Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89f552c4-e871-335b-a52e-1783b13622ce.roa
File:                     89f552c4-e871-335b-a52e-1783b13622ce.roa (raw, json)
Hash identifier:          i63T+yPxMAXCJu9xmp7x5GxCXTCwhXKfRPlY6pOQbgY=
Subject key identifier:   B7:DF:FB:B2:AC:3F:FB:0C:B0:57:B4:07:FC:EE:F1:3F:F7:F3:B6:4A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79CF4A1F31898A837F61D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89f552c4-e871-335b-a52e-1783b13622ce.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:a180::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:f4:a1:f3:18:98:a8:37:f6:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c9cd78e7-fd57-4b21-8ccc-b692aee3db3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:49:6d:68:7f:94:43:d4:c4:db:98:d6:01:cd:
                    f9:cd:63:d9:a0:a6:3e:5c:6b:0c:13:9e:49:9c:71:
                    23:0e:9f:6e:d3:ed:ff:71:ee:03:95:d3:96:5b:c1:
                    21:3e:15:03:90:78:41:ca:3b:fd:ce:f5:e6:8c:7a:
                    24:57:41:f4:b5:32:ce:a3:81:fd:e7:5f:e0:20:34:
                    8e:cb:c5:e9:b5:93:22:6d:3e:c1:ce:a3:49:8e:d4:
                    4e:fb:1e:f3:d6:9d:42:b7:eb:02:68:5d:3d:8d:3d:
                    ae:b6:9c:ed:37:fc:cc:85:33:79:cf:c3:09:5f:01:
                    f2:d4:58:37:a9:8c:35:3c:ee:87:d0:44:b6:66:8f:
                    a7:46:cf:f5:18:24:d5:d2:ef:86:fd:78:5b:30:14:
                    b2:5c:54:76:ee:65:56:f2:e9:c4:29:9d:b8:98:7c:
                    b6:16:85:7e:e5:8a:f6:23:b7:ef:f2:f1:1c:18:ac:
                    1f:d0:7f:0c:c3:57:91:03:bb:b3:b1:e1:22:12:02:
                    c7:67:69:3c:32:d9:31:2b:f5:f9:03:93:57:84:ed:
                    33:36:91:8d:e1:db:00:cd:4f:13:e3:0e:bd:a2:ce:
                    b0:18:0a:30:1a:6a:47:71:e4:ad:5a:dd:41:d9:cc:
                    42:f6:18:bf:94:cb:7b:8b:47:44:b8:0b:4a:27:0a:
                    6e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DF:FB:B2:AC:3F:FB:0C:B0:57:B4:07:FC:EE:F1:3F:F7:F3:B6:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89f552c4-e871-335b-a52e-1783b13622ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:a180::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:e6:e2:ce:c7:51:41:8f:64:e0:f0:eb:43:a7:eb:e6:c0:35:
         06:77:c3:e1:50:f4:f9:91:37:5c:73:0b:a7:7c:ec:65:b8:7d:
         8e:f5:51:ce:3d:56:3e:e8:53:40:0b:34:3b:77:94:3c:f6:df:
         7b:e4:49:bf:57:20:55:41:cb:87:e1:44:44:94:0c:d7:d7:e4:
         86:ed:b2:93:36:1a:5d:cb:e3:66:c8:1b:2e:db:0b:4e:79:68:
         f1:9a:85:6e:fe:a5:8d:f6:33:bd:65:f6:9e:c8:a4:60:8a:89:
         7e:01:9f:eb:e0:70:3e:4d:d7:98:99:9b:47:e7:d8:0b:a8:10:
         d4:79:18:21:6c:43:03:9e:95:ae:87:8c:d5:a5:31:d7:93:88:
         6e:ee:5a:60:ab:2d:f8:84:d4:dc:2b:45:16:55:2b:43:45:32:
         e4:38:95:c5:cc:3b:cd:0e:6e:ac:fb:c0:ea:6f:a8:5a:25:ec:
         26:38:f0:04:c9:94:b3:86:5a:a6:bd:2b:77:7d:d1:39:3c:82:
         ec:0f:83:ba:64:62:49:a7:58:5d:a3:2e:48:ba:82:3c:6d:d7:
         41:2c:c7:06:0c:7a:96:cd:5a:84:56:fa:e4:8d:b3:06:e5:29:
         fe:34:ca:b5:98:86:88:6e:15:80:a6:aa:7d:fd:5a:3f:2c:0e:
         29:5b:23:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:01:16 2026 by rpki-client