Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/587a5b51-3a67-3149-8d6d-818570364a1c.roa
File:                     587a5b51-3a67-3149-8d6d-818570364a1c.roa (raw, json)
Hash identifier:          N/9H6HFB3PWNwmKaPvlAHezc5hozZfDL1BgY932nfiI=
Subject key identifier:   F3:C0:04:39:C8:49:E0:F3:44:19:FE:B3:CA:0C:47:D5:BA:F0:87:30
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79506BDCA9857616830A600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/587a5b51-3a67-3149-8d6d-818570364a1c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:3d00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:06:bd:ca:98:57:61:68:30:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=42cf5b15-f753-4414-920e-27b7e2d7c091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ae:00:7d:a8:7a:4d:80:b8:17:dd:6a:ff:2e:
                    d2:48:0f:69:0b:9e:a7:48:96:78:0e:ee:0e:a5:38:
                    7e:f9:08:86:2a:61:45:61:fc:bb:66:08:b6:89:c6:
                    07:7f:63:3e:ae:9a:d8:60:6b:ad:22:9c:f6:a6:e5:
                    99:d2:7c:da:9a:00:04:4e:99:dd:da:c5:86:64:d4:
                    c2:8d:db:fa:c9:26:80:74:c8:a7:6e:84:ae:cb:18:
                    df:b0:7e:8d:fa:9c:d0:12:0d:8f:b8:26:93:61:7e:
                    29:dd:5a:85:b0:1e:ab:6f:30:09:de:30:1b:6f:63:
                    ac:b1:8a:1f:e6:e4:97:b0:f6:4d:ca:f1:4b:29:2d:
                    7c:76:ea:7f:07:1b:15:88:16:5c:0c:68:55:02:a6:
                    d4:76:18:c3:48:17:7c:8f:05:8d:2e:72:ea:f3:f8:
                    ef:57:c1:09:15:5f:8c:57:0b:2e:54:fb:4e:17:f0:
                    91:48:18:b1:59:9a:04:32:d5:ea:a1:5c:b6:27:42:
                    c4:54:cb:2e:df:b3:fe:62:98:70:b9:90:ad:ea:72:
                    9b:c9:ea:71:8a:16:30:72:bc:59:c1:b9:02:e1:76:
                    c0:93:43:31:c0:15:dd:f8:7f:0c:b9:ce:b3:9c:fe:
                    52:a5:c1:bc:da:8c:38:d3:8e:ee:ba:d3:be:8f:f8:
                    4a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C0:04:39:C8:49:E0:F3:44:19:FE:B3:CA:0C:47:D5:BA:F0:87:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/587a5b51-3a67-3149-8d6d-818570364a1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:3d00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:3f:fe:8a:15:69:a3:56:38:a6:0f:4d:39:5b:5e:d3:b3:43:
         35:db:f8:de:91:60:f0:ac:aa:ae:8a:8f:d5:30:88:5b:61:1d:
         83:25:71:50:b9:fb:76:82:1b:c1:5b:0b:60:eb:5a:18:71:ad:
         23:92:c7:8b:15:db:78:1a:f6:cc:d2:21:23:64:2c:43:f6:16:
         58:42:ac:6f:a5:50:b1:ff:ba:80:0c:81:ff:a4:a5:83:96:8b:
         4c:cb:68:be:89:14:ab:cf:3d:bc:a1:1d:60:02:3f:98:4c:41:
         e6:f8:c1:12:10:b2:f1:5d:96:35:a0:d0:ee:47:3f:5e:68:30:
         0f:7b:12:d5:04:ac:8c:ad:62:ef:de:08:60:5d:35:55:5d:56:
         ae:f9:ba:22:a9:f1:e1:8d:b7:06:8f:3d:29:d5:03:1a:95:55:
         8f:84:cc:4d:5a:89:bc:fe:01:93:1b:46:f5:50:58:c0:7e:0b:
         30:4e:2c:e7:d9:b1:80:36:04:ec:4c:25:f6:d0:31:f1:d5:0d:
         39:ad:87:3d:89:2a:36:06:77:bd:c1:3a:99:ad:56:0d:8d:dd:
         a2:6e:2a:77:f7:f1:6c:86:79:0c:ab:d1:d0:dd:bd:55:a6:7b:
         bc:c7:3f:24:b5:98:2f:d1:33:68:75:78:cb:2d:50:6f:db:d1:
         ae:ee:22:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:28:43 2026 by rpki-client