Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af65b137-bf3d-30eb-bd21-ec70ce265b99.roa
File:                     af65b137-bf3d-30eb-bd21-ec70ce265b99.roa (raw, json)
Hash identifier:          9Qhp7q+TKFHmcJf4XVtgex4A3c8a+qfoQl+GbJmT8As=
Subject key identifier:   AF:0A:37:FE:D0:DE:8B:A8:73:09:90:66:20:D1:1B:D1:2D:30:D3:80
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DE6E5C41DE2453CCCF937A9C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af65b137-bf3d-30eb-bd21-ec70ce265b99.roa
Signing time:             Thu 21 May 2026 01:00:25 +0000
ROA not before:           Thu 21 May 2026 01:00:25 +0000
ROA not after:            Wed 19 Aug 2026 01:00:25 +0000
asID:                     19905
IP address blocks:        2604:2d80:5000::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e6:e5:c4:1d:e2:45:3c:cc:f9:37:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 21 01:00:25 2026 GMT
            Not After : Aug 19 01:00:25 2026 GMT
        Subject: CN=9dfeed15-373b-4c5a-930c-98260db9bc8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f1:ac:8f:ff:00:a3:4c:86:59:26:74:6c:08:
                    db:0d:41:94:ea:cc:79:b2:3e:91:74:fb:a1:47:10:
                    2a:0e:ee:39:ec:27:dd:1e:a5:ca:ab:16:de:01:4e:
                    cf:24:fc:c0:3d:b2:f3:de:87:aa:90:e2:1f:a0:f7:
                    e5:90:c3:64:24:29:20:12:15:52:39:aa:d8:57:e8:
                    c6:71:3d:13:c7:b9:97:15:bb:d6:53:b3:ec:68:cc:
                    3b:50:d6:b8:89:4a:7e:bf:32:6c:fd:6e:23:91:e7:
                    7e:4d:a7:68:c4:34:3d:d5:e9:40:b3:89:0b:6e:7b:
                    90:14:89:4c:41:2c:3d:ff:0e:48:37:44:31:15:26:
                    e3:7e:fd:bd:8d:83:8d:7f:49:5d:74:45:ae:13:78:
                    a9:0a:70:cd:66:ba:86:9b:c2:29:c7:1b:1d:1a:0d:
                    12:4e:9c:33:9b:b3:c3:85:02:26:c4:cd:5a:ef:7a:
                    e3:46:de:26:d6:90:3c:a7:42:4d:13:05:95:c1:f3:
                    8c:8f:30:c5:67:87:e6:37:d1:a3:80:5c:b1:c7:0c:
                    9d:3d:e4:f9:8d:78:64:dc:ad:a8:5f:63:8a:a7:9a:
                    15:9f:10:80:ea:11:94:bc:d5:f2:5d:0f:94:98:1f:
                    10:a8:2b:42:6a:7e:6f:01:38:3a:b6:c0:16:58:49:
                    35:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:0A:37:FE:D0:DE:8B:A8:73:09:90:66:20:D1:1B:D1:2D:30:D3:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af65b137-bf3d-30eb-bd21-ec70ce265b99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:5000::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:88:53:2e:53:30:04:b9:cc:dc:47:67:05:c6:9e:a7:48:5e:
         d6:03:bc:57:2a:2b:40:39:87:86:20:3b:d8:30:a0:82:ee:18:
         07:5f:b5:74:79:9f:ca:e5:2c:21:76:8f:82:b5:06:99:69:c0:
         a5:71:f0:e7:14:b8:f4:98:ed:af:2b:34:f5:ac:b4:7c:73:25:
         3a:75:b2:d0:ed:5c:aa:37:bf:bf:e8:e7:b5:e2:a9:05:70:dc:
         41:13:ec:bc:09:f6:0c:68:bb:f8:8d:b8:f1:3d:b7:76:c6:fc:
         07:4a:e6:e5:95:8f:70:57:ea:30:2d:ff:b4:14:73:f7:02:69:
         b2:e3:b6:ed:9f:69:1a:ea:97:a7:0d:fc:25:7a:09:98:da:3a:
         c2:2d:fe:f6:59:be:7c:b7:d9:60:24:26:40:49:2c:61:30:33:
         29:f4:53:73:db:14:76:3f:2c:21:7f:d0:7f:2c:9f:61:5c:e3:
         4d:22:2b:70:f8:cf:92:e0:9a:ef:f9:08:89:ed:46:ae:a1:ec:
         ba:8d:15:33:82:0b:c0:2e:c9:57:c5:37:9a:b2:8d:17:6a:e9:
         0a:e5:a5:dc:73:90:32:3e:44:d6:55:fa:80:4f:23:87:d3:92:
         2c:3b:b5:4f:5e:33:71:98:c3:25:cd:e5:dd:7d:9b:27:82:1f:
         22:e2:5f:26
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3m5cQd4kU8zPk3qcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDUyMTAxMDAyNVoXDTI2MDgxOTAxMDAyNVowLzEtMCsGA1UEAxMk
OWRmZWVkMTUtMzczYi00YzVhLTkzMGMtOTgyNjBkYjliYzhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPGsj/8Ao0yGWSZ0bAjbDUGU6sx5sj6RdPuh
RxAqDu457CfdHqXKqxbeAU7PJPzAPbLz3oeqkOIfoPflkMNkJCkgEhVSOarYV+jG
cT0Tx7mXFbvWU7PsaMw7UNa4iUp+vzJs/W4jked+TadoxDQ91elAs4kLbnuQFIlM
QSw9/w5IN0QxFSbjfv29jYONf0lddEWuE3ipCnDNZrqGm8IpxxsdGg0STpwzm7PD
hQImxM1a73rjRt4m1pA8p0JNEwWVwfOMjzDFZ4fmN9GjgFyxxwydPeT5jXhk3K2o
X2OKp5oVnxCA6hGUvNXyXQ+UmB8QqCtCan5vATg6tsAWWEk1SwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFK8KN/7Q3ouocwmQZiDRG9EtMNOAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWY2NWIxMzctYmYzZC0z
MGViLWJkMjEtZWM3MGNlMjY1Yjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgFAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD6IUy5TMAS5zNxHZwXGnqdIXtYDvFcqK0A5h4YgO9gwoILuGAdf
tXR5n8rlLCF2j4K1BplpwKVx8OcUuPSY7a8rNPWstHxzJTp1stDtXKo3v7/o57Xi
qQVw3EET7LwJ9gxou/iNuPE9t3bG/AdK5uWVj3BX6jAt/7QUc/cCabLjtu2faRrq
l6cN/CV6CZjaOsIt/vZZvny32WAkJkBJLGEwMyn0U3PbFHY/LCF/0H8sn2Fc400i
K3D4z5Lgmu/5CIntRq6h7LqNFTOCC8AuyVfFN5qyjRdq6QrlpdxzkDI+RNZV+oBP
I4fTkiw7tU9eM3GYwyXN5d19myeCHyLiXyY=
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:37:25 2026 by rpki-client