Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5cff5eba-b27d-3274-83f0-8e14a3836930.roa
File:                     5cff5eba-b27d-3274-83f0-8e14a3836930.roa (raw, json)
Hash identifier:          lEmL1lnnWbR2vws4whm4010BE84S+gLFKkvR5SsNDM0=
Subject key identifier:   47:1B:B9:79:F5:A0:37:47:4B:CB:5F:D9:4F:2D:9F:A3:24:3D:B1:CB
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D1B1A5FBE048E995938C020C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5cff5eba-b27d-3274-83f0-8e14a3836930.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        2604:2d80:da00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:5f:be:04:8e:99:59:38:c0:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=bad2e289-6e1c-4155-b561-bc56fa3f334d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6a:af:4c:86:48:4c:b1:13:90:fe:4f:b1:ef:
                    4d:84:b5:5d:6a:ff:0b:5f:df:33:59:db:76:82:33:
                    0e:d7:6f:24:dc:3e:96:eb:59:e1:a0:6e:ca:a2:83:
                    7e:98:ef:44:4d:55:ed:9d:bf:d9:68:6e:44:2b:66:
                    5a:57:b2:60:43:5c:6d:56:a6:fe:fb:c7:0f:f8:4d:
                    dd:47:4f:9f:d7:8f:88:e4:55:21:e8:2b:8f:b8:6b:
                    08:94:95:58:16:99:9d:62:b9:f9:d6:3a:91:ef:21:
                    68:47:d6:73:19:55:71:55:11:af:98:36:96:d8:48:
                    fb:a9:ce:24:db:ea:38:6b:3d:92:60:cc:2c:54:94:
                    0a:b4:a9:47:a1:3e:8e:08:4b:70:f2:47:99:a2:1d:
                    f3:4c:23:63:71:56:78:71:18:f3:1f:0c:6a:ab:be:
                    22:f8:2b:d1:5c:66:48:74:e6:59:12:9d:56:6b:ff:
                    c4:87:34:b4:fa:5c:53:b3:eb:bc:ab:31:50:7a:8a:
                    29:ee:81:6d:81:5d:f4:1c:47:f9:e9:77:c0:22:ea:
                    c8:55:0e:92:18:3f:35:a5:6b:8d:7c:03:e8:f6:48:
                    b2:f8:fd:09:f5:e3:bd:bb:b0:76:2d:ad:10:76:be:
                    da:54:ef:86:d5:97:53:93:15:ef:2a:53:07:7c:86:
                    02:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1B:B9:79:F5:A0:37:47:4B:CB:5F:D9:4F:2D:9F:A3:24:3D:B1:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5cff5eba-b27d-3274-83f0-8e14a3836930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:da00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:89:d2:b3:ed:3b:b3:99:8d:a2:d0:7b:37:ae:74:0e:4f:ec:
         1f:bf:3d:dd:6b:ae:e1:a6:47:aa:55:89:ff:4d:42:8b:2d:b4:
         4e:8d:59:7c:f2:f0:8d:7f:57:5a:7e:e6:5c:15:0a:0d:91:c2:
         65:26:2d:3a:9b:b0:b3:28:ef:a4:4c:52:ef:35:01:9a:69:02:
         98:9d:33:74:f0:59:6f:bb:1f:72:61:e3:89:f9:71:b2:e5:d5:
         03:df:cc:08:65:a3:5c:eb:08:bc:71:1e:28:22:1f:b9:eb:5e:
         f5:77:11:66:c4:a5:57:3e:76:e6:04:f7:38:df:a1:a5:16:4f:
         d0:e9:28:71:e0:aa:f9:71:be:66:94:9f:a2:03:90:a6:44:fe:
         53:02:39:ef:9a:ba:8d:e2:c2:ac:57:f3:81:1a:6e:7a:0e:d5:
         e9:ed:d6:a4:b0:10:65:ed:e6:2b:4f:05:68:0f:af:4a:39:d0:
         4a:8a:47:b2:69:18:ce:7a:ee:da:8e:8d:52:16:99:d0:61:c5:
         e7:7a:86:c0:a7:41:a7:a9:ce:76:e8:3e:84:67:68:12:1c:79:
         40:52:c2:01:43:20:bb:f7:b4:c7:03:e6:0e:fa:8a:22:44:a3:
         70:f9:b5:06:56:55:0f:16:36:cf:9c:1a:d3:0b:bb:9e:79:9c:
         c3:a7:3b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:43:02 2026 by rpki-client