Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/acc8e0c6-1449-36d1-93c1-3b0732b14812.roa
File:                     acc8e0c6-1449-36d1-93c1-3b0732b14812.roa (raw, json)
Hash identifier:          37+kIEpgpEn4ifVau0+v9lKpG/+C1P+d0Kqlvcv8kiw=
Subject key identifier:   A0:03:17:27:CB:E3:29:B6:2E:0F:13:9D:10:1F:82:F5:DD:EE:42:6A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D63AFA42805ABF9EBF5471080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/acc8e0c6-1449-36d1-93c1-3b0732b14812.roa
Signing time:             Sat 04 Apr 2026 01:00:25 +0000
ROA not before:           Sat 04 Apr 2026 01:00:25 +0000
ROA not after:            Fri 03 Jul 2026 01:00:25 +0000
asID:                     19905
IP address blocks:        2604:2d81:400::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:63:af:a4:28:05:ab:f9:eb:f5:47:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr  4 01:00:25 2026 GMT
            Not After : Jul  3 01:00:25 2026 GMT
        Subject: CN=9166456b-2b0c-4525-b899-dd8506595334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b9:29:d0:9a:07:fb:3b:4e:ec:a7:78:89:bb:
                    72:52:70:52:f1:e2:60:6c:f5:ed:fd:e5:2d:12:56:
                    d0:c8:84:22:b1:7d:56:33:f3:c9:d0:49:ea:36:ce:
                    9d:6e:a0:c7:68:d8:43:79:7c:fb:b4:76:68:da:ef:
                    71:86:65:44:3e:0e:0d:e8:c2:ea:19:4c:a9:1b:66:
                    cb:89:0a:fd:bf:2b:9c:c1:98:3c:51:b1:5d:e8:60:
                    77:db:50:88:e8:c3:99:8c:74:ff:b6:29:16:3a:ea:
                    68:e1:d7:fd:ad:7a:f2:3e:be:71:70:5c:f0:d5:26:
                    71:6f:1a:43:23:0e:bf:6a:56:19:8e:6e:f9:92:7a:
                    b1:9d:ae:1a:20:34:75:dc:94:1b:97:2f:17:d0:1a:
                    ce:a3:dd:ca:4f:58:6a:da:d2:a3:20:7f:84:7b:74:
                    8a:44:2a:a8:a9:ab:e1:d8:07:12:e5:1f:fd:65:04:
                    aa:d5:ef:47:a1:49:a2:e0:98:61:63:73:71:b3:e3:
                    71:33:38:1c:07:d7:93:69:04:29:7e:f2:da:db:f5:
                    e6:ee:e0:97:64:3c:45:fb:a4:87:72:48:24:9b:23:
                    01:7f:f8:71:12:38:c5:65:7e:7f:7c:9e:dd:13:eb:
                    69:1e:52:8b:48:86:44:d4:9c:dd:58:b0:f2:e5:eb:
                    e1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:03:17:27:CB:E3:29:B6:2E:0F:13:9D:10:1F:82:F5:DD:EE:42:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/acc8e0c6-1449-36d1-93c1-3b0732b14812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:400::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:04:5d:bb:05:57:68:fc:65:bc:43:c1:1e:0c:b5:1b:37:04:
         09:1b:7b:e3:ab:fd:ef:ea:bf:8b:76:66:25:8c:e3:7c:d9:a0:
         af:af:77:21:3b:61:c4:89:78:9a:cb:e0:54:e5:75:94:b5:55:
         68:6a:97:f7:c6:42:1c:49:f7:60:33:14:f5:d8:e9:c1:22:0b:
         86:2b:b6:3e:0e:f2:34:36:20:09:09:e7:27:a9:86:73:6f:42:
         31:c7:67:01:83:72:3e:b0:ca:50:44:72:95:83:2a:4c:ca:ec:
         f6:93:3c:85:9a:4e:55:6c:75:7b:04:49:0a:37:db:7f:cc:96:
         6b:6c:8e:f2:88:ca:0a:20:8f:ee:80:60:92:c2:5f:d1:79:dc:
         5d:0d:b3:f7:b0:0f:a7:ec:f9:90:17:5d:22:c1:1d:39:91:63:
         7d:f9:5a:1b:06:9b:da:60:38:a3:d9:0d:54:4a:2a:b5:05:8b:
         ec:71:56:6a:f8:ac:18:b2:00:30:d7:3a:f7:8b:fa:17:35:c9:
         94:f5:ca:26:fe:e2:6c:dc:cd:f9:47:56:1c:73:14:36:df:f2:
         50:e5:78:97:7a:98:bf:d8:02:7e:16:5f:cf:69:6b:93:4c:f5:
         38:8d:aa:e4:44:59:7c:a3:10:e9:85:bf:93:e4:4c:5e:8b:22:
         6e:30:61:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:27:20 2026 by rpki-client