Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a0bb42e-9756-3ee7-9787-b44f4110ac88.roa
File:                     7a0bb42e-9756-3ee7-9787-b44f4110ac88.roa (raw, json)
Hash identifier:          ImiguKhlpmfpGgxln8MEugJrTXf8JoYJh+OUvRa0m6U=
Subject key identifier:   7E:99:6A:E5:01:93:02:B2:9B:AF:A4:19:E7:6F:43:0D:17:8D:BB:C0
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D1707F1C669292129DDFA7480
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a0bb42e-9756-3ee7-9787-b44f4110ac88.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     30036
IP address blocks:        2604:2d80:4b00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:f1:c6:69:29:21:29:dd:fa:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=30db519a-2668-4f54-8012-f56f9a3c3050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9a:4d:69:26:84:34:50:30:a7:5e:03:e9:d2:
                    db:e1:45:c7:8c:19:c4:33:26:23:24:f5:b6:3c:5b:
                    e4:ca:bd:76:29:27:56:a2:3d:d4:d5:6f:69:f4:6f:
                    4a:1b:44:f7:2f:99:d9:82:a5:77:4c:a0:43:78:b2:
                    2a:ea:a8:20:02:b1:c7:c2:2b:ad:e6:83:dd:86:72:
                    30:8e:e6:af:63:52:3f:9c:9d:36:e1:42:40:95:c2:
                    99:b5:38:2a:91:65:3b:2d:94:6b:e5:eb:31:81:bc:
                    b7:6c:af:5e:48:80:55:4e:68:ce:71:b1:93:7d:db:
                    12:3b:e0:99:46:fb:e2:bb:8e:0a:09:7e:ad:b7:91:
                    9d:2d:f2:35:b4:e4:90:62:78:a1:7a:22:72:19:dc:
                    d5:10:34:e4:a4:8c:14:64:cf:20:45:59:63:13:98:
                    d1:08:6d:e1:83:f1:11:cf:70:4e:3a:6e:68:21:d9:
                    26:96:4f:43:40:03:f5:6e:6d:e3:93:e9:da:c2:f2:
                    e5:f6:67:75:f4:c1:a2:ae:d2:17:75:de:50:b6:ac:
                    12:d7:dd:77:76:2f:f3:0c:f5:67:0a:47:cc:6e:f1:
                    62:b0:02:9e:b9:48:43:b1:5c:9a:20:99:02:1d:c8:
                    81:0a:33:04:43:ce:ab:dd:f5:12:16:12:75:46:8f:
                    80:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:99:6A:E5:01:93:02:B2:9B:AF:A4:19:E7:6F:43:0D:17:8D:BB:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a0bb42e-9756-3ee7-9787-b44f4110ac88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:4b00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:e2:e8:42:e3:04:69:6e:95:ea:80:8a:f9:2f:97:44:8f:8b:
         d4:ca:8d:a7:f2:f9:6f:64:84:75:bf:4d:12:b6:d5:41:82:f6:
         af:ce:72:33:b5:0a:88:90:d9:c6:8e:c9:80:fb:a8:4c:0a:33:
         9a:db:48:86:91:bc:9c:05:5b:5e:b7:5a:15:02:ce:cd:78:f3:
         ac:01:2f:a8:65:7e:44:d5:14:ca:f6:ef:c5:19:0c:c0:cc:7b:
         56:e9:00:9f:bc:39:cd:3c:bd:16:ed:20:92:cd:49:b5:21:d6:
         d3:72:6d:70:57:aa:05:53:8d:e7:ea:f0:2b:4e:18:dd:73:24:
         ed:23:fd:1c:46:e1:ed:50:9e:7d:45:d9:cb:ee:93:ad:e7:c0:
         9b:80:58:8a:ac:0b:f2:62:4b:a6:d3:56:a4:ab:eb:61:6f:80:
         78:9d:fc:df:6d:84:53:e9:93:e1:56:b5:04:be:bc:ff:18:e9:
         c6:3b:77:ae:8a:87:6a:fe:cd:9b:c9:40:86:6a:de:0d:0f:37:
         a0:ad:b7:b2:00:d0:a2:8e:4e:ea:1d:3b:7a:24:61:63:fe:e4:
         97:4c:fb:07:35:c1:7e:fa:81:5d:0c:c7:8b:64:e6:94:b2:6d:
         ee:16:99:98:fd:91:4d:69:55:cc:2a:4b:ed:87:a6:93:fb:d5:
         25:8b:ea:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:41:41 2026 by rpki-client