Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c4c0300d-98a7-3759-ba38-3252fbf556aa.roa
File:                     c4c0300d-98a7-3759-ba38-3252fbf556aa.roa (raw, json)
Hash identifier:          vg1tYGNDvZrg/ZB7UtqHY4yQkMl8LPni/w2o4p32deI=
Subject key identifier:   12:21:6A:DA:6B:C3:53:9A:3E:B7:F1:10:D1:7D:7C:4F:03:A2:61:FF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F5A32EC7D79D99297FE87E080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c4c0300d-98a7-3759-ba38-3252fbf556aa.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d81:8180::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:ec:7d:79:d9:92:97:fe:87:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=c09dacdc-071e-4000-9463-2fcc5f014a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6f:2d:8a:52:70:18:fe:cd:7d:0f:d5:ac:2c:
                    76:46:db:1a:09:8c:b1:8d:9f:0e:ed:25:a7:55:80:
                    ff:60:42:d2:99:72:b7:02:63:b5:20:cc:de:3f:66:
                    1d:8b:4d:54:3d:28:e8:ae:be:5d:59:45:41:c2:b4:
                    d2:5b:07:58:9f:d0:85:82:c3:12:ba:d4:03:ed:0b:
                    5d:40:e2:b3:0d:be:fc:db:78:51:71:da:9a:c9:a1:
                    9f:52:e2:8c:ab:72:76:f9:f3:a4:50:0f:19:14:2b:
                    fa:20:01:ff:bd:2c:a7:2b:41:a8:91:0f:ea:84:7c:
                    9a:38:9b:8d:b3:26:b4:09:9f:9d:34:30:86:7e:f0:
                    a8:80:59:f6:6e:c6:45:be:41:d6:bc:32:f9:8d:af:
                    96:9e:45:30:b9:47:0e:a2:c0:74:7c:9e:ea:c4:0e:
                    56:e3:46:58:da:f2:47:30:74:a6:b3:a6:65:b2:bc:
                    32:aa:a1:bf:44:10:6a:2d:f2:36:ce:7c:8a:3c:b6:
                    d7:68:b6:55:ae:68:d4:ca:b6:1d:4e:21:c6:d2:62:
                    0a:ed:60:ba:e7:48:ca:e8:35:59:ac:8e:93:bb:aa:
                    44:cc:8b:11:53:1d:00:6d:a9:1e:b6:c2:29:b4:7c:
                    fe:0b:f9:d2:34:39:5d:f0:4d:58:ac:08:71:6d:aa:
                    b4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:21:6A:DA:6B:C3:53:9A:3E:B7:F1:10:D1:7D:7C:4F:03:A2:61:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c4c0300d-98a7-3759-ba38-3252fbf556aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:8180::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:2d:a9:f6:46:03:8d:18:fe:9d:08:c8:97:4c:53:81:fd:00:
         1a:cf:7d:56:51:4c:8c:a1:c0:3c:62:af:12:17:28:8d:84:f3:
         06:40:bf:be:a1:7c:65:b9:85:64:24:e4:68:fc:f6:9b:c0:29:
         7d:b2:d3:e8:44:38:2a:91:2b:30:ee:b6:07:cc:65:18:97:8e:
         4d:c3:2a:df:52:0b:79:0d:0f:c4:33:53:6e:a9:cb:32:41:6a:
         fe:9d:53:eb:d5:84:7e:bb:00:7e:78:4f:3c:95:8a:f1:55:56:
         1f:4b:a4:70:de:27:64:54:6c:1a:68:3c:65:93:ce:39:c5:c4:
         22:21:9b:73:0d:11:11:09:2f:a0:5f:d7:2c:67:40:59:64:d8:
         e1:5c:5d:b0:14:53:ff:00:07:0d:c0:d8:cc:f9:67:5b:89:e5:
         61:ab:68:a4:3e:aa:78:13:79:b4:5b:65:5b:1c:73:7e:76:c9:
         5f:65:71:8a:17:a8:65:ce:66:2b:b5:93:d3:65:7d:e6:7d:1b:
         86:32:1d:b1:3f:60:95:4d:2c:48:93:a8:07:98:2d:cf:a9:df:
         20:81:62:ea:67:64:e4:7d:94:53:a3:24:f7:4f:a2:23:7d:c8:
         cd:8c:3c:87:59:5e:4f:08:56:7f:7b:3e:f8:75:36:9c:e9:c3:
         cb:3a:e5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:29:48 2026 by rpki-client