Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c69d5116-1f11-3953-8aed-78496a42c22c.roa
File:                     c69d5116-1f11-3953-8aed-78496a42c22c.roa (raw, json)
Hash identifier:          a5YPEA022h71Jqr75R78sR+w3mDYbYw+To8Eh0bYwq0=
Subject key identifier:   40:55:F3:6E:D9:9A:57:08:2B:F3:A0:79:80:65:4B:9B:16:B8:AE:FE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E043620C35B84293DAEDB1400
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c69d5116-1f11-3953-8aed-78496a42c22c.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     30036
IP address blocks:        2604:2d80:7e00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:20:c3:5b:84:29:3d:ae:db:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=ede0327e-ba27-4c08-90d8-f3baaab462c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f5:ff:09:01:f8:ef:c3:1e:29:47:45:22:ce:
                    a8:5c:1c:79:a1:fa:57:5d:7e:71:6c:29:d5:68:ac:
                    17:be:bf:b9:b6:13:be:17:24:7b:ec:97:cb:b7:01:
                    08:82:24:ec:94:e0:75:22:1a:96:59:17:fa:3d:2f:
                    7f:ad:d9:3b:bb:2e:13:f5:de:75:77:45:80:cf:f2:
                    3e:5a:0e:d6:fc:fb:52:27:7f:9a:38:50:18:20:68:
                    a1:4e:9a:f5:01:ba:5f:01:10:5f:df:0b:17:a2:78:
                    0a:8b:03:2e:03:0e:0b:85:68:11:2b:b6:ed:f5:21:
                    8b:ed:9d:bb:56:ef:29:81:bd:94:17:3b:21:d1:a2:
                    df:fd:ce:7b:d3:41:01:36:e4:2f:1e:53:d0:d6:24:
                    cd:4a:5a:14:aa:be:a9:82:6d:1a:b2:f5:c9:35:6c:
                    20:b1:0a:b7:ef:4f:69:7d:2f:4d:11:9d:01:2f:64:
                    71:83:af:bb:3f:53:02:97:eb:c1:e3:e9:42:32:d8:
                    11:80:ba:3e:ad:94:ec:8b:ae:5d:12:e3:a8:79:16:
                    ae:e5:bb:84:7b:08:f9:43:36:f8:21:d6:3e:4d:53:
                    64:80:ce:0f:51:43:e5:d0:f9:42:f6:95:61:16:4e:
                    06:36:f0:a4:95:6a:99:3c:b7:a6:96:d1:89:ab:b5:
                    a4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:55:F3:6E:D9:9A:57:08:2B:F3:A0:79:80:65:4B:9B:16:B8:AE:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c69d5116-1f11-3953-8aed-78496a42c22c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7e00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:48:5b:30:fb:ff:c5:87:c6:5d:a2:e4:8e:bc:40:d0:f6:76:
         20:3e:fe:b6:38:62:bc:35:cc:1a:93:32:2a:a9:bf:81:bd:fe:
         3d:83:9a:fd:cd:53:f2:1c:e9:35:48:11:29:99:4b:30:0b:41:
         ce:b6:db:db:aa:82:a3:ae:ad:3b:e5:c8:03:78:e2:89:a5:0d:
         7e:e9:79:0b:7e:a4:e2:8d:64:fa:d2:42:12:82:6a:76:98:cb:
         1d:d6:6f:4b:fe:25:34:bc:c2:ec:bd:4b:0f:45:42:fd:01:b6:
         85:3a:87:cf:16:29:08:a0:77:8d:ca:92:24:91:29:dc:93:5b:
         b8:1e:9d:45:d0:5b:68:92:ab:71:82:db:65:98:c9:ee:26:73:
         83:45:69:1b:90:95:6a:18:74:4b:26:33:c4:95:60:a5:ff:91:
         bf:76:3a:fb:45:f8:3b:d5:44:c6:8e:61:c8:b9:41:18:7d:41:
         0c:4a:53:35:33:05:c6:20:9a:e5:be:8b:55:ca:31:46:49:fb:
         dd:12:2b:c6:20:15:f6:61:df:1d:aa:26:28:de:0f:c8:4e:c3:
         2d:5f:2c:94:bb:95:c8:ed:a5:ba:2a:b1:c5:65:d1:85:fb:5b:
         23:72:41:74:9a:8f:3e:62:a7:0a:d7:82:83:e7:1c:8f:eb:17:
         e9:0a:fc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:38:45 2026 by rpki-client