Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a228e266-954a-3bcb-9a5b-521e8e8bb852.roa
File:                     a228e266-954a-3bcb-9a5b-521e8e8bb852.roa (raw, json)
Hash identifier:          dLSlWjwlR3tw0YG17nFeB8nvIZxtZoKs95opCBoIrl0=
Subject key identifier:   27:CF:BE:45:5D:B5:12:E9:21:14:D7:CD:18:2E:41:4C:6D:1C:B1:21
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DADAACCAFF487DB8AA7BEB600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a228e266-954a-3bcb-9a5b-521e8e8bb852.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     30036
IP address blocks:        2604:2d80:ac00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:cc:af:f4:87:db:8a:a7:be:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=44f50adf-63bb-4973-bed0-9cee898d4b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:32:bd:9d:ee:ab:c1:16:e1:5b:ad:a8:a9:39:
                    20:3c:1a:6a:91:80:23:ee:28:01:59:24:27:bb:16:
                    7c:74:f8:f0:19:75:de:41:e5:2e:a8:61:c1:d6:66:
                    af:db:36:8d:79:c7:08:fe:45:63:27:62:da:a8:9e:
                    ab:f2:f4:3e:f6:12:e1:a1:c2:80:dd:af:4f:74:eb:
                    2b:64:c0:3c:ee:40:e0:8c:1f:8f:3e:92:0a:34:30:
                    50:32:d7:c5:39:2c:07:dd:11:8c:dc:11:25:dd:22:
                    a4:c5:ce:27:b1:1f:25:e3:2f:e1:42:85:ff:7c:77:
                    b7:d8:fc:8c:e6:be:7d:11:e7:76:10:72:a1:20:45:
                    e8:18:7c:42:9a:fb:f6:35:d0:39:87:c8:11:4e:04:
                    2b:58:c6:b5:bc:f6:0e:87:18:77:41:97:2b:05:fa:
                    fc:a2:d7:33:2f:5f:c0:51:74:68:e5:67:78:66:fb:
                    de:39:f1:41:60:17:91:8a:1a:da:f0:f8:41:b9:3b:
                    17:ef:6b:a5:48:79:f8:15:d5:08:90:38:ef:bf:b1:
                    17:8c:84:7e:9b:65:78:24:ac:b9:29:eb:13:cf:f1:
                    55:25:5b:3f:67:ae:96:67:b3:ab:24:82:72:1c:b4:
                    85:bb:b9:1f:34:5f:e1:01:a6:81:d1:df:0b:e9:8f:
                    e9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CF:BE:45:5D:B5:12:E9:21:14:D7:CD:18:2E:41:4C:6D:1C:B1:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a228e266-954a-3bcb-9a5b-521e8e8bb852.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:ac00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ea:66:73:e1:b3:62:54:10:46:85:62:60:2e:6a:5b:07:1e:
         b3:58:aa:79:5e:64:ed:3c:54:cc:5c:0b:0a:73:d0:05:0b:90:
         1a:5d:37:8d:3b:81:0c:e1:83:79:c6:6d:db:1e:50:cd:8c:c8:
         8d:34:54:f6:51:ee:c9:1a:60:ca:39:a5:2b:04:b3:6d:a0:c5:
         7f:03:24:cf:d0:96:90:80:bd:7a:6c:4c:76:c9:ab:10:94:fe:
         52:4b:92:a4:af:ee:85:81:82:05:53:27:28:5a:ed:d6:e4:4a:
         27:f3:9c:dc:3b:43:12:e8:b9:ee:f6:1d:3a:59:34:5d:e1:72:
         4c:f4:a5:ac:01:7f:a1:fd:a3:b2:4d:18:27:9f:b4:90:7a:70:
         7c:00:20:4c:16:55:da:89:e1:8e:bf:98:fe:d2:aa:b3:24:0d:
         ec:d6:14:64:bc:4a:20:e1:3b:11:9d:40:0f:bc:c0:97:b6:96:
         58:57:36:1c:e7:74:ba:8a:b1:ed:9c:ad:cd:15:c5:1f:93:a3:
         e4:f4:c6:9c:17:5a:63:ea:1d:6b:fe:36:b0:87:35:49:ee:24:
         02:a4:4a:11:49:b2:07:46:e4:e8:bc:5a:95:a0:2d:ac:60:4b:
         b0:05:dd:04:4e:a3:2f:61:fe:ad:20:73:f4:90:2f:51:48:a4:
         f7:14:af:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 19:28:54 2026 by rpki-client