Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/816811cb-688a-3614-99af-60ae508b37c3.roa
File:                     816811cb-688a-3614-99af-60ae508b37c3.roa (raw, json)
Hash identifier:          3bqlq5HgMw+6jooUl06/BQz6NeWzh4Amx1E/FZkZp8g=
Subject key identifier:   B8:86:F6:1D:84:3A:2E:91:4F:74:20:57:14:94:03:97:04:1B:17:14
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D143D4368FC970E65FB1A33C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/816811cb-688a-3614-99af-60ae508b37c3.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     19905
IP address blocks:        2604:2d81:1080::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:43:68:fc:97:0e:65:fb:1a:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=d68d4b15-e29f-431a-8140-e7041fa29f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:73:26:04:c3:ae:52:e7:8e:90:a0:3f:26:4e:
                    18:d7:0d:d8:c8:21:94:b5:ed:0d:a9:ca:66:e7:ae:
                    02:40:95:19:c0:01:2d:e7:ba:6f:6a:60:70:11:74:
                    12:0e:e8:c2:0e:2d:71:33:c4:76:59:6d:0a:bf:90:
                    84:75:69:6e:31:e7:34:1a:1c:7d:c6:91:87:8b:e4:
                    a8:65:5a:57:f7:6a:a4:76:e2:88:d3:ea:f9:52:3e:
                    60:6b:9c:26:c6:15:43:6e:ae:04:1c:7a:0e:93:b6:
                    0e:10:90:17:f8:e1:62:41:08:39:a2:f7:ab:32:e4:
                    5d:0b:cc:6e:8d:20:ce:24:cd:1e:b5:62:2f:4a:ae:
                    dd:ed:00:ee:81:b3:dd:d7:65:48:42:5a:90:8f:d1:
                    d4:4f:b9:8e:e5:d8:02:6d:22:06:10:25:84:0e:c9:
                    9e:ee:74:a8:21:7f:89:46:38:e5:f6:ae:92:3e:3c:
                    0e:3c:2a:3f:a3:09:3d:70:4a:08:83:d0:b8:a4:57:
                    67:17:d9:ed:d2:b3:ff:50:8f:a0:a7:26:5f:3d:10:
                    bc:7e:0e:0c:d7:93:f4:8b:d0:b5:45:ac:f1:34:7a:
                    b0:35:ed:e9:b4:2a:fc:b0:6c:7a:a6:13:ad:0f:cc:
                    c9:e5:ae:43:31:67:db:75:e2:31:b4:27:4e:0f:82:
                    6e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:86:F6:1D:84:3A:2E:91:4F:74:20:57:14:94:03:97:04:1B:17:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/816811cb-688a-3614-99af-60ae508b37c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1080::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:07:18:53:b8:13:9b:d2:32:79:f2:7b:b0:c7:3f:25:8c:ea:
         e9:1c:a4:a9:5a:ec:82:66:62:41:4c:2b:44:57:9d:5d:94:1a:
         b5:32:62:a6:2b:8a:1c:e6:89:1f:6d:ad:09:55:f6:c5:db:36:
         8f:70:2e:4d:6e:03:28:c4:8e:58:f3:98:b1:68:18:85:24:48:
         29:a5:a4:08:a8:58:2f:3a:74:4f:95:5c:cf:7d:f9:cc:2f:30:
         d5:f5:cb:af:5b:f9:4a:9d:50:fc:43:7b:27:73:cf:29:ac:83:
         f5:95:41:bd:a1:9f:7a:3b:9c:55:42:56:fa:95:cf:cd:52:3f:
         34:cf:e7:05:43:b9:15:38:46:54:ec:0d:b9:9d:2f:f8:c3:d8:
         b6:36:32:a1:cc:9e:81:09:7c:31:8c:6a:68:81:15:50:16:d6:
         fb:78:3f:1b:76:1a:26:b7:da:25:40:83:8d:6b:23:10:7f:a7:
         99:1a:7b:38:a1:14:b8:68:9d:3c:ac:65:1f:da:10:bc:0a:44:
         f4:c1:42:57:4c:35:aa:9e:7f:c0:14:e2:9f:00:6a:6c:c6:2c:
         88:df:bc:b1:eb:4f:36:fb:02:af:b7:7b:1b:a4:22:ba:64:50:
         bc:3d:69:6a:63:dd:70:29:1e:4b:33:a6:cc:38:86:52:6c:63:
         c3:3e:28:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:45:03 2026 by rpki-client