Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9631be6f-d901-3a45-8f69-7f4bb3437f76.roa
File:                     9631be6f-d901-3a45-8f69-7f4bb3437f76.roa (raw, json)
Hash identifier:          Ffb8q8W/50yRxQSElsn1zFR+9tXxetF0zQxN9uVTyXI=
Subject key identifier:   39:3D:5E:EE:43:3B:EF:D5:12:4A:45:D4:54:A5:25:E5:93:10:9D:78
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79CC0681971A1819867FD00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9631be6f-d901-3a45-8f69-7f4bb3437f76.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:7280::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:c0:68:19:71:a1:81:98:67:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e10cfa75-b087-445a-883f-2ecf5c715b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:43:c2:b3:96:48:59:c3:a7:80:fb:0e:8d:c1:
                    c8:90:bf:f0:e4:6a:5f:d4:f0:c7:25:ee:24:d9:5e:
                    1f:4b:1e:87:57:63:2f:27:25:e0:28:87:3c:a4:ce:
                    32:8c:a6:71:83:da:52:6e:42:95:aa:eb:04:3f:40:
                    b7:8e:f6:fd:5c:3c:4f:d5:53:1a:2f:03:ff:a5:e3:
                    70:43:2a:11:13:5c:d2:81:bf:18:ee:6c:a2:16:30:
                    85:3e:4a:37:5a:1c:06:7b:ae:61:77:4b:7a:6b:eb:
                    ca:ab:8f:4a:ff:5d:52:31:b2:15:3e:68:71:ab:25:
                    1d:28:d2:d2:b8:15:e5:47:25:ab:99:fc:f0:66:c3:
                    4b:8c:40:e3:02:f8:a3:71:f2:7f:8e:85:a5:cc:b3:
                    1e:b1:b9:9d:c3:f8:32:e9:3b:fe:7f:1e:85:24:3f:
                    eb:eb:3d:7c:a9:e3:84:95:aa:5b:e6:1f:b1:70:5c:
                    40:cb:94:7f:e4:6c:27:9f:66:80:c7:9e:2c:69:98:
                    c7:2f:02:c3:b9:76:35:45:55:5d:c6:5c:74:bb:75:
                    9f:68:fb:a0:89:39:f1:8c:85:21:44:1e:cb:8e:78:
                    db:24:a0:e3:21:83:3c:57:64:17:54:95:bd:b0:a0:
                    ba:3d:b9:eb:40:a2:af:93:d5:12:8a:28:39:3b:bf:
                    5c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3D:5E:EE:43:3B:EF:D5:12:4A:45:D4:54:A5:25:E5:93:10:9D:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9631be6f-d901-3a45-8f69-7f4bb3437f76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7280::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:bc:76:c8:0f:06:4a:9f:10:4c:7e:0a:ca:e1:7d:d5:3e:e3:
         42:41:fe:cb:9f:c0:67:6f:0f:70:5a:24:11:43:b1:de:ea:7c:
         c7:30:b7:11:18:56:4e:e1:bd:17:65:01:d0:16:1d:e8:be:cc:
         1e:b6:67:74:e1:b9:6f:b4:4a:7e:cd:47:ea:69:3d:29:08:fc:
         22:82:05:4d:5c:24:75:ae:62:c8:48:02:86:65:4f:c3:a5:4c:
         21:84:bf:2b:93:1d:b0:0c:07:0b:4c:b2:48:6f:5b:9e:c1:e0:
         84:55:20:de:48:38:b7:4a:f9:3d:d9:34:71:e2:62:00:d5:11:
         0d:40:75:84:a0:29:83:ab:73:22:39:42:d8:57:2e:52:f8:bf:
         b6:ab:af:b0:d4:c9:07:89:59:d5:ee:30:c4:37:e4:db:32:4a:
         83:f1:be:64:a8:08:1e:43:d1:b5:ea:90:8f:bb:81:6c:87:6e:
         b3:9e:7a:f4:dd:a2:a2:ca:b9:61:1d:a5:01:b6:45:b2:0d:72:
         b9:47:82:10:6c:f0:7e:96:8c:01:64:ed:5f:3e:22:53:2c:93:
         0d:d3:48:be:8d:d8:77:3e:70:13:81:29:e2:2e:c1:4d:0b:fd:
         e9:82:a7:58:57:36:20:a1:1f:17:25:d3:d6:cc:9c:b3:62:81:
         73:49:0e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:46:04 2026 by rpki-client