Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/56e2baf7-b59e-3e49-b17d-5e136ac43a7f.roa
File:                     56e2baf7-b59e-3e49-b17d-5e136ac43a7f.roa (raw, json)
Hash identifier:          yUGfmXSBKeMJ6rtPTWuG4Uqho+AG0yzYfA81wg3oDno=
Subject key identifier:   B1:09:E9:9C:B8:F1:77:06:8D:6E:41:64:20:15:69:88:32:DC:E5:D5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D237A3D63242D700323DAA180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/56e2baf7-b59e-3e49-b17d-5e136ac43a7f.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d80:e580::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:3d:63:24:2d:70:03:23:da:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=f7221d82-75d8-4fd5-8460-5062528c6e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3a:a2:da:88:2c:8f:81:1f:ce:c5:39:1b:80:
                    04:49:be:92:a0:1a:8d:0e:cc:f1:38:73:d9:b9:20:
                    47:28:98:36:64:28:b5:1a:93:29:ea:13:ce:73:d0:
                    a2:2d:39:a9:0e:69:7c:f0:50:4a:ab:2d:e6:c0:f8:
                    07:aa:a5:ac:98:30:19:81:24:2e:d5:4e:d7:f3:13:
                    90:f3:76:21:b7:b3:37:c2:85:58:2d:10:4d:67:4b:
                    f5:a4:f2:d5:ff:66:41:76:26:01:a6:e0:ec:5c:57:
                    23:b0:04:ef:d2:a8:1b:92:80:66:de:b8:15:13:a4:
                    0a:61:e8:b4:88:3d:e0:ea:9e:db:dd:e8:92:d0:3f:
                    63:8b:41:45:be:c6:24:6c:9c:bd:f9:53:12:5e:2f:
                    97:da:8d:e9:f4:43:eb:5e:aa:91:33:1e:9e:42:fb:
                    19:e2:24:57:d0:4d:2a:94:56:09:d8:c5:68:fa:53:
                    96:6f:c1:1a:64:ac:0c:af:a4:85:0c:25:d1:51:2b:
                    ca:fc:bc:88:8b:a3:2b:39:dd:f7:36:9a:9f:15:4d:
                    db:4f:d6:83:d2:46:cf:3f:bb:20:d5:69:5b:50:68:
                    3c:50:04:ff:11:5f:8c:88:e8:b0:e1:d7:a7:e3:d6:
                    e6:7e:84:dc:12:dd:5d:8d:8e:4f:cb:81:9d:14:60:
                    41:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:09:E9:9C:B8:F1:77:06:8D:6E:41:64:20:15:69:88:32:DC:E5:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/56e2baf7-b59e-3e49-b17d-5e136ac43a7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:e580::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:71:14:6e:65:e1:99:ed:3d:f2:d9:5b:de:8b:95:83:f6:45:
         5e:9a:86:3f:39:ea:d6:d0:1c:ae:06:37:8e:b9:49:2c:03:fe:
         58:6e:07:99:8c:a0:3e:ab:c8:89:f7:88:cc:c5:17:5e:5b:34:
         93:3e:81:57:f8:3b:fe:78:07:96:07:31:d1:42:ee:7b:30:e8:
         fc:33:06:67:8b:f9:77:8e:2e:83:da:8e:a3:ab:f8:63:61:d8:
         21:97:05:f8:ba:63:aa:61:07:46:75:7d:14:5d:17:d2:03:e9:
         cd:26:41:e1:cb:d5:47:ab:ed:9d:7b:ff:c9:ac:31:b2:f8:3b:
         81:6a:c2:27:b8:09:ee:50:10:80:a6:3c:e8:06:df:ff:cd:98:
         c3:c8:6e:81:af:81:1f:a6:a2:b2:a7:0d:8e:76:cb:0c:9c:1a:
         f4:44:11:fc:76:57:8f:3f:35:10:a2:96:75:8d:e7:9b:84:e1:
         7a:00:ae:59:e4:30:3c:98:bb:26:0b:62:51:cd:20:bc:40:c8:
         05:07:38:39:a5:93:70:dc:a8:4e:ba:30:24:3b:74:11:0f:60:
         db:59:75:a7:17:81:36:68:fc:7d:23:5f:97:79:ee:d3:b8:28:
         2f:b2:4c:f9:8b:40:b2:16:7f:04:c5:4a:46:35:3c:b9:20:17:
         33:40:1c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:41:07 2026 by rpki-client