Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2288a65b-8997-3334-ad1f-8f6eb9cce018.roa
File:                     2288a65b-8997-3334-ad1f-8f6eb9cce018.roa (raw, json)
Hash identifier:          MMW7vc5pvUzhC1l9Fl+6yqhFga/uP0op1nW8rasxab0=
Subject key identifier:   8A:73:A8:70:98:5B:7E:EF:FF:32:0F:0E:F0:9C:D3:CB:C4:0F:88:07
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79C1D7680367D55290CA780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2288a65b-8997-3334-ad1f-8f6eb9cce018.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:3800::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:1d:76:80:36:7d:55:29:0c:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=31ac3187-ae68-451b-ab89-6265bd7072ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c5:0e:59:63:9e:df:0b:5f:d2:ae:39:f0:2d:
                    8b:bb:3f:07:86:15:9b:d3:15:c6:8f:02:22:bb:71:
                    d1:94:4c:e6:72:ba:35:18:38:eb:08:6b:37:14:c2:
                    0d:c9:a2:21:f1:6a:42:fc:f1:72:b5:e9:77:c0:b2:
                    92:91:a7:b6:87:fc:51:85:03:82:ce:11:9a:d3:31:
                    f3:76:27:98:fb:a8:00:06:28:38:e8:65:1f:ed:38:
                    34:11:f1:2b:ab:2c:8b:8e:df:76:67:9c:04:6f:b1:
                    ab:50:ff:76:ed:b6:c8:8a:7c:54:29:a8:67:41:34:
                    e6:90:c7:bd:b9:35:2b:0d:5a:60:4b:a7:34:c2:c7:
                    10:16:35:f4:a0:6d:0e:3d:10:74:a0:81:d9:4b:c5:
                    36:54:34:ab:70:05:cc:16:72:c7:43:14:6a:e3:f6:
                    3b:49:06:ce:27:4f:3c:02:e3:0d:59:b2:8e:d6:84:
                    20:89:1b:1c:45:64:c5:52:dc:f0:18:75:4f:0d:c1:
                    e3:58:48:d1:25:0e:28:2e:ee:ee:b8:7c:25:ff:0d:
                    fd:9d:d7:94:21:cc:85:0d:76:f2:ed:2c:ea:dc:a8:
                    5a:c3:d2:c2:d9:2e:f3:58:e3:6d:72:55:13:db:e7:
                    93:95:7e:c0:01:6f:6f:a3:40:60:87:04:84:ca:66:
                    a5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:73:A8:70:98:5B:7E:EF:FF:32:0F:0E:F0:9C:D3:CB:C4:0F:88:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2288a65b-8997-3334-ad1f-8f6eb9cce018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:3800::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:03:d5:a8:76:bc:7e:c2:e7:ea:6c:db:64:e4:eb:b8:f7:de:
         a7:c4:16:4c:06:40:65:9a:cc:b2:da:12:b0:33:42:ca:22:0a:
         91:a5:8f:b0:d9:96:83:dc:34:34:79:84:65:70:fb:a5:49:b9:
         31:40:37:17:fb:c5:da:51:b5:07:16:f1:09:8b:01:18:66:a5:
         86:2b:c3:3b:7f:3e:33:d9:cf:53:00:ed:6d:05:74:1b:db:99:
         26:4c:d3:e2:bd:a4:7e:04:e0:de:d7:cf:c6:af:2d:da:5f:fd:
         a8:d2:79:de:c1:10:41:a8:48:61:9e:57:17:d2:8d:62:0f:be:
         20:5e:43:0f:f7:f5:0f:7a:17:8c:62:a3:1c:9a:7b:18:5c:88:
         59:93:12:64:b1:f1:bb:93:15:88:12:de:b2:e5:1d:8b:b2:8d:
         52:52:a1:0a:8f:e7:9f:c5:5e:65:24:78:16:fe:ad:23:04:29:
         f2:2d:f3:4e:21:05:55:58:8a:93:b0:de:76:96:8b:80:b6:db:
         9d:f7:c0:5f:65:12:79:c0:7e:4a:dc:05:db:27:20:22:1f:93:
         3e:db:c1:67:67:04:e6:ce:78:db:7b:65:e0:ea:93:23:90:82:
         39:e3:36:38:e7:13:c5:7d:cb:21:89:68:9b:dd:c0:e8:ff:30:
         b1:0b:73:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:01:59 2026 by rpki-client