Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/00c6c0d9-4445-3be7-ab36-e0e0adc9d11e.roa
File:                     00c6c0d9-4445-3be7-ab36-e0e0adc9d11e.roa (raw, json)
Hash identifier:          JSli+FZFs9NbVGSMo6+Y0t+f/V/fH6US8Ra3FEZ7/x4=
Subject key identifier:   AC:12:20:1C:4F:D1:DD:EB:35:45:07:FC:50:DD:04:A7:97:37:83:47
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F7FD6534E8F3C266CBDDDBF00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/00c6c0d9-4445-3be7-ab36-e0e0adc9d11e.roa
Signing time:             Wed 14 Oct 2026 12:34:57 +0000
ROA not before:           Wed 14 Oct 2026 12:34:57 +0000
ROA not after:            Tue 12 Jan 2027 13:34:57 +0000
asID:                     19905
IP address blocks:        2604:2d80:f100::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:d6:53:4e:8f:3c:26:6c:bd:dd:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 14 12:34:57 2026 GMT
            Not After : Jan 12 13:34:57 2027 GMT
        Subject: CN=a7a6d425-41fb-473c-b395-db5693d3b618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:94:3a:f2:d9:59:52:60:28:ff:0f:b5:c0:fc:
                    e7:83:42:dc:a6:8f:18:8d:e7:59:a3:8a:b6:e9:b0:
                    22:62:b0:2e:fa:a8:12:47:7f:c1:02:03:ad:a5:d1:
                    b5:14:ce:f6:f0:23:03:a1:74:43:2a:c7:3c:71:49:
                    8c:86:49:4a:ce:b6:9b:f0:90:8e:85:b7:12:79:bd:
                    ff:b4:fc:11:aa:5c:45:f2:14:99:a0:2b:2d:2e:45:
                    a7:6c:a2:5d:0d:a7:aa:3e:53:e8:5d:56:df:cd:f2:
                    b2:94:7d:d1:19:29:4a:ae:b5:00:4f:f3:38:ef:f1:
                    c6:dc:14:13:54:ad:d5:be:53:a5:b9:75:76:c0:45:
                    de:3e:88:c6:1c:85:d5:9e:41:3f:a9:3a:71:22:d8:
                    dd:1a:ff:42:4a:5c:38:c5:ed:3f:8a:5b:aa:07:dd:
                    54:9a:27:d9:87:58:1e:6a:16:31:f2:90:46:91:46:
                    a9:10:15:82:a9:1f:27:19:57:0e:c7:3f:32:0e:a3:
                    69:94:64:ca:aa:9f:27:ed:05:25:62:06:e0:02:5c:
                    c8:97:b6:64:70:ba:22:67:46:a5:50:2a:81:65:ad:
                    d4:01:82:40:69:4b:e4:ca:c4:47:4f:2d:ba:30:60:
                    b1:b7:5a:c1:b2:58:46:50:81:2e:67:e8:fe:6f:82:
                    e2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:12:20:1C:4F:D1:DD:EB:35:45:07:FC:50:DD:04:A7:97:37:83:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/00c6c0d9-4445-3be7-ab36-e0e0adc9d11e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:f100::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:ab:be:5f:54:5a:0a:97:71:7a:fd:35:a7:e7:29:b4:41:f4:
         33:15:e5:64:dd:01:88:d7:c7:95:2f:ed:65:b4:25:18:16:82:
         86:0d:e6:c0:41:94:dc:34:df:5f:f5:fa:68:59:bb:24:04:33:
         2a:78:e8:d3:48:5a:73:eb:8b:5f:fa:ad:d2:86:d7:db:87:05:
         9e:48:bc:43:87:a9:a3:0a:58:24:c4:b2:90:ad:67:f4:b4:97:
         fa:17:9d:53:49:9d:3f:3e:55:de:2d:5d:81:1f:9f:ff:93:b9:
         66:db:63:ef:2c:59:1f:41:7f:ff:8b:6b:b1:82:fd:81:e2:4c:
         79:d8:d5:60:f9:02:5d:d5:27:b0:a8:54:c2:5c:bc:47:19:4f:
         9b:55:92:77:76:5d:5a:50:04:25:71:78:61:17:88:ee:7b:3e:
         29:6f:eb:3a:6d:5b:ef:40:4d:f0:82:a1:81:8c:72:7a:67:29:
         01:22:ea:70:ec:52:fd:63:fb:1d:d6:f5:03:94:cd:4c:eb:bb:
         38:f4:39:5a:07:0c:31:6d:d8:2e:fc:7d:83:b9:41:45:0c:fc:
         e6:d2:f7:e0:52:d9:bf:2d:85:37:3f:1a:eb:eb:b6:91:f7:04:
         b3:06:09:c9:a2:13:09:34:9f:be:91:38:ba:19:9e:bd:66:4a:
         cc:82:91:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:48:41 2026 by rpki-client