Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a66c05c1-2422-3f68-89ec-506c9ed7ad91.roa
File:                     a66c05c1-2422-3f68-89ec-506c9ed7ad91.roa (raw, json)
Hash identifier:          xTG9JIQViZUl7TgFm4W7VO8MFvrt3LQXbjWofQDC9FA=
Subject key identifier:   89:BB:99:A8:55:C7:13:1A:7A:A1:A2:CB:E0:F8:8E:19:EA:41:F3:DE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F698D99C954CDF94BAEAF9B98
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a66c05c1-2422-3f68-89ec-506c9ed7ad91.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     30036
IP address blocks:        2604:2d80:e880::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:99:c9:54:cd:f9:4b:ae:af:9b:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=bfb5dba1-2321-410a-b244-c7cf8c34b842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b1:19:2f:3c:e4:66:e3:39:bc:b3:2b:85:82:
                    71:e2:8f:57:ce:c2:b6:3e:73:42:6b:70:88:17:14:
                    1f:cb:dc:40:a3:9e:86:ac:57:b9:84:a9:e6:f4:a3:
                    ce:53:e7:64:fa:65:d7:41:7f:ff:86:a5:76:a9:c8:
                    cb:cc:a1:c4:fc:9b:e3:02:f2:4e:4c:2d:b6:03:7e:
                    35:e3:42:02:5f:04:b3:e7:7a:40:6a:a5:fc:07:78:
                    2c:99:fa:ed:1e:fc:f3:a8:4b:16:c1:d1:2e:b3:f7:
                    df:4b:77:ba:ed:c4:2e:80:82:9d:78:98:65:4f:50:
                    31:ac:2d:35:cf:cc:e8:73:dc:53:a1:e9:bf:bc:6e:
                    db:49:34:56:18:db:cb:28:9c:2b:5f:fc:4d:fb:a7:
                    0c:dc:3e:fa:8a:c1:99:41:9c:3b:3c:35:98:65:bd:
                    13:29:ce:5f:75:37:da:f7:e5:37:78:dd:a9:64:12:
                    69:76:74:fb:7e:13:92:7c:49:d5:ba:77:f8:da:14:
                    56:c3:7c:27:c1:b0:bd:bd:b1:5e:2d:b0:29:3b:73:
                    c2:2d:98:dd:98:60:64:46:e6:fb:01:72:a2:5e:fd:
                    f9:31:36:28:b0:31:da:59:aa:7c:68:69:11:c5:33:
                    b5:cb:fc:3d:49:33:87:1f:6c:c5:99:38:43:a8:82:
                    77:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BB:99:A8:55:C7:13:1A:7A:A1:A2:CB:E0:F8:8E:19:EA:41:F3:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a66c05c1-2422-3f68-89ec-506c9ed7ad91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:e880::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:c0:dd:a6:9c:71:23:bb:07:e2:04:f9:fb:b8:cf:b0:f5:00:
         6d:eb:5f:30:31:c0:0a:a2:92:72:cb:10:bf:8f:c8:ad:ce:5e:
         ba:a6:ef:a5:59:46:dc:a9:bd:09:80:29:c4:29:4e:ec:e7:d8:
         1f:27:bb:a2:20:7d:1a:04:24:04:4f:1a:df:73:25:2d:42:cd:
         e6:82:dd:a2:db:94:70:32:d9:85:16:31:ec:11:42:94:6a:54:
         0b:59:60:43:00:7b:8b:c1:b8:d5:09:c6:f9:2f:99:1b:e4:26:
         86:ca:22:90:fa:c8:ba:fd:30:7e:fa:c0:8b:1c:0b:b4:6f:ce:
         85:f3:b3:aa:3b:06:90:63:4e:f3:8c:90:07:69:b2:d2:cf:7c:
         1d:7a:d2:67:00:96:7a:90:0f:77:6c:a5:51:89:3b:1c:fc:bd:
         3a:b9:13:03:a0:bd:52:33:cb:3a:1b:ff:65:b3:cb:48:df:3c:
         f6:62:b4:17:84:4d:a5:0a:c4:22:47:40:67:7a:af:63:a9:2e:
         eb:79:71:6d:e3:6b:90:e3:d5:a5:4f:3f:0d:24:15:aa:9e:9b:
         9e:37:68:c6:83:9f:2c:73:b7:5e:70:75:6e:22:60:66:65:46:
         26:9a:71:0b:36:5d:1b:bf:4c:8e:cb:56:f0:b2:ab:2d:60:11:
         ca:61:64:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:13:47 2026 by rpki-client