Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/720bb15a-3e03-3faf-a281-be51ad62e2aa.roa
File:                     720bb15a-3e03-3faf-a281-be51ad62e2aa.roa (raw, json)
Hash identifier:          IskH40djp3cUWC7Sq0PpBSg+PoETMP2kQHMFMcmUDJU=
Subject key identifier:   C8:EE:CD:B1:4D:25:9B:7A:28:74:AE:BA:C4:4E:E0:D1:EA:E0:2F:24
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F5E62E58948C2E30981B617A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/720bb15a-3e03-3faf-a281-be51ad62e2aa.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     19905
IP address blocks:        2604:2d80:d380::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:e5:89:48:c2:e3:09:81:b6:17:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=665e53f0-5ca7-408d-9783-8062d13c2a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:26:6b:24:fc:30:c7:e6:73:4c:d1:53:01:23:
                    db:ed:56:ee:c5:4b:fd:c4:4e:0a:f2:28:e0:9e:62:
                    f4:e0:25:d8:d8:98:0e:ad:80:e1:77:61:8e:25:70:
                    dd:94:9a:01:ea:af:7f:f6:5d:98:8e:35:07:ec:00:
                    cf:26:61:0a:a1:21:68:8a:ac:98:c4:c9:17:91:49:
                    a0:4b:13:1f:eb:72:33:0f:73:41:1e:ec:eb:d7:b6:
                    a6:4d:20:7b:78:58:88:02:64:ac:7c:9e:7e:18:b8:
                    40:09:77:e8:14:b0:ee:2c:f1:54:ec:2e:38:7c:30:
                    2b:24:f1:d6:60:65:cd:ad:50:5b:72:e0:2a:d6:e6:
                    3c:f5:ca:ce:d6:30:4b:c9:62:0d:2c:7e:b5:8a:ea:
                    ae:a9:3d:23:ca:14:8f:d5:a9:18:43:f2:79:0f:3d:
                    01:09:b0:61:36:ff:d0:51:9d:07:05:c4:3b:88:7d:
                    5d:73:81:a6:c2:2e:10:45:47:87:d8:a2:29:b6:bc:
                    4e:6d:1f:48:e5:f5:e6:3a:2b:9d:41:60:6f:bf:72:
                    32:3a:72:88:51:3a:91:6a:34:7c:7a:ee:2c:64:65:
                    38:eb:dd:39:d4:3b:14:dd:4d:8c:cb:22:b1:ea:f2:
                    48:50:ee:f2:61:25:1d:b6:f2:77:10:ea:57:7e:fb:
                    85:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EE:CD:B1:4D:25:9B:7A:28:74:AE:BA:C4:4E:E0:D1:EA:E0:2F:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/720bb15a-3e03-3faf-a281-be51ad62e2aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:d380::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:e4:b9:de:76:c6:e2:8f:02:c4:02:00:c8:d9:86:21:58:cb:
         92:33:9e:1b:30:83:6d:aa:78:4c:84:44:bd:0e:7d:66:e0:05:
         87:04:22:84:a7:09:8a:be:a2:f1:a0:c5:2a:00:42:9f:46:25:
         20:0a:fd:29:6f:56:a6:f5:37:73:bd:cd:60:03:2e:7d:90:1d:
         f5:01:f5:e1:12:7d:c9:f9:35:b5:b3:0b:7f:0c:22:52:55:d4:
         07:75:9f:f7:ce:5f:79:cd:e6:6a:2b:e2:56:d8:2d:b9:ee:7f:
         dc:59:3b:65:09:87:e0:c1:e0:b0:95:86:f0:66:21:85:c4:87:
         32:00:43:c7:5c:65:e0:8c:3c:aa:3e:b8:b3:3c:cc:2b:d4:d9:
         cc:2c:98:d2:ef:42:e0:c9:94:99:7a:75:d9:ee:0b:12:38:98:
         f5:13:c1:3f:7f:4e:e1:a9:eb:f7:a7:23:73:f1:3c:a8:18:72:
         ce:05:b3:32:95:ed:4f:cd:49:37:59:05:62:53:12:5d:94:65:
         7b:ce:50:0b:27:0d:35:e4:a2:3e:1b:87:a6:e9:f9:b7:7a:05:
         d9:06:76:2a:3b:a5:85:66:2c:47:43:6c:fd:0a:be:c2:c4:47:
         0f:30:71:2d:26:a7:5e:d5:ad:57:83:46:34:95:fc:bf:4e:4d:
         05:ab:52:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:54:29 2026 by rpki-client