Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96855132-a9dc-371f-b2ce-9585609d73cf.roa
File:                     96855132-a9dc-371f-b2ce-9585609d73cf.roa (raw, json)
Hash identifier:          HyrbOd9SCsBckR3W6FVrCuvV54v23QqdxbRWhEoy4pk=
Subject key identifier:   90:AC:00:16:6E:61:14:7D:BE:B0:7F:4B:CD:81:42:6C:C9:FD:7A:6D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA8EC44C42925DF4F9554B480
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96855132-a9dc-371f-b2ce-9585609d73cf.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:de00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:44:c4:29:25:df:4f:95:54:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=a9bdeecb-64fb-4c19-8ad1-3e45029582b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:52:ae:66:13:e7:b4:5b:b1:18:af:fb:17:6b:
                    7c:f8:4e:c6:82:b9:60:a5:35:52:5d:a2:d4:95:6c:
                    a7:49:a6:62:e5:bb:65:17:a2:62:40:26:58:64:cb:
                    51:f6:6d:9b:a9:eb:6c:d3:7e:8b:62:d2:e0:66:ee:
                    d3:b8:7e:3c:6f:ca:86:18:ac:65:1a:90:38:ff:04:
                    62:f4:b7:86:e2:35:ad:17:9e:d4:c9:0c:b9:9c:c9:
                    cf:6c:9c:8f:82:9d:7b:56:78:f3:71:09:d0:bc:cf:
                    0c:b8:13:71:e5:28:05:11:e4:0b:19:23:ca:ed:dd:
                    be:e8:76:bb:cb:de:3a:61:ee:b4:84:4a:bb:ce:cc:
                    40:40:b1:c0:93:a7:6b:5e:6f:0b:d7:6c:99:a3:9a:
                    f6:af:ac:45:d7:fa:13:65:86:b1:e0:2c:0d:c2:6d:
                    c6:ae:08:09:8e:b9:64:1a:ee:de:4b:62:64:c0:a0:
                    15:ff:df:3c:3f:ce:88:03:ff:38:fc:4c:7f:5f:a7:
                    32:9f:44:8b:ea:41:5f:0c:19:ea:8a:cf:5f:a0:cc:
                    4b:f7:36:f2:2d:88:ea:3d:f2:5e:15:a6:1a:4a:09:
                    94:a1:53:18:5b:4d:01:10:8f:af:6f:11:2f:40:9b:
                    e0:0f:21:39:d4:cf:11:ad:5e:48:47:f3:78:ef:f1:
                    6c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:AC:00:16:6E:61:14:7D:BE:B0:7F:4B:CD:81:42:6C:C9:FD:7A:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96855132-a9dc-371f-b2ce-9585609d73cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:de00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:13:08:87:1d:4d:9b:73:04:a9:16:60:d2:88:7e:e6:53:27:
         47:c6:ec:1c:13:6a:c9:a1:54:85:17:83:02:7b:ee:bb:ae:bd:
         f3:75:b9:72:61:31:95:21:fd:1c:9b:a5:d1:77:05:20:09:c7:
         03:3f:7e:e8:62:78:9b:5a:1b:6f:5f:52:ca:c0:f4:14:c9:27:
         39:68:72:3f:94:9f:37:ab:9a:ed:8e:0e:58:c7:2b:52:86:6e:
         23:cc:a4:e6:ac:23:74:2b:c7:3f:c2:e0:9b:ad:eb:57:1c:f7:
         16:41:14:53:e0:7d:92:3a:76:e1:88:65:70:d5:d9:04:9f:3e:
         fb:23:3d:33:0e:ce:5e:05:4b:38:c6:54:6c:70:e2:5a:8c:bd:
         af:43:bc:16:50:b2:b8:ef:b1:3a:0e:4e:5f:16:a4:8a:73:b9:
         de:35:56:63:01:97:8d:2e:1f:00:25:5b:08:e2:30:3b:7b:20:
         26:f8:ad:57:1c:6d:5a:63:7d:c8:fa:31:ab:3e:09:93:a3:47:
         07:5b:ae:40:6c:86:81:4b:af:98:d0:9a:a2:8b:94:8f:24:17:
         03:95:77:8a:a7:c1:5d:fd:79:08:93:32:a5:66:87:51:2a:96:
         66:38:f9:99:44:13:42:15:dd:c5:d8:0f:ef:ab:93:5a:ad:c8:
         6a:8a:b3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:44:45 2026 by rpki-client