Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a273edd3-a1c9-35f1-8647-aab34a8dd1d8.roa
File:                     a273edd3-a1c9-35f1-8647-aab34a8dd1d8.roa (raw, json)
Hash identifier:          AeMcm9H3gRXxSNG9AYNKL6TuQESeCgoYJsWyw/IwX+E=
Subject key identifier:   D9:C3:6D:AF:74:6D:44:AD:F8:4C:74:38:57:41:9B:9F:F1:C6:C2:62
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D9E4FFD62745DF83C70706860
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a273edd3-a1c9-35f1-8647-aab34a8dd1d8.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     30036
IP address blocks:        2604:2d81::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:4f:fd:62:74:5d:f8:3c:70:70:68:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=82fc63c2-cd35-4a33-938a-c36e35199516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:83:22:e8:53:bb:f1:16:ed:11:d7:0c:66:e2:
                    f5:8d:b8:17:e9:13:b9:74:39:c5:ba:dd:94:dc:2d:
                    70:b0:ae:20:6e:cb:bd:8b:27:6b:87:9e:f4:93:09:
                    8a:9c:35:e8:bf:4a:5b:2c:1f:b5:a3:fb:fe:29:75:
                    f4:11:e9:bf:a6:36:ff:c6:17:eb:3a:37:2d:14:fe:
                    9f:d2:e1:d6:ea:cd:fd:34:fb:4c:7e:63:b2:e5:75:
                    cb:2d:40:73:27:63:5a:9b:a4:24:cb:b3:d7:50:2c:
                    34:0f:d5:bd:86:99:74:24:25:f7:e0:b6:94:6d:0d:
                    82:f7:7a:c0:e1:41:b4:35:32:f9:58:fa:ec:53:9f:
                    b5:d1:2f:ec:45:92:15:4b:e5:ec:7a:dc:fd:90:9b:
                    eb:56:fa:75:95:9e:5a:3f:11:a1:49:2e:c6:2c:61:
                    8a:10:25:9f:74:b2:c8:90:68:54:5c:d1:9d:bf:13:
                    b4:6d:2c:fa:dc:ea:79:60:e2:b3:42:49:58:e7:c2:
                    c5:f2:1a:9f:e2:06:27:66:8d:c8:cf:d7:15:91:a5:
                    55:cf:1c:e5:07:c4:20:d3:c6:5d:2c:38:72:c4:59:
                    7c:47:c7:ea:34:16:3b:cd:f3:30:57:eb:23:bc:2a:
                    50:e7:de:ed:7e:9b:65:b7:fe:f7:33:8e:bf:b7:4b:
                    79:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C3:6D:AF:74:6D:44:AD:F8:4C:74:38:57:41:9B:9F:F1:C6:C2:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a273edd3-a1c9-35f1-8647-aab34a8dd1d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:d0:c1:3c:98:f6:d1:e0:59:28:0e:2a:6a:76:54:67:4a:5c:
         64:14:86:a6:42:ea:9d:11:2c:b2:3b:f5:ea:71:dc:45:76:f9:
         66:b9:ff:8a:66:e3:a3:3b:de:06:01:16:19:e3:db:c8:d8:d2:
         0e:70:5b:4e:42:28:42:2a:de:e5:68:59:17:57:a4:1e:88:ca:
         e5:9b:04:a6:f0:75:0c:d0:b5:a8:e0:33:8e:98:d4:a0:8a:52:
         46:62:28:ce:6e:02:d1:a1:c0:52:d7:ae:26:96:4a:41:9f:44:
         95:a2:a5:db:2e:53:60:3b:17:10:b9:0c:a3:df:72:10:78:e0:
         ba:5e:7a:a0:ae:c8:f1:44:8b:0f:ec:06:bb:8a:13:e8:3a:4c:
         1c:21:34:c6:bd:62:ef:0a:28:57:52:51:e3:87:ea:d1:5a:b2:
         a4:4e:22:b3:40:41:d2:79:19:e5:5b:e5:76:92:54:a8:7f:6a:
         c8:36:dd:4a:fe:47:be:ce:3d:cf:d2:bb:a2:53:a7:f0:b0:08:
         38:31:1d:66:2b:b8:69:90:b9:2c:66:8e:b3:b5:13:c2:bb:cf:
         a9:02:72:62:02:a0:75:03:83:ef:4f:78:8d:e7:21:ba:50:27:
         7d:88:8d:8f:01:7d:2c:a7:d2:3b:ab:e6:5a:3a:bf:7f:95:b8:
         a7:9a:3b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 18:25:53 2026 by rpki-client