Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7f12744a-c38d-3447-b6d7-504c02cfddcd.roa
File:                     7f12744a-c38d-3447-b6d7-504c02cfddcd.roa (raw, json)
Hash identifier:          Wpb/IJzT6OfKf0Axso7K9EZ0/AlxulqOqjB7Bngq8Qk=
Subject key identifier:   9E:2B:58:DC:88:F6:AC:F0:07:20:74:E0:75:A2:41:AA:2E:B9:9A:68
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F71ED760D8A6D546EACBC8A00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7f12744a-c38d-3447-b6d7-504c02cfddcd.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     19905
IP address blocks:        2604:2d81:2080::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:76:0d:8a:6d:54:6e:ac:bc:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=fc9b924c-6e5f-4c9e-93c4-116be28eb564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:68:21:25:96:88:25:7c:87:3a:86:fb:c3:b0:
                    89:c4:e9:07:94:69:19:be:06:61:91:d3:ac:d5:61:
                    e5:69:3b:4a:d1:42:64:06:fc:e3:bf:2a:65:33:1d:
                    c1:df:be:32:6d:f1:1c:be:e5:85:8c:04:5d:db:2b:
                    49:2e:72:8f:ea:44:04:a7:0a:bc:20:a8:36:9b:b6:
                    cc:07:e2:db:95:e5:8c:a6:8a:cf:59:e9:03:bc:5c:
                    9b:de:e8:f5:c3:51:3c:62:4e:54:e4:10:07:d5:7b:
                    89:20:34:16:92:98:4d:95:25:a7:8e:d3:3e:d7:b0:
                    9c:16:28:c7:7d:e5:24:80:e4:34:38:5f:ed:c0:d4:
                    e8:25:cb:0f:e5:e7:7d:50:f7:0c:13:2a:49:7a:e4:
                    00:72:a4:5c:53:6b:b6:2b:67:91:aa:9e:93:92:e3:
                    9c:b2:9a:92:e2:59:72:99:d5:9c:c5:03:87:e7:db:
                    8b:70:08:14:85:e4:8d:f6:12:b3:b5:74:02:25:b0:
                    43:ed:17:fc:06:ed:e1:aa:a1:8e:ea:cf:b3:51:05:
                    d4:63:3f:a6:b7:cd:2f:5b:bf:51:53:bf:85:45:11:
                    89:ab:16:99:5b:fd:06:89:74:2f:ea:9a:18:e8:16:
                    f4:e5:f1:3f:6e:a9:bd:eb:18:c4:01:db:51:df:29:
                    03:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2B:58:DC:88:F6:AC:F0:07:20:74:E0:75:A2:41:AA:2E:B9:9A:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7f12744a-c38d-3447-b6d7-504c02cfddcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:2080::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:86:1d:2e:83:12:43:57:ce:25:62:dd:62:56:77:98:e4:b3:
         16:d6:2a:19:4e:f5:d2:79:82:27:02:7e:0d:0b:cb:5e:47:65:
         54:30:99:24:dd:fa:1d:e7:c6:32:75:13:e1:33:81:f9:fe:f7:
         15:9a:f7:df:f1:2f:87:de:63:52:7a:8c:6b:1a:97:d7:13:e3:
         cc:08:f0:cc:d9:25:c2:c8:61:8d:0f:c8:b0:b9:95:b6:0b:0d:
         89:bf:c3:28:62:b5:d0:8e:09:6c:1c:f9:2b:e6:b7:b7:01:f1:
         22:63:5e:34:d6:90:9f:6b:f8:ff:d4:5a:e4:fe:ee:cd:a5:9f:
         d9:6b:8b:e6:7f:b8:ed:70:ab:bc:f7:3d:9d:e8:bf:12:e9:14:
         7b:6b:9a:cf:24:47:e1:39:7f:67:e0:22:91:00:d6:2f:2f:04:
         8f:f4:f3:1e:13:60:d0:97:c2:6d:70:fd:f4:90:0c:5e:a8:99:
         34:6f:6b:f4:f1:64:58:dc:28:b3:d9:bd:c7:76:ba:79:e1:5a:
         88:01:dd:76:8c:4f:83:e6:66:48:2c:db:bd:c7:9f:f0:fd:2e:
         b2:00:3e:1a:1c:12:e4:4d:dd:04:0f:95:fb:5e:58:5a:70:46:
         77:3a:e7:5c:3f:70:92:d7:fd:9c:1b:2d:ab:be:03:90:bc:01:
         7f:4e:8a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 01:56:43 2026 by rpki-client