Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23e65f7f-9582-3182-acd5-2c4e73dd7547.roa
File:                     23e65f7f-9582-3182-acd5-2c4e73dd7547.roa (raw, json)
Hash identifier:          5Ewnivyx+hHY5ybBt+kPWSc6FVyne6+vF0q6hde4dxs=
Subject key identifier:   0D:C1:81:DF:16:BF:D7:07:A9:9E:96:79:B5:86:E4:CF:CF:88:87:E4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D0A77A07F3D068D549B302CA0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23e65f7f-9582-3182-acd5-2c4e73dd7547.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d81:3100::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:a0:7f:3d:06:8d:54:9b:30:2c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=8ba6a3d2-92ba-44cf-8e6d-bf49ec20a4b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1c:fa:22:99:77:f7:cc:35:31:bd:e4:73:5d:
                    bc:08:e7:01:32:d7:74:ae:2e:2e:e6:4c:2d:10:fc:
                    5b:68:9e:30:8c:b2:1f:52:76:ca:ac:88:bc:ab:c7:
                    9b:6c:33:ab:2e:4a:d6:74:d7:bd:32:f9:30:95:97:
                    e5:80:b5:01:1e:a1:6b:3a:d7:66:d0:9f:74:2b:43:
                    ee:69:84:4f:83:31:6f:08:db:53:cf:25:f9:06:8f:
                    9c:cd:c3:65:04:57:7a:d9:fa:ad:2a:18:49:4c:f3:
                    39:68:d0:ed:50:ce:63:44:05:17:e7:af:e5:8e:70:
                    15:65:cc:61:e7:3a:44:7b:47:a3:52:6e:7a:9c:62:
                    90:d9:09:c4:b8:03:d8:bf:53:d4:0b:13:e5:d9:64:
                    f6:0e:17:fb:bf:91:b9:3b:77:2b:83:d8:08:9f:74:
                    7f:2c:e4:0c:fd:29:11:0e:d8:68:ec:27:bf:83:15:
                    48:e6:7c:73:d3:44:6f:dd:6d:99:46:31:8b:d2:17:
                    21:5d:05:91:ff:0c:84:ff:c2:e8:73:58:38:bb:ab:
                    57:a7:0b:af:f3:bc:53:4f:ae:db:53:54:53:3b:aa:
                    b7:8a:22:a7:63:73:c4:1c:26:3f:71:08:ec:04:30:
                    3b:f3:d8:65:46:fd:a3:8c:8e:de:b7:3f:3a:fd:d8:
                    76:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C1:81:DF:16:BF:D7:07:A9:9E:96:79:B5:86:E4:CF:CF:88:87:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23e65f7f-9582-3182-acd5-2c4e73dd7547.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:3100::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:34:c6:76:ff:03:e2:ff:12:3a:5a:27:79:81:d9:72:bd:35:
         a5:09:33:c0:1c:51:85:fe:26:66:fb:35:f7:91:65:38:63:5a:
         f2:fc:8c:5f:e0:72:79:54:41:e9:55:b5:2a:25:69:ef:7e:a9:
         34:3e:27:43:ba:28:02:bb:9b:0b:b5:72:00:04:a3:f9:8e:45:
         88:de:ee:96:77:0c:93:24:c4:10:89:6f:a7:9b:df:9d:95:42:
         85:c4:b8:3c:7d:1b:16:99:81:cc:fd:6e:01:e6:d1:23:76:a4:
         4b:72:0b:bf:1e:33:41:be:fa:70:03:1a:76:13:a4:33:10:67:
         26:5a:ad:04:3d:fb:22:cc:5e:61:91:e6:86:c8:f1:92:40:e2:
         6d:b3:bc:d3:e8:25:44:ad:eb:18:bc:7f:3d:65:15:8b:51:f9:
         54:b6:80:ec:71:bc:ea:6a:8a:90:98:4b:11:70:02:ed:85:f5:
         ae:e0:4a:c5:fc:43:46:5d:e3:29:7d:db:69:0f:c2:57:e1:22:
         38:3d:0f:28:68:66:86:ea:fb:74:18:a8:97:3e:34:a6:10:da:
         f7:e5:34:f5:93:e9:38:e3:d8:49:92:4c:af:39:c2:9f:03:14:
         f7:fc:d2:fe:fc:c2:d3:be:48:85:06:b2:24:73:79:bd:09:18:
         f4:30:a5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:41:14 2026 by rpki-client