Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5a1f46b-864c-3312-8c6e-b2be1f00a1af.roa
File:                     b5a1f46b-864c-3312-8c6e-b2be1f00a1af.roa (raw, json)
Hash identifier:          rggwseRQrFavVXR/dIl5FscWVHAUTJCjqqjq+0Cyeuw=
Subject key identifier:   BA:21:60:E0:FE:CC:4B:03:0F:89:64:C8:BD:15:16:47:E8:03:E7:1F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D4D5A462F350D9BC51A85BC00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5a1f46b-864c-3312-8c6e-b2be1f00a1af.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     30036
IP address blocks:        2604:2d81:3280::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:46:2f:35:0d:9b:c5:1a:85:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=a96ca8fc-0d67-450b-86ff-ea843fec0b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9b:83:ef:e0:3b:65:d3:54:64:15:ec:90:a9:
                    d7:e9:8d:27:55:2f:6b:a1:d0:2c:27:63:56:01:17:
                    39:6b:ab:ec:50:d6:eb:62:95:97:ba:72:b0:4e:21:
                    51:d7:41:30:b7:77:74:fa:7d:23:e6:f3:a8:4a:99:
                    74:14:2c:26:c3:d3:49:9e:96:7d:d4:b2:e0:8e:fc:
                    ca:ec:42:fd:72:f4:a6:e2:c1:aa:3b:40:f8:14:12:
                    06:5d:8a:1e:44:b5:51:b0:db:da:60:3a:08:d1:c0:
                    b4:5c:f3:9a:f3:dd:7f:9f:3f:69:5c:71:b8:e8:96:
                    43:da:94:49:d0:4c:0a:e4:06:67:ec:b2:7a:29:9e:
                    16:f0:ac:8e:f4:8e:62:3d:bf:7c:ce:58:42:d2:ee:
                    04:ca:0e:b7:0d:ae:8e:4a:d4:b8:d0:cb:32:f5:f1:
                    da:16:bf:29:8d:7b:64:0b:19:32:8a:94:3a:8e:3b:
                    57:52:9f:64:5e:dd:81:c8:ef:bc:09:b9:dc:97:64:
                    32:da:96:70:04:50:4f:2d:44:86:5a:fe:e7:c4:e9:
                    ea:04:76:bb:0c:0f:0b:62:bd:12:22:d4:a7:7c:4e:
                    31:d5:b8:8d:c0:fd:7e:d6:23:e3:a6:d6:be:4c:b2:
                    0c:b5:3f:04:d6:0a:07:2c:1a:ec:23:c9:16:2c:45:
                    1f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:21:60:E0:FE:CC:4B:03:0F:89:64:C8:BD:15:16:47:E8:03:E7:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5a1f46b-864c-3312-8c6e-b2be1f00a1af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:3280::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:bc:ce:c3:f1:ba:90:5d:93:33:e0:2b:a4:d0:16:03:34:80:
         59:05:63:45:5b:b7:c0:01:d7:d5:0a:ae:09:28:39:c9:7b:e6:
         0a:cf:c1:00:43:25:1a:69:4f:11:de:04:e7:44:98:95:a3:ff:
         bb:df:c8:ff:1d:74:f6:94:7e:b9:78:0b:d6:7f:49:0c:d6:19:
         46:87:cb:d4:ca:5d:88:2e:29:66:13:6c:23:16:1d:de:91:a5:
         8c:21:1e:51:69:cb:48:bb:27:67:59:2d:ae:e3:76:09:6e:5d:
         9d:27:bc:ef:81:e4:80:93:0e:96:52:f5:47:3e:d2:a7:45:6c:
         8c:79:3d:bb:d7:a6:8b:9a:fb:41:2c:9e:fb:b9:49:8d:d1:cb:
         ac:74:60:ab:9c:fd:94:3d:48:07:a9:53:8a:e3:31:d3:95:91:
         a1:5a:5f:e7:df:c8:2b:16:5a:12:4d:49:78:67:41:db:90:43:
         7c:b8:fa:02:47:34:94:59:74:83:06:5c:cd:5e:72:34:7a:63:
         ef:93:4f:0f:1f:68:99:85:76:82:95:6d:df:09:dd:dc:70:75:
         c8:a6:c5:3a:06:c7:ba:a6:7e:ff:1e:d6:6a:82:94:45:28:b4:
         6b:68:e9:12:d2:16:69:77:b9:52:85:d4:07:3b:4a:6b:56:57:
         07:7d:bc:7c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1NWkYvNQ2bxRqFvAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk
YTk2Y2E4ZmMtMGQ2Ny00NTBiLTg2ZmYtZWE4NDNmZWMwYjk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJuD7+A7ZdNUZBXskKnX6Y0nVS9rodAsJ2NW
ARc5a6vsUNbrYpWXunKwTiFR10Ewt3d0+n0j5vOoSpl0FCwmw9NJnpZ91LLgjvzK
7EL9cvSm4sGqO0D4FBIGXYoeRLVRsNvaYDoI0cC0XPOa891/nz9pXHG46JZD2pRJ
0EwK5AZn7LJ6KZ4W8KyO9I5iPb98zlhC0u4Eyg63Da6OStS40Msy9fHaFr8pjXtk
CxkyipQ6jjtXUp9kXt2ByO+8Cbncl2Qy2pZwBFBPLUSGWv7nxOnqBHa7DA8LYr0S
ItSnfE4x1biNwP1+1iPjpta+TLIMtT8E1goHLBrsI8kWLEUfxwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLohYOD+zEsDD4lkyL0VFkfoA+cfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjVhMWY0NmItODY0Yy0z
MzEyLThjNmUtYjJiZTFmMDBhMWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgTKA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB28zsPxupBdkzPgK6TQFgM0gFkFY0Vbt8AB19UKrgkoOcl75grP
wQBDJRppTxHeBOdEmJWj/7vfyP8ddPaUfrl4C9Z/SQzWGUaHy9TKXYguKWYTbCMW
Hd6RpYwhHlFpy0i7J2dZLa7jdgluXZ0nvO+B5ICTDpZS9Uc+0qdFbIx5PbvXpoua
+0Esnvu5SY3Ry6x0YKuc/ZQ9SAepU4rjMdOVkaFaX+ffyCsWWhJNSXhnQduQQ3y4
+gJHNJRZdIMGXM1ecjR6Y++TTw8faJmFdoKVbd8J3dxwdcimxToGx7qmfv8e1mqC
lEUotGto6RLSFml3uVKF1Ac7SmtWVwd9vHw=
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:58:07 2026 by rpki-client