Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3525b946-e088-30a0-80a8-0242eeac1d5e.roa
File:                     3525b946-e088-30a0-80a8-0242eeac1d5e.roa (raw, json)
Hash identifier:          2klwgh3ys0j893YcYBG2LAILD/9YVlhIBPsAbWr7HbE=
Subject key identifier:   45:26:00:F9:0B:41:48:6B:4A:B9:55:25:E0:83:AE:95:FC:62:59:66
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DB07580B31E2FF6564C757E60
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3525b946-e088-30a0-80a8-0242eeac1d5e.roa
Signing time:             Fri 01 May 2026 13:00:30 +0000
ROA not before:           Fri 01 May 2026 13:00:30 +0000
ROA not after:            Thu 30 Jul 2026 13:00:30 +0000
asID:                     30036
IP address blocks:        2604:2d81:1700::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:75:80:b3:1e:2f:f6:56:4c:75:7e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May  1 13:00:30 2026 GMT
            Not After : Jul 30 13:00:30 2026 GMT
        Subject: CN=1bbff29d-1725-472b-baaf-08840edeaea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ec:71:ce:a7:ab:a7:2e:84:58:78:e5:91:1c:
                    dc:73:1c:d4:0e:71:c4:1b:52:94:9f:04:38:6b:a3:
                    3d:f4:b6:b8:f5:6c:c5:a2:17:21:e0:ef:5b:6e:de:
                    37:f4:2b:63:22:db:15:a8:45:a5:bb:4a:eb:83:6f:
                    21:93:11:74:a1:1c:49:d9:b9:a6:13:7a:96:9c:cb:
                    06:50:6d:c4:60:21:59:65:aa:07:cb:fc:64:11:17:
                    80:4c:c4:8d:a9:4f:0f:88:21:76:d8:51:51:a1:90:
                    ae:59:23:cb:39:60:12:c7:88:19:57:7e:aa:8a:c6:
                    b7:84:5c:9a:1e:a6:bf:a4:94:99:b5:0f:3a:58:05:
                    f6:a0:0c:5d:da:56:c0:b4:2e:75:c1:8c:82:48:07:
                    54:ab:7a:3a:b6:e8:5c:0e:f3:b0:bb:84:a4:b5:1a:
                    59:69:2f:e0:ae:71:ba:5b:fd:a9:82:0a:5d:50:73:
                    79:f6:43:61:ac:15:4c:03:88:46:da:1e:78:fe:47:
                    59:8b:df:ce:a9:e6:6f:7a:88:39:e0:5f:ee:f5:50:
                    4f:18:9f:e4:97:46:36:5e:0e:4e:51:4c:0d:67:de:
                    2e:e4:82:0d:ce:c9:e8:1b:68:ea:95:e2:ae:2a:f1:
                    27:7d:1e:b6:c2:42:43:1d:3d:39:c4:45:3f:a7:ba:
                    ae:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:26:00:F9:0B:41:48:6B:4A:B9:55:25:E0:83:AE:95:FC:62:59:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3525b946-e088-30a0-80a8-0242eeac1d5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1700::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:42:22:02:cd:24:75:0c:3b:b3:b5:44:77:fe:fd:02:4c:5b:
         1d:4a:dd:1d:e9:b1:e7:a0:d8:ee:02:99:ee:07:fd:72:3b:07:
         20:c1:82:bc:6b:da:e4:ec:7d:fb:c7:f1:56:15:e3:f1:dc:9a:
         0e:15:af:b1:d4:e0:f7:07:31:ae:d0:f9:d8:8f:80:6d:54:bc:
         ca:c0:0a:5a:ac:cf:17:97:7e:a8:44:a0:9c:ed:d5:e9:24:5c:
         57:f9:22:fe:a9:da:cd:33:9e:78:85:19:cc:7c:bb:ac:78:fd:
         ad:19:ca:20:b4:57:f8:fb:40:fa:72:b5:14:41:83:88:2b:3a:
         0d:1f:cd:60:f8:11:5c:0a:67:be:bb:65:21:f0:73:71:b9:fa:
         2e:20:e8:35:30:62:47:45:04:85:45:ea:f1:2b:0d:69:2a:ce:
         e3:35:14:cf:8a:7e:5a:86:35:cd:f6:4a:a5:36:e4:8a:9a:81:
         44:91:ce:ef:4e:b4:f0:57:a9:0f:96:d7:a2:a9:e3:ea:7c:2c:
         96:87:fd:21:03:99:f4:9d:22:f1:1c:4b:c8:bf:73:f8:f5:10:
         15:ad:18:59:68:1a:42:0d:ea:35:aa:01:43:50:bc:fd:b3:54:
         32:78:27:e4:08:d1:9b:68:9b:6b:df:95:4a:ba:85:01:0c:8a:
         05:31:1c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 19:33:09 2026 by rpki-client