Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/97e2fe1c-c150-3fdc-ba61-0205ff24ca98.roa
File:                     97e2fe1c-c150-3fdc-ba61-0205ff24ca98.roa (raw, json)
Hash identifier:          /e9LPC4n3jRkwvYadfMJedtfT/kC5NkW7TeetCPrHjw=
Subject key identifier:   4A:07:20:67:EC:34:16:BF:15:F0:2B:A6:5A:8B:73:33:63:C6:9B:97
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DA11AB7C194CD7DD3D0CE5540
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/97e2fe1c-c150-3fdc-ba61-0205ff24ca98.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     30036
IP address blocks:        2604:2d80:5000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:b7:c1:94:cd:7d:d3:d0:ce:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=d6235436-f417-433b-a7a7-52465ea19516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:10:61:77:57:ff:da:52:f1:48:c9:21:4f:21:
                    5c:fb:c3:62:64:66:06:49:2a:0e:d9:00:15:6e:8a:
                    4a:3f:52:b7:93:59:3d:73:54:c9:cf:d5:76:2e:6d:
                    ee:f4:a9:a6:b5:33:63:bd:ac:da:65:cf:5b:43:18:
                    08:4d:36:a1:ee:a0:45:75:85:93:4d:98:aa:74:8d:
                    9f:e5:82:bd:c9:29:c5:99:bd:25:ef:bf:22:65:39:
                    a9:f3:67:1b:b2:b8:0b:9b:75:86:e8:09:28:6a:3a:
                    0b:51:ca:20:4b:75:72:f3:1f:95:52:2b:b3:db:a5:
                    86:4f:48:d0:60:9c:ed:9f:41:eb:83:48:50:13:d0:
                    e8:76:eb:ca:5a:77:86:9d:72:86:44:37:d4:a3:4d:
                    b2:d7:ff:17:ec:8c:32:a4:51:93:5a:51:dc:7a:12:
                    fa:d0:fe:dd:19:a6:2c:62:0f:a7:10:4d:21:e7:b8:
                    d4:f8:6c:e5:0d:94:e5:4e:7f:8a:f1:e5:ba:dc:4f:
                    d0:b0:a6:40:c8:38:6e:1e:69:88:10:cd:08:56:82:
                    f6:83:f9:88:a5:ad:f7:b5:c8:7a:ed:1c:9f:58:a8:
                    6f:2c:b8:be:96:49:91:a8:2d:93:36:2c:1e:2e:91:
                    a6:ad:e1:24:4e:44:e4:c7:46:89:11:41:b0:76:2a:
                    95:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:07:20:67:EC:34:16:BF:15:F0:2B:A6:5A:8B:73:33:63:C6:9B:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/97e2fe1c-c150-3fdc-ba61-0205ff24ca98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:5000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ac:3d:50:89:83:65:7c:42:26:08:14:f7:30:a2:3b:d5:86:
         10:4e:61:d2:fa:ae:8e:28:68:a4:c4:3a:9b:e5:7b:32:09:91:
         ea:1f:d9:09:05:22:74:3d:67:ed:a4:ef:d4:4d:69:bd:c2:a9:
         d7:e4:85:4f:10:f1:62:3b:77:08:90:19:c1:0a:2e:99:8e:07:
         9c:5b:07:29:f2:90:80:33:b7:fe:e2:8a:d8:64:7a:a9:c7:dd:
         0a:6a:d4:12:c7:c7:ac:67:61:7b:f1:a5:9f:e9:ee:45:8b:6d:
         92:2b:22:92:c7:fe:1d:6c:d9:48:cf:2f:59:db:f9:81:13:50:
         48:ba:1f:36:b9:10:4a:a0:60:00:39:d8:8f:d2:35:8a:85:fb:
         22:b2:3e:e0:27:20:b1:0c:53:34:a5:81:8b:b3:ee:fd:61:15:
         73:0b:17:1b:ab:47:4b:af:02:73:af:88:2e:e6:20:fc:ad:b0:
         8c:d9:c6:fe:8e:19:1e:27:30:7d:e1:89:55:ee:1f:78:7b:73:
         b4:1a:ea:73:5a:6d:43:96:f5:44:e2:75:6d:23:19:30:61:7a:
         36:c8:01:49:f5:bc:8a:5f:d0:24:bc:99:7d:d8:aa:5f:9d:e2:
         01:e2:2e:33:32:2a:d6:76:8d:90:69:a7:61:aa:26:51:10:6c:
         c3:e6:33:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 18:24:40 2026 by rpki-client