Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd077ca1-5a3c-3035-964f-33303f7533f0.roa
File:                     cd077ca1-5a3c-3035-964f-33303f7533f0.roa (raw, json)
Hash identifier:          9grARm6Vjmkl6gv1Wah4sEWswCIAHl7vErAK2VyL2pA=
Subject key identifier:   2D:59:81:B3:51:E8:9F:E5:47:F0:4B:25:A9:C8:6B:44:60:0A:A2:FA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D667A5A5395699707E44B2A00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd077ca1-5a3c-3035-964f-33303f7533f0.roa
Signing time:             Sun 05 Apr 2026 01:00:24 +0000
ROA not before:           Sun 05 Apr 2026 01:00:24 +0000
ROA not after:            Sat 04 Jul 2026 01:00:24 +0000
asID:                     19905
IP address blocks:        2604:2d80:480::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:66:7a:5a:53:95:69:97:07:e4:4b:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr  5 01:00:24 2026 GMT
            Not After : Jul  4 01:00:24 2026 GMT
        Subject: CN=7579ef09-877e-4135-9b38-4742c4e5592d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6c:83:df:ff:68:7f:31:5d:9b:f4:dc:b2:27:
                    cc:62:01:6c:ac:72:4f:a3:79:d7:8c:5d:af:4a:82:
                    42:e2:cc:2f:76:c4:50:56:df:e3:da:52:1f:0f:12:
                    0a:2d:89:3c:1c:e7:cc:26:bc:7b:fa:24:0d:44:b4:
                    cc:a3:47:f6:db:26:54:6c:c6:c3:94:aa:16:b4:23:
                    fd:96:a0:a4:1e:91:3f:09:5d:91:32:d1:30:0e:a9:
                    cb:13:10:eb:9c:d6:76:51:93:e2:e1:42:a2:d3:34:
                    5d:e2:36:67:40:84:e8:25:54:7f:db:d8:ec:16:73:
                    22:c4:15:37:1a:37:4d:07:f3:39:9e:8c:90:96:cd:
                    b3:36:80:c4:fb:e6:87:55:e8:8a:3e:20:df:2a:fe:
                    f6:b7:46:d2:f1:81:e6:f2:34:60:e8:b9:3e:05:ab:
                    35:80:e7:03:85:a7:66:4b:5f:5f:e8:65:2e:e5:97:
                    e6:68:eb:39:24:4f:85:84:a3:d2:b0:f2:83:bb:64:
                    61:8d:d6:7b:73:40:c0:14:a7:c1:c4:4a:c0:25:8b:
                    27:73:59:bc:2a:86:e7:4d:cb:a1:07:4f:f3:bd:76:
                    d8:ec:2b:06:1c:9b:47:dd:ab:3a:62:70:c6:e7:f2:
                    11:32:a1:7b:b1:1b:31:d8:f3:29:ed:7b:cd:bd:18:
                    85:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:59:81:B3:51:E8:9F:E5:47:F0:4B:25:A9:C8:6B:44:60:0A:A2:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd077ca1-5a3c-3035-964f-33303f7533f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:480::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:8b:1a:20:c1:e1:3e:47:40:2b:e7:e9:03:24:e4:d6:d8:35:
         75:d0:e5:96:d4:7c:04:f0:8e:18:f6:22:49:de:6d:54:c6:d6:
         2b:1e:f0:15:e2:52:73:d6:93:02:31:c8:ad:7a:f9:bf:0c:a2:
         96:65:8f:05:8b:93:bc:cb:3a:e6:17:9a:0a:1c:30:41:8d:94:
         20:85:e5:33:a7:c3:0d:22:9f:e0:4c:e4:e2:4b:38:7f:b6:74:
         ed:d3:0d:d9:a5:1a:be:54:f0:56:fc:c8:5e:d3:b1:d6:48:2d:
         40:a6:62:8f:75:44:a4:60:47:d4:7c:09:c6:06:b8:e0:a8:b8:
         dd:5c:76:3d:f9:b4:a1:d1:53:11:33:a1:72:f4:7d:a9:7f:81:
         93:1c:30:59:a7:00:9e:38:68:4e:11:1d:05:61:65:66:34:c5:
         cd:30:98:b4:a9:6a:1e:05:90:9c:dc:20:bf:e0:48:f5:66:5d:
         a9:65:67:bb:fe:69:7c:15:f7:57:da:8b:d0:62:f4:c8:28:d9:
         fb:88:c0:a0:1e:6d:81:bf:3a:19:4d:eb:7a:28:a7:b2:3d:cb:
         fb:5e:c1:21:db:f2:5a:c9:8a:72:d9:b4:c2:ca:c0:77:8e:82:
         04:a5:41:85:5a:eb:12:59:a1:36:ff:b7:94:17:49:2f:27:5f:
         87:fe:cf:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:54:05 2026 by rpki-client