Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b143eb5-fa44-31f3-a40d-5ad11b556995.roa
File:                     1b143eb5-fa44-31f3-a40d-5ad11b556995.roa (raw, json)
Hash identifier:          rwBb+P/LqaZbT3pCgDCiEGr3jjI0qWd/6iXFOhYwMuQ=
Subject key identifier:   C2:FA:3B:BB:D6:89:4C:33:89:06:A3:8B:77:98:2F:46:40:81:9A:2E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F5E62F77E56D28BA001D5F480
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b143eb5-fa44-31f3-a40d-5ad11b556995.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     19905
IP address blocks:        2604:2d80:200::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:f7:7e:56:d2:8b:a0:01:d5:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=f15b8ff8-cc69-47f6-8c92-ec966db7313f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:22:e0:fb:14:85:02:81:92:23:c5:7d:30:8c:
                    13:c7:3c:98:1f:27:69:94:6b:85:32:8d:83:1c:9b:
                    35:08:ec:30:b3:fd:b7:67:01:a7:4c:85:94:02:0f:
                    06:8b:6f:40:73:0d:7a:f1:9c:9b:7e:6e:3e:a3:dc:
                    c9:13:e8:25:d7:73:2c:5a:fd:85:44:96:48:96:ad:
                    36:9a:95:bb:69:90:f5:74:2e:ef:44:ca:ac:d0:9a:
                    2e:0f:d8:1d:77:f1:aa:f6:20:e9:39:fc:b4:1b:da:
                    d0:77:02:ab:d2:e9:34:34:82:fc:7e:77:ad:62:fd:
                    af:bd:7f:db:05:1f:87:ba:77:90:e4:6f:29:b3:74:
                    28:76:25:d6:01:ab:71:83:db:28:2f:0a:e1:ee:33:
                    8d:47:02:22:59:36:f3:7a:f0:aa:1f:5d:3d:f8:ef:
                    b7:d2:76:28:19:ee:b9:5e:10:d7:8b:31:49:26:49:
                    0a:46:c1:df:01:8a:b5:78:c5:2a:98:b2:f3:52:ea:
                    d0:7e:45:3a:96:38:3a:08:92:c1:a8:39:8e:42:8b:
                    39:81:68:a0:d3:2d:68:aa:6f:1f:f2:9f:8e:b3:a1:
                    ce:36:2a:ea:ce:f0:38:0b:ac:b1:20:73:57:41:75:
                    5d:7c:3a:d6:94:0c:eb:dc:5d:15:a9:5d:2c:0e:2c:
                    eb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FA:3B:BB:D6:89:4C:33:89:06:A3:8B:77:98:2F:46:40:81:9A:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b143eb5-fa44-31f3-a40d-5ad11b556995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:200::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:28:ab:5f:7b:39:18:8e:a6:34:1f:19:c9:95:3e:c8:98:90:
         e5:e2:1c:74:5d:69:59:09:8a:23:99:7c:6f:ac:19:71:5d:58:
         d3:88:e5:47:ef:40:18:b9:dd:d9:80:7c:1d:16:3f:af:47:b6:
         07:24:06:ee:39:93:09:92:e9:13:94:94:4f:dd:84:43:af:25:
         dc:b4:80:97:92:90:6a:f0:d0:dc:99:20:11:49:2d:be:b6:33:
         ab:2b:27:75:6f:4f:59:fe:d9:52:bd:14:56:0f:65:75:0d:9f:
         40:45:a9:aa:24:eb:d1:0e:42:f5:b3:57:2a:3e:eb:bf:24:de:
         ab:14:83:e9:d7:a8:fc:aa:71:5b:70:e7:60:4e:29:88:be:25:
         de:5b:31:1b:a7:7e:b7:e3:80:3e:42:9b:79:35:09:e6:fe:6b:
         1d:b6:78:fc:48:84:a7:1e:1e:6b:a8:7c:5f:53:7f:da:dd:09:
         10:06:6b:f3:1c:54:94:3f:a8:f4:20:76:46:1d:53:bc:78:b5:
         c5:9f:5f:79:6d:fc:b9:6f:34:9d:cd:9e:1a:3b:60:f3:cb:00:
         52:bd:fc:cb:be:da:6a:5e:81:04:ff:7f:a3:fe:7e:87:1b:68:
         5b:b0:71:6f:d9:ba:29:79:0f:a4:88:7e:9b:4d:6c:46:c3:12:
         aa:bb:3b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:47:24 2026 by rpki-client