Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7937b047-cada-3f73-b2b7-3d44865b091c.roa
File:                     7937b047-cada-3f73-b2b7-3d44865b091c.roa (raw, json)
Hash identifier:          WZmhF3iKhrqETpk9Dj6oFdSTcHkI7SA2Do9inciaNDc=
Subject key identifier:   AA:73:29:42:5F:83:39:B5:6F:6B:CA:87:69:EB:9A:D7:5B:E3:8E:E9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D1B1A0278A51695F8E7F4BE40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7937b047-cada-3f73-b2b7-3d44865b091c.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        2604:2d80:7200::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:02:78:a5:16:95:f8:e7:f4:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=ab89e623-a5ab-4948-9378-3b52236eb11c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:30:30:79:b0:f8:ed:30:f7:ad:3f:1e:cc:1e:
                    9b:28:c3:18:a0:5c:48:5f:ad:5e:ca:25:3e:26:f0:
                    19:6a:5a:b9:99:9d:92:b3:ae:6c:9a:35:ff:3c:0a:
                    8e:03:b9:a3:fd:ec:a2:f3:b6:50:cc:53:7f:e0:56:
                    79:62:b9:01:8d:cb:a1:ad:1d:37:a3:04:77:a4:9e:
                    0e:be:06:41:3d:dc:1d:7d:56:de:f6:8d:f2:cd:af:
                    e5:04:0d:72:99:0d:bc:e7:3d:72:9b:73:c6:3b:36:
                    f4:2c:ab:b5:a6:a2:16:58:80:04:d0:a2:a9:14:c2:
                    80:75:74:70:ce:58:bf:14:62:e8:02:b7:d6:af:f8:
                    44:5d:9d:c7:de:f2:c0:f9:cb:58:80:ce:77:53:7d:
                    b8:0c:59:74:36:69:8c:ab:e3:9b:46:c1:00:5d:77:
                    9f:d1:aa:ba:c6:32:e0:a3:6c:c2:3a:b3:20:0c:b3:
                    12:fb:37:86:b7:4c:0d:74:ef:46:1d:04:f1:63:4e:
                    d6:b2:28:b3:61:4b:37:f6:5b:71:e8:14:bd:ca:eb:
                    0e:33:78:2f:10:1c:ee:d2:e3:d7:d8:99:2a:58:61:
                    f3:cb:00:a3:30:f4:24:24:5d:eb:56:2f:56:39:71:
                    6c:cb:a6:6e:e1:e6:a3:df:84:7e:1f:2d:be:a0:92:
                    a6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:73:29:42:5F:83:39:B5:6F:6B:CA:87:69:EB:9A:D7:5B:E3:8E:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7937b047-cada-3f73-b2b7-3d44865b091c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7200::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:2e:61:c8:6a:f1:5d:2b:f6:22:2b:a0:28:27:c8:94:0e:4a:
         35:60:8b:6d:1f:da:04:eb:71:f7:f1:7b:fc:20:2f:aa:54:9f:
         5d:fe:fc:71:9c:e2:c9:96:a5:b2:b0:f9:ff:a3:8c:5b:0a:18:
         79:81:5d:79:d3:ce:df:aa:2f:de:ca:53:16:8d:da:30:56:41:
         a5:5e:cb:f7:78:fd:7e:e1:7e:8b:79:74:54:5a:7d:0f:aa:a7:
         9b:da:a6:9f:93:f8:ee:6a:c4:52:71:72:96:17:5c:a2:e4:4b:
         a6:f4:ec:db:dc:4f:46:6f:e1:52:04:1c:f5:7f:43:67:a6:bc:
         5c:7e:74:3b:10:ea:28:32:94:2d:21:16:b8:55:1c:35:ec:3b:
         e0:fa:ea:b5:ec:ea:d2:a8:97:e9:da:a8:40:c4:27:df:64:a8:
         41:1f:97:92:93:f6:fc:cc:c0:d1:10:25:e0:81:42:1a:0a:17:
         2d:25:31:cf:04:bc:44:55:09:50:e1:3a:b9:b4:35:ca:65:0b:
         8a:45:80:dd:6d:6a:d9:21:c8:cf:3f:27:9c:a0:e9:88:bb:c6:
         02:20:5b:8e:92:d3:7a:18:0b:19:09:68:eb:ae:cf:d3:7a:3f:
         b8:56:fd:32:a0:ba:9c:ea:58:75:79:45:ea:c1:b0:94:d1:a9:
         7f:37:ce:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:46:25 2026 by rpki-client