Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af65b137-bf3d-30eb-bd21-ec70ce265b99.roa
File:                     af65b137-bf3d-30eb-bd21-ec70ce265b99.roa (raw, json)
Hash identifier:          KWEAA+fpfRCjzhs/VBK95ZU145HIwU7OC23f1cCFUP4=
Subject key identifier:   F5:ED:9B:D3:36:5E:EB:0E:CB:89:EF:EB:7A:65:EC:9C:18:67:76:28
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA791734419099DDD92BD80C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af65b137-bf3d-30eb-bd21-ec70ce265b99.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d80:5000::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:73:44:19:09:9d:dd:92:bd:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=19d54f67-d978-4152-b918-aeece18f5f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4c:8d:f2:c1:b5:8f:9c:cb:fc:7b:83:41:c6:
                    2f:fa:0d:1a:18:7b:c2:03:3d:37:55:f3:52:3b:36:
                    d3:39:31:1a:60:08:04:f5:ca:e8:28:26:1b:41:7e:
                    d3:56:8b:7a:a1:39:1f:41:8c:a3:9a:c3:6f:ce:13:
                    c3:ec:b1:64:4f:33:6d:fd:0d:84:d9:5d:b9:73:72:
                    4d:a2:12:92:89:97:1e:11:e6:77:43:44:c9:3f:b5:
                    99:81:97:4e:b7:93:a8:60:66:d9:32:44:01:f6:73:
                    d6:e4:d9:58:47:66:66:6e:cf:46:d5:97:5b:b1:d7:
                    bf:66:17:b6:12:78:fd:94:65:51:47:bb:b0:b0:c6:
                    c3:e3:3e:11:52:a1:c5:1b:64:88:dc:2c:79:0e:88:
                    32:a1:6e:db:9d:83:ea:29:53:60:38:6c:88:5d:cc:
                    30:24:8c:1e:96:24:69:95:93:12:b2:25:0b:e0:8a:
                    8b:66:42:c2:31:9e:84:cd:93:91:a0:b4:ac:e2:c4:
                    20:df:1e:fd:ab:f4:30:6e:18:61:39:cc:db:67:19:
                    bd:10:f1:a6:36:3b:da:e1:1f:5f:5b:5e:02:d8:3d:
                    60:fc:f6:cb:ce:a5:33:26:82:a3:01:ce:7f:0c:ff:
                    43:b8:25:45:68:df:c6:19:78:98:ee:35:9c:7d:cd:
                    f6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:ED:9B:D3:36:5E:EB:0E:CB:89:EF:EB:7A:65:EC:9C:18:67:76:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af65b137-bf3d-30eb-bd21-ec70ce265b99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:5000::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:1f:b0:ab:1c:7e:4b:3d:f7:cc:91:6a:70:99:4d:23:ad:46:
         10:b7:b3:67:67:b4:0c:45:36:13:23:6a:f0:c1:13:c6:e9:5f:
         a7:74:91:aa:40:c1:10:40:98:77:27:bb:a9:88:fc:3a:2e:b7:
         14:e4:04:08:35:17:37:a5:3e:bf:18:60:ea:00:ac:78:b8:fc:
         4e:9d:0e:b1:77:79:87:f0:9a:d1:5a:6c:3e:ca:d8:4b:6c:7f:
         44:0d:05:62:f4:bb:0c:49:10:ea:43:1b:ce:1e:af:ad:68:23:
         ab:de:9b:7f:77:36:0d:41:3f:b4:4e:37:c6:40:12:33:cb:ca:
         be:25:b9:d0:e7:59:dd:1e:cb:e3:b8:b7:f7:bb:46:5a:e9:3a:
         46:7a:58:84:5c:eb:65:c8:71:18:46:83:fc:8f:f8:7e:80:93:
         fa:4b:e0:34:fc:b0:2a:01:61:94:06:0a:9e:a5:76:74:87:2a:
         13:32:b2:8c:a0:17:60:08:60:8a:f4:fb:eb:af:e0:80:8b:94:
         ec:5e:64:f3:ae:cb:59:7a:81:54:8d:12:26:df:8f:82:fc:7f:
         93:81:6e:06:47:ad:3d:88:5d:3a:69:ab:9a:ef:99:21:a5:d3:
         8c:0a:c9:9d:ba:f4:27:b5:0a:61:6d:98:27:2a:88:e0:42:71:
         ba:ec:bf:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:14:56 2026 by rpki-client