Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/41b8f291-b2f4-30e2-b9d6-817cda5bbd8f.roa
File:                     41b8f291-b2f4-30e2-b9d6-817cda5bbd8f.roa (raw, json)
Hash identifier:          8q4F6cDeFPfak8u9gbGnsGKRDJ7e2hC1kSM/DaZgOvk=
Subject key identifier:   98:EE:13:78:88:CD:C5:45:65:56:96:63:DB:C2:55:9F:FF:AB:BE:3F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EE482D74AB009ADF7A9B99EC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/41b8f291-b2f4-30e2-b9d6-817cda5bbd8f.roa
Signing time:             Wed 19 Aug 2026 21:16:27 +0000
ROA not before:           Wed 19 Aug 2026 21:16:27 +0000
ROA not after:            Tue 17 Nov 2026 22:16:27 +0000
asID:                     30036
IP address blocks:        2604:2d80:c880::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:82:d7:4a:b0:09:ad:f7:a9:b9:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 19 21:16:27 2026 GMT
            Not After : Nov 17 22:16:27 2026 GMT
        Subject: CN=661b24f7-cbcc-4495-9743-b2cc2737551f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:eb:a6:3c:82:85:41:35:e9:f2:21:63:ac:0a:
                    eb:c4:6f:7d:3c:b3:31:14:52:3b:de:f4:5d:61:54:
                    76:1c:dd:27:e2:a7:07:c2:bd:b3:ec:f4:26:2f:e5:
                    90:9d:0a:eb:8a:30:20:e7:4c:f2:d5:f5:7e:c1:fc:
                    fa:5b:c7:e9:e7:35:1f:28:fd:d0:e7:75:fb:6f:ab:
                    0b:cc:82:c9:13:42:bd:31:6c:8c:a3:eb:bd:32:bc:
                    92:5f:54:a0:3c:fb:c7:20:3a:42:ab:41:2d:9b:3b:
                    fa:2b:07:ee:34:09:25:10:3b:0d:4a:16:ec:42:36:
                    f1:1f:1b:48:14:67:d2:32:22:03:b2:6d:b4:26:79:
                    71:c5:60:da:23:97:74:ef:22:bc:bc:11:5e:65:c8:
                    3e:0c:bf:f9:e1:b8:e5:d0:27:ca:b0:b1:20:f6:27:
                    59:8b:89:a4:86:6a:fc:0d:f0:66:48:2a:4a:07:31:
                    94:d7:b4:ce:84:5f:ea:06:ab:7d:af:7f:cd:a1:03:
                    ae:5f:4e:64:b6:1a:c9:ef:ff:ba:65:96:c2:87:9b:
                    33:5a:c0:a0:72:49:2c:44:30:6f:7d:e6:c1:cb:36:
                    af:82:0f:c3:49:df:5b:b9:86:77:1d:62:1e:41:14:
                    a4:13:03:df:dd:28:18:b7:fd:31:1b:ea:bb:d9:14:
                    a9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:EE:13:78:88:CD:C5:45:65:56:96:63:DB:C2:55:9F:FF:AB:BE:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/41b8f291-b2f4-30e2-b9d6-817cda5bbd8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:c880::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:94:e3:63:9f:60:c2:8f:42:fd:e9:08:c7:6f:bd:22:3a:53:
         46:00:8f:a8:c5:e7:cf:ee:09:6c:55:ec:fc:8d:48:8d:ee:ec:
         4e:48:4e:85:9d:48:d3:71:04:d1:e7:f0:6f:f1:99:28:fc:b4:
         99:36:d7:5f:1d:3c:20:bf:af:ab:fe:d9:9c:be:e3:b3:45:da:
         5e:1b:56:bd:4c:ed:5b:ea:b2:e4:c6:0a:37:04:b3:5c:7c:05:
         55:7f:36:3c:bc:6a:64:09:bc:08:b3:1c:58:08:98:36:e2:80:
         5b:cb:27:27:c4:15:cb:a0:aa:72:08:14:80:ed:a1:9a:28:e8:
         06:31:62:0e:38:fa:25:32:0a:0f:10:c6:e8:93:06:ce:53:57:
         b8:e7:67:f7:66:9c:d2:47:0d:d9:17:01:7f:23:ff:7c:3d:d4:
         b3:32:4b:8a:28:7e:20:03:26:0c:84:df:ef:7b:46:24:a2:13:
         44:64:c6:89:34:40:e1:22:64:84:09:2c:3b:75:3d:bb:51:b5:
         63:93:40:fa:42:9d:71:8a:86:30:e0:71:2d:20:46:4a:63:96:
         6e:75:2c:9f:7b:2f:f2:af:5b:52:ee:ed:6d:3e:9b:97:51:c5:
         58:f0:eb:a2:c3:b5:c1:af:58:b1:51:92:72:76:df:9b:cc:72:
         e5:c5:d4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:00:02 2026 by rpki-client