Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/39ab1173-a76a-3629-8266-cf1ad629b4ed.roa
File:                     39ab1173-a76a-3629-8266-cf1ad629b4ed.roa (raw, json)
Hash identifier:          cc3yVIGWwxh86fBZphAIHsV5YKrMl2dED1Pxybh7vr0=
Subject key identifier:   22:F6:B3:FA:83:15:3D:1D:89:BF:D5:6E:B7:87:94:3D:9A:E7:54:7F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D1707ED0C6E677813C0A94700
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/39ab1173-a76a-3629-8266-cf1ad629b4ed.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     30036
IP address blocks:        2604:2d81:480::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:ed:0c:6e:67:78:13:c0:a9:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=7ea085d0-5419-43ce-82ed-a4b67c1df24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:de:8c:d2:c7:2c:30:79:b3:ca:b4:a8:39:46:
                    4a:e2:06:7d:3c:90:ff:67:3d:87:57:09:fd:33:34:
                    3a:c3:8c:0e:ee:db:3c:3c:7f:d2:c1:7e:36:ad:ea:
                    69:5c:1f:49:22:5d:38:b0:7d:c5:0a:fb:bb:04:48:
                    5b:27:c3:ca:a3:fa:73:12:93:d1:5a:fd:02:db:0d:
                    ef:76:3d:12:89:f9:1a:fa:d1:c6:09:5f:ab:60:26:
                    22:93:9f:b3:4f:f3:62:ab:f2:d7:36:ee:7d:e5:b0:
                    7f:f8:30:6c:0a:31:d8:5a:f8:8f:88:51:f2:99:8a:
                    15:58:25:eb:76:48:92:81:35:6d:5c:f3:9c:7a:73:
                    6a:bd:24:4b:c7:1c:8f:ef:a0:f7:21:ad:ce:5c:a3:
                    3f:9a:cd:c9:13:11:37:77:60:86:2a:88:cb:9e:5b:
                    03:d4:43:ef:f7:52:af:23:52:26:ca:3e:08:eb:a3:
                    07:09:fb:8e:9d:3b:dd:00:07:17:05:5a:c7:9d:f3:
                    50:30:1d:a2:91:10:7b:82:f4:50:49:33:fd:1e:ce:
                    0e:a8:a5:80:ac:7f:22:fd:29:e8:bc:3b:b0:de:a0:
                    8a:42:0b:7d:da:ea:8a:3d:9c:28:fb:51:c2:13:66:
                    ef:20:4c:ba:c4:7a:d4:2b:b7:c1:e5:ff:0a:84:e2:
                    21:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F6:B3:FA:83:15:3D:1D:89:BF:D5:6E:B7:87:94:3D:9A:E7:54:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/39ab1173-a76a-3629-8266-cf1ad629b4ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:480::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:a0:50:50:1a:52:39:99:31:8d:77:a0:69:2b:8d:bd:7e:3c:
         43:78:d9:aa:6d:8c:3f:51:b3:f1:b8:ad:ef:2b:51:62:9f:f3:
         7b:34:ae:d9:98:a9:de:06:85:6b:09:a4:fe:dc:86:ff:83:b1:
         fd:c2:16:90:47:1c:e6:12:af:ca:e9:96:25:a0:69:ea:7e:62:
         b6:8f:49:f9:1f:6c:d6:b9:13:a2:d8:15:0d:02:6e:ff:a3:c3:
         1f:5b:d9:2e:24:57:6d:24:e8:e9:62:3d:0b:ca:63:bb:a4:8b:
         01:ab:c6:35:32:2d:b9:cd:da:d2:82:d5:d7:e2:bf:3f:53:9c:
         55:a7:ea:62:dc:fe:99:aa:c6:6c:a1:7a:39:ac:45:20:f4:90:
         1e:ce:a2:7f:50:2f:23:04:dc:a1:19:70:96:47:cd:91:4b:17:
         42:21:2c:ac:a6:93:43:45:d6:79:3b:23:ff:c2:1d:3e:67:8a:
         49:0b:73:14:7f:81:58:1b:54:49:55:c8:43:bf:0a:3c:d9:9d:
         03:6c:a1:dc:f7:b5:8b:a2:e9:42:2c:77:44:d3:c0:81:31:6a:
         44:79:59:6a:8e:63:2a:28:ff:5a:60:f7:2e:81:64:76:89:db:
         0a:d8:ca:45:b1:37:57:cc:29:38:0d:4a:09:44:f5:e9:77:71:
         0a:26:e9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 05:05:43 2026 by rpki-client