Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28b24b22-bb78-33fd-9149-0b9f56384bf3.roa
File:                     28b24b22-bb78-33fd-9149-0b9f56384bf3.roa (raw, json)
Hash identifier:          gNZKuAeEpqhS6SDpjC5SfD4WL//sPYyrSCRuOtsJ3y8=
Subject key identifier:   89:3A:8A:2F:D1:48:00:4D:78:47:85:0F:B1:09:5C:C5:06:55:82:3C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79777823B7CE1E61761EC00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28b24b22-bb78-33fd-9149-0b9f56384bf3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:5300::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:77:82:3b:7c:e1:e6:17:61:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=80a7873e-a62e-46ad-a8c7-9c69d787909c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a5:ea:80:b4:8c:94:ac:12:0b:fd:13:09:c7:
                    13:61:ac:d7:d5:fa:49:30:ea:46:26:76:df:20:75:
                    22:b5:2c:cd:d8:66:1b:69:be:de:3f:d0:1a:09:3c:
                    0a:78:ee:ee:23:82:8a:f2:6c:8f:fc:1c:64:75:98:
                    0a:1e:31:77:1a:72:2b:1d:90:a3:0c:fe:16:89:a2:
                    69:79:22:b6:c9:7e:28:f2:40:b9:66:fd:1d:83:f1:
                    1b:e4:c5:cd:16:a0:31:28:85:1d:3d:b3:be:59:20:
                    94:df:f4:f2:5c:91:e4:2a:4e:3e:f8:d2:37:f1:15:
                    07:7d:35:4d:e9:c5:62:b0:71:92:f1:f7:d3:02:89:
                    57:72:1d:9c:49:f2:79:c1:7f:5d:0b:77:c3:5a:8d:
                    55:e0:0a:56:90:4c:80:ec:52:84:fd:bb:bc:d2:78:
                    ee:41:fe:f0:a6:e7:16:09:cb:41:13:d3:78:a8:21:
                    69:b6:00:5e:cb:3b:86:ce:3b:90:cd:a9:a1:a5:79:
                    21:ad:87:61:9c:04:f9:15:60:0d:02:dd:e3:80:5c:
                    6d:54:79:33:8b:27:1f:a5:65:6f:07:90:2c:b6:71:
                    5c:d2:02:f6:a8:b0:df:d9:6d:73:62:bb:f6:ed:d5:
                    7a:eb:2c:fc:74:32:4b:ba:6b:6d:f3:cf:9c:b2:50:
                    97:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:3A:8A:2F:D1:48:00:4D:78:47:85:0F:B1:09:5C:C5:06:55:82:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28b24b22-bb78-33fd-9149-0b9f56384bf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:5300::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:fb:50:8f:cb:c0:67:52:11:35:cf:fe:61:c0:1e:da:4c:ce:
         59:4a:e5:f1:14:75:a5:c6:0e:d9:07:6a:6a:dc:9c:ab:80:c1:
         dd:a0:95:4f:d1:07:f1:26:7c:1e:d0:fe:34:14:72:d3:2f:88:
         6f:7c:b4:44:98:58:a5:b3:10:04:55:07:82:02:20:da:86:da:
         a4:5a:a3:62:7d:23:12:3a:15:f2:81:20:a4:6a:49:fb:17:87:
         0f:a7:70:14:8b:aa:87:ef:85:a9:14:1b:a1:66:f2:f9:0b:38:
         f2:af:22:8a:36:86:e2:e5:51:17:cf:50:a8:ab:66:06:2a:09:
         30:73:e5:da:2c:ae:19:71:a1:ac:2f:4b:3d:3a:d6:cd:df:72:
         bd:ad:82:90:6d:94:84:72:04:ab:d9:64:0b:9a:df:4a:12:ec:
         9e:19:7a:90:fb:d3:24:a3:d4:7f:3c:d0:1c:5f:f2:08:88:a5:
         36:6d:7a:f1:b0:d7:d0:b3:cd:a7:b2:cc:09:33:38:32:bd:f0:
         23:9d:ac:a6:ba:3e:d3:e9:97:00:66:d4:fb:45:f5:11:86:1f:
         1a:a9:65:6c:21:cc:90:57:ed:d1:5d:b4:ff:8d:0a:9f:48:26:
         f0:29:0f:0b:76:e5:8b:be:6a:63:98:8f:78:40:bb:5d:b4:cd:
         1a:82:29:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:45:16 2026 by rpki-client