Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6011cbef-1083-31da-8c5f-3d2502370bce.roa
File:                     6011cbef-1083-31da-8c5f-3d2502370bce.roa (raw, json)
Hash identifier:          10cWXaamcCQ82RE6b6LqOQ/+PtpZ7xP3Xr/z65dIwK4=
Subject key identifier:   6C:D0:F6:E7:EF:16:4B:08:BE:63:AF:EF:6D:7C:23:A8:9D:18:A9:54
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D8AC533F6DECE39AF4A047E80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6011cbef-1083-31da-8c5f-3d2502370bce.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     19905
IP address blocks:        2604:2d81:2c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:33:f6:de:ce:39:af:4a:04:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=40138ff8-90ab-44cf-9d1a-efa28c12cee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:18:9d:05:2d:76:55:3d:ce:42:69:e4:fa:4a:
                    63:3d:f9:9d:69:3f:57:3a:31:f6:0f:ab:0a:43:1e:
                    06:92:5f:17:98:ee:bb:63:55:64:fa:10:f4:06:22:
                    54:28:36:73:34:83:76:79:f1:78:ca:73:80:ab:f7:
                    60:02:c4:85:6f:84:b0:4c:09:e5:ef:c4:7c:ae:c3:
                    fb:0b:2d:63:7c:09:fc:a5:11:f3:5c:1f:df:dc:40:
                    02:bb:50:37:11:f7:d0:8a:13:0f:89:8b:32:a2:91:
                    35:b5:9a:21:38:bb:39:eb:7f:53:f0:93:ae:c7:b4:
                    2c:75:f0:c0:47:d4:37:b1:4f:1b:c3:69:08:e0:b9:
                    bf:93:d3:81:7f:19:c0:35:d5:63:5e:70:c1:72:fb:
                    86:70:ae:e8:a1:c5:82:eb:6a:c8:86:0e:55:58:2b:
                    47:b8:0b:f8:75:9e:b4:e0:62:4b:01:f9:2c:4a:c7:
                    5d:27:14:1d:0c:fc:91:f2:f0:9f:1c:ee:ff:6a:df:
                    75:0e:98:1b:5b:35:b2:47:d3:c6:05:29:4d:39:47:
                    21:6e:26:9e:54:4a:96:84:b8:f0:97:5f:e5:57:c5:
                    7f:2d:67:89:4c:17:e2:49:77:8b:ad:ed:44:8e:f0:
                    42:48:b9:8f:4d:bd:6b:45:34:de:41:eb:ef:30:e1:
                    d9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D0:F6:E7:EF:16:4B:08:BE:63:AF:EF:6D:7C:23:A8:9D:18:A9:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6011cbef-1083-31da-8c5f-3d2502370bce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:2c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:bf:f6:df:62:a8:f3:bf:16:a6:65:ee:86:f2:b0:4c:44:e8:
         c6:5d:47:61:c8:a1:f4:40:7b:99:e1:4a:9b:d9:93:52:be:40:
         fc:4d:4b:dc:f6:a5:5a:e0:53:25:c8:34:6a:b3:2a:dd:50:01:
         5e:93:51:59:69:3d:3b:83:d6:9b:54:6a:d4:85:ca:b3:33:48:
         8f:a1:62:fd:b6:fb:d7:3c:4f:60:ce:38:09:ea:fd:41:57:c0:
         eb:bb:57:35:20:c0:49:fb:9f:a6:f9:f5:54:61:fa:cf:5a:6e:
         ec:90:62:75:c7:69:56:d8:b9:c3:07:29:c6:ec:b8:3b:94:54:
         10:70:e7:b9:87:5a:b8:0f:da:7c:fe:3a:22:11:19:09:45:79:
         74:0b:e2:f4:aa:66:9e:73:48:88:11:43:81:76:4d:60:61:1a:
         dd:d8:8a:bb:2e:fe:47:7a:66:ee:76:1f:bb:e6:d2:a9:9d:5c:
         22:73:18:1b:98:fa:57:b1:64:eb:d0:51:53:34:67:1d:73:a5:
         6c:4a:d6:04:e2:d5:73:30:1b:1b:db:15:f5:42:9d:07:44:29:
         dd:0b:34:66:cc:36:ed:2c:b6:65:a3:4d:6f:ea:fe:fb:46:6b:
         89:59:ac:40:f0:77:f7:d4:be:bc:bd:a4:75:97:42:72:ac:28:
         d0:56:0b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 20:29:12 2026 by rpki-client