Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bc2d4732-e5f6-3c05-9d2d-024c4a66b355.roa
File:                     bc2d4732-e5f6-3c05-9d2d-024c4a66b355.roa (raw, json)
Hash identifier:          63awnCq1qpeW4dP7TMmO2WcHmF898bWsL4kbriwOt/Q=
Subject key identifier:   99:9A:5D:8D:10:38:F4:9A:53:BC:28:EB:BB:D9:65:22:27:3E:A3:02
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79C94AD220447306114AFB0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bc2d4732-e5f6-3c05-9d2d-024c4a66b355.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:5580::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:94:ad:22:04:47:30:61:14:af:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b70dc7eb-e154-416b-b7e3-14a6300f8e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7c:c4:6a:da:4f:eb:3a:25:0a:aa:f4:48:0a:
                    a2:2a:b2:ab:c1:8a:32:7e:fd:4c:4a:39:a0:dd:d7:
                    d5:fc:91:30:98:33:ba:19:e4:95:6d:cb:81:ad:bf:
                    ee:64:a5:9e:c3:8b:1e:95:7a:66:03:2f:00:da:56:
                    db:d3:a6:2e:04:80:e8:44:a6:c5:96:42:0b:7a:94:
                    ed:c9:ad:a2:de:7b:af:20:a6:8a:1d:c6:99:cc:ef:
                    74:9a:79:2e:a1:55:c6:67:2c:a5:a4:fa:94:bf:1c:
                    5c:5e:7b:69:b7:84:89:71:41:19:c2:78:71:32:ca:
                    e3:c5:12:ba:7a:b5:ae:9b:7e:44:35:b1:4f:51:a7:
                    e5:10:1e:71:bb:54:89:28:23:9e:91:39:64:08:d7:
                    a3:f7:ec:b2:5c:f3:aa:b7:3c:7e:59:f5:3e:ed:c4:
                    06:cb:83:f9:f3:80:dd:63:c5:dc:3a:39:25:96:63:
                    c3:4e:92:f8:79:cb:14:8c:00:25:88:6a:56:ab:65:
                    85:88:70:ed:2f:4f:6f:ad:ba:82:30:e6:9b:a6:12:
                    13:91:66:09:5d:28:ab:41:0b:06:5c:14:7e:48:a2:
                    94:a5:a1:8d:ec:88:d4:71:30:2b:d2:b3:4e:e6:a8:
                    bb:9f:2d:79:0f:db:a4:1b:4e:9b:5f:c8:70:ab:8d:
                    58:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9A:5D:8D:10:38:F4:9A:53:BC:28:EB:BB:D9:65:22:27:3E:A3:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bc2d4732-e5f6-3c05-9d2d-024c4a66b355.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:5580::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:fd:0b:41:6e:b4:29:2a:d2:a7:ff:09:2e:49:c6:32:78:2b:
         32:59:ae:87:8b:14:d1:2e:17:dd:f4:7a:26:d6:57:96:9a:76:
         39:38:e5:c3:a0:89:7a:e7:3f:d5:1b:28:0c:d3:57:f1:a9:58:
         8d:4a:e3:5e:db:3f:d9:42:94:61:a1:fa:a7:33:9b:3c:5d:a4:
         1d:d6:60:63:cf:d3:14:93:43:80:14:e6:ec:51:fc:a5:61:76:
         5a:d5:66:b4:9f:96:f5:02:e9:d3:ad:2c:58:ab:ca:df:86:1d:
         de:88:0d:ec:ec:a6:f4:8b:a8:21:34:01:58:e4:11:a3:39:f9:
         88:22:4f:a2:09:75:f6:71:1c:fb:66:88:f6:a6:73:28:fe:2b:
         86:da:fb:c1:80:6c:f2:e3:47:1b:db:38:23:61:a3:fa:22:64:
         b2:2f:5a:f8:7f:f5:bb:d4:3b:49:c7:c1:60:3b:d5:ec:d7:22:
         46:a9:f4:50:64:47:0b:10:50:7f:48:e7:28:e4:30:65:c7:fe:
         c8:de:e8:59:2d:63:1e:a1:fc:36:20:c0:2b:99:81:b1:e5:af:
         74:27:26:a9:db:24:a6:d8:f9:19:d3:da:80:89:65:81:7e:77:
         d6:f0:da:43:88:0f:ca:ae:b4:56:20:91:66:54:b4:7e:93:4d:
         67:2e:e2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:28:33 2026 by rpki-client