21:de:8a:61:59:90:b0:f7:d4:cf:24:ee:ee:0b:bf:db:
         a9:ff:53:4f:d9:13:0f:57:0c:a7:d4:12:30:0b:cd:d1:8c:41:
         b8:c8:06:67:b2:ac:c0:5f:8b:19:7f:47:3f:d2:f3:0e:3e:37:
         0b:eb:7a:86:4e:30:ce:29:d8:10:b3:d0:30:b6:e1:d9:d6:26:
         51:6c:bf:e0:b2:d8:67:11:c9:1c:1a:53:5a:67:67:52:b4:a8:
         8c:00:df:24:b4:60:81:ea:7a:ad:e6:d1:36:e2:67:13:0f:d0:
         f3:00:f2:72:c7:6f:b8:15:27:09:5b:49:e1:e5:53:6d:a3:9e:
         ee:e9:2f:51:76:bc:cf:30:74:af:ae:d5:11:d5:bd:0e:3d:ea:
         97:b2:0a:20:49:8e:7b:26:10:34:fe:41:e3:39:da:80:30:f6:
         28:1c:63:b0
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE111SPITjOwdiISXUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk
ZGNjYzM4MzUtMWFlYS00OTY1LTg5OWQtZjNhM2YwNWY0YWQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8/GTbKTXF4YOb3Txwa6V+1PDsKxoUNv6ilm
dacMR/pDk7aqgzCj5EeBfwTPAaj8LjfPRbN6F7Q9RxsD1dINsfsYkKySSKmkEAaR
7WiAEshpSIcefMqQ52vNun+rdXy95lKnxPoWrJeQD2HT5e3z5FTLwWPzv5N+Rr1+
fJFTVf00zFExdaMGVUvD2MtK5oMgamDRXFCeMt/QpmyCjqkVjFiWxcDM8KyxOgRz
tDf7EnXY+WjfR373FxUOOjkm06FuaqMH30I37uraZgOmrGRBvZga6924/0A7bepN
pik0KU8nl4HdhJ/tXn/kUBZQRoWPcYHzTAKQQ3xPyZuAMMsOqwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDnt0b+MJNUAc5bhsGP9gjO2O94oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzc2MzMzMTAtOGIzMC0z
NTRmLTllMDItMjczYmIxY2U2NzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgHAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEALP/M5jk63ir9VB5TNd5WeSXt5s3qUqOjzJpWKsVvW7u0x54zlSVp
FEjyBOUUf2ivAWTDui8bT+sb7+B4I3MyBSA3erB9auiiMkit/7VwASg/37qEeCHn
CuQoFQgh3ophWZCw99TPJO7uC7/bqf9TT9kTD1cMp9QSMAvN0YxBuMgGZ7KswF+L
GX9HP9LzDj43C+t6hk4wzinYELPQMLbh2dYmUWy/4LLYZxHJHBpTWmdnUrSojADf
JLRggep6rebRNuJnEw/Q8wDycsdvuBUnCVtJ4eVTbaOe7ukvUXa8zzB0r67VEdW9
Dj3ql7IKIEmOeyYQNP5B4znagDD2KBxjsA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:11:49 2026 by rpki-client