Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ca658d6-1896-3cac-9d4c-76ccd3ca9990.roa
File:                     0ca658d6-1896-3cac-9d4c-76ccd3ca9990.roa (raw, json)
Hash identifier:          7VWzBO/CXLGWm1i8nXHb1mG/F5eNCIy3p326lUxOZwY=
Subject key identifier:   9B:3D:EB:DD:97:04:31:A1:02:D9:06:6B:0D:7A:A3:F5:7B:51:9E:60
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D15AFA6C17CAD49C784127CC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ca658d6-1896-3cac-9d4c-76ccd3ca9990.roa
Signing time:             Sat 07 Mar 2026 02:27:28 +0000
ROA not before:           Sat 07 Mar 2026 02:27:28 +0000
ROA not after:            Fri 05 Jun 2026 01:27:28 +0000
asID:                     30036
IP address blocks:        2604:2d80:6180::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:15:af:a6:c1:7c:ad:49:c7:84:12:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  7 02:27:28 2026 GMT
            Not After : Jun  5 01:27:28 2026 GMT
        Subject: CN=fbab30f6-ddb4-4420-8ef7-81c0a0b092e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:01:c3:5f:07:22:9e:08:6f:c8:3e:98:ec:0c:
                    78:a8:a0:90:0a:db:8b:fd:8a:3d:0e:80:ed:f6:ca:
                    d8:84:66:6c:2c:24:67:6c:c6:21:9f:77:41:ca:3f:
                    3a:5a:4f:5c:13:23:e5:c1:c0:1c:4d:7c:f8:56:db:
                    e2:bc:1f:02:ae:f1:6d:8d:4a:d3:cf:d5:db:14:e4:
                    3b:d3:df:62:65:5b:99:3f:2a:21:bb:12:ed:94:8b:
                    03:2b:16:3f:9b:40:a2:d9:f3:a2:e6:92:00:40:98:
                    6f:4e:ef:ef:61:9c:48:43:18:ed:d4:62:fa:8d:bc:
                    c0:2e:0a:7d:19:18:9d:76:98:bf:74:a4:59:3c:b3:
                    e3:f6:9e:cd:68:7e:e1:8c:db:8b:bb:0c:71:d6:46:
                    a5:a0:dc:8b:cc:e1:98:89:d1:30:f5:89:8d:20:5c:
                    f7:d6:70:fb:f2:ef:41:d5:6d:9f:df:83:4a:b7:68:
                    ef:4b:c0:f6:3f:a1:13:21:62:a6:c6:a9:75:b7:60:
                    cb:a1:a9:dd:9d:c0:bc:7e:bb:19:4e:12:4e:47:b3:
                    c0:0c:7e:56:2a:1b:eb:12:33:a6:9c:dc:04:dd:6b:
                    a3:4d:b0:05:de:9d:b4:0a:a5:30:e4:f2:22:6b:55:
                    1a:1b:84:3a:e7:8f:b1:7a:0f:ed:2e:65:9c:4c:e0:
                    8e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:3D:EB:DD:97:04:31:A1:02:D9:06:6B:0D:7A:A3:F5:7B:51:9E:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ca658d6-1896-3cac-9d4c-76ccd3ca9990.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:6180::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:09:7f:40:b1:13:19:07:0d:4a:2a:8c:02:73:f6:21:8c:f4:
         20:8e:a7:32:44:98:08:ae:52:70:d2:10:b7:7c:8c:2b:d1:54:
         28:00:dc:37:e9:67:10:2b:c9:b2:03:57:b6:ab:0e:34:b4:bd:
         fe:14:0d:2e:f6:02:2d:b3:a1:1d:bc:29:7c:df:7d:58:0f:f8:
         8b:23:a3:37:ef:28:4e:39:41:1a:55:fd:8b:16:49:9d:bb:fc:
         ec:14:0f:00:f5:df:e6:9b:2d:a3:0e:eb:62:a7:a5:46:99:eb:
         79:5f:f7:9f:33:8d:5c:1a:41:df:52:c7:81:ff:a8:a9:77:7a:
         e4:c4:c0:0b:ad:7e:c3:35:a7:85:0e:83:25:de:b1:80:95:62:
         ab:1e:23:bd:2b:a5:fe:c7:5b:38:46:5e:21:9c:ce:f4:09:20:
         7e:1d:36:53:e6:f1:3c:a7:8e:36:cd:99:a6:3a:7b:32:72:26:
         6e:8e:52:b1:4e:fe:30:ba:61:0f:1c:da:94:35:d0:7f:a5:55:
         6d:c0:bd:56:ad:64:17:8f:6b:62:56:45:e6:7b:05:a5:bf:c0:
         ed:9f:27:76:47:54:fc:4d:39:6c:37:f4:44:2f:09:55:ac:4c:
         7e:b9:8c:ca:93:58:97:06:cf:5a:32:e3:75:e9:b8:2a:94:a9:
         0d:21:b4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:45:56 2026 by rpki-client