Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70665afa-45d4-3ea7-8b18-d6f02ef2e44a.roa
File:                     70665afa-45d4-3ea7-8b18-d6f02ef2e44a.roa (raw, json)
Hash identifier:          r7CHZ8sCBV6siCogj6mcJeJYraOEwpBtp6MTz4044EY=
Subject key identifier:   16:0A:2D:76:B6:6F:E6:A7:CE:64:E2:F9:7E:89:32:65:A1:0C:C5:1F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D20AF488A6D05874A1F222940
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70665afa-45d4-3ea7-8b18-d6f02ef2e44a.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        2604:2d80:1980::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:48:8a:6d:05:87:4a:1f:22:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=c1221f93-a61f-466b-be37-2526934016e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bf:d7:49:6d:af:55:09:eb:c4:78:53:57:98:
                    c2:00:0a:28:cb:6d:d3:b5:18:36:9b:b6:45:bf:be:
                    e2:4a:5c:9e:88:63:c6:47:4a:f3:63:15:0b:8e:e6:
                    86:01:7d:de:90:a0:68:ab:90:29:eb:1c:60:80:09:
                    7e:96:3f:01:a9:09:41:f9:1f:d3:c8:57:17:c4:f0:
                    c4:aa:74:41:c1:fd:0e:75:af:9f:61:6a:59:f0:51:
                    ef:1a:01:1b:9f:1e:9c:fb:0e:7f:dc:a4:39:a0:1d:
                    b8:84:29:c0:f7:98:a9:c7:d9:86:f8:02:07:6d:87:
                    36:eb:88:33:af:17:26:c4:a3:1b:59:b7:aa:df:a5:
                    81:45:c4:87:6c:59:35:2e:df:e3:69:12:19:31:14:
                    1c:04:b4:e5:a5:08:76:69:f6:37:ae:54:8a:7e:e0:
                    9e:a7:7d:0a:d5:cf:ef:88:dc:28:97:a7:2c:55:10:
                    b5:65:17:9e:a0:14:19:43:64:61:46:90:cb:86:57:
                    3d:a6:02:eb:9a:19:a3:bf:69:88:d2:72:90:7c:68:
                    86:ab:c1:d2:0f:f1:b6:90:62:55:c5:79:6e:bc:47:
                    8d:ad:66:3a:e7:f8:a6:23:92:fb:b8:92:d4:46:a6:
                    1a:13:e4:d3:a3:04:50:fd:00:b0:1c:2b:e4:26:09:
                    9b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0A:2D:76:B6:6F:E6:A7:CE:64:E2:F9:7E:89:32:65:A1:0C:C5:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70665afa-45d4-3ea7-8b18-d6f02ef2e44a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:1980::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:5e:77:f3:25:78:46:cc:85:44:82:c5:dd:73:90:f2:23:16:
         ba:e7:c9:a0:e1:c5:e9:98:1c:22:82:09:6e:f5:00:1e:c0:73:
         97:70:20:a4:11:7a:bd:05:90:45:e2:b2:d5:26:37:22:90:0e:
         c6:52:40:73:0a:2f:c8:dc:6c:e5:02:93:ab:d1:d9:fb:1e:df:
         19:52:0c:85:de:7a:6b:0b:b1:1d:91:14:10:c6:54:0d:fe:1e:
         76:5e:28:4c:d6:46:3e:df:2e:61:25:2f:81:12:88:85:62:0c:
         fa:47:e7:84:3b:ba:4c:16:0d:0c:11:0c:d6:ac:2a:b1:d9:b4:
         97:b5:ca:d5:68:c3:e2:44:f4:e6:f1:f1:3e:ce:c5:e0:e8:1e:
         eb:bf:bc:40:d9:51:88:4f:82:ef:b6:e1:e5:b0:3a:be:70:c9:
         cb:23:25:96:98:d7:8f:e2:2c:fe:52:dc:2f:2f:e7:12:c7:fb:
         c6:68:b6:09:d1:72:7d:09:e4:d7:54:6f:31:93:81:ed:a7:2a:
         6b:40:03:4a:77:ee:8d:05:1c:18:69:eb:ce:11:e4:04:54:16:
         4f:95:82:3b:9b:1f:5c:37:7a:c5:79:14:70:0d:28:21:19:96:
         03:15:18:20:31:2b:ba:c6:98:5e:42:e1:7c:87:c2:14:88:38:
         9d:e1:f7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:41:53 2026 by rpki-client