Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a74ba2db-ac8b-3056-993e-e2081fb5cd1e.roa
File:                     a74ba2db-ac8b-3056-993e-e2081fb5cd1e.roa (raw, json)
Hash identifier:          xnt1YgKSqLWddKYUnAqtbfG3l5juG7XUQFTrN0rbxTI=
Subject key identifier:   CB:19:CA:CB:55:BA:F5:72:0B:6C:9A:40:E3:8A:85:EC:F4:5C:52:74
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79D3C3C02FFFF3B39EA5580
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a74ba2db-ac8b-3056-993e-e2081fb5cd1e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:bc00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:3c:3c:02:ff:ff:3b:39:ea:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e03fcbfe-7f17-4751-bdb1-a8942fb4adba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:62:25:d8:97:2b:d2:75:27:65:14:99:9e:23:
                    14:86:85:cd:a0:4a:02:d0:ff:6f:da:9c:96:c8:b4:
                    66:a0:77:7a:95:c2:fd:b8:3c:9c:1a:8e:d3:05:80:
                    9c:24:f1:b7:f9:62:28:50:ce:c1:8f:4e:b2:03:e2:
                    41:03:7e:69:69:df:bf:3e:90:42:5f:3a:cb:74:15:
                    9f:e8:73:bd:f0:b2:f1:73:00:a6:0e:71:2a:6a:24:
                    73:aa:06:7e:b3:f1:82:60:04:28:59:fc:f3:20:51:
                    4d:75:ba:f4:03:90:90:28:95:8e:ca:7b:66:b5:46:
                    03:21:1e:21:b6:9b:3b:d7:43:09:d6:ce:80:66:e8:
                    0d:c4:c2:d9:8f:86:f4:bb:52:e1:2f:38:90:d7:09:
                    66:78:b4:56:6d:de:75:27:4d:be:e6:28:14:db:08:
                    5c:52:7b:99:7b:11:b3:b6:1e:bc:76:6f:98:46:93:
                    6f:3a:bb:10:7d:58:36:5c:0d:1b:bd:54:f4:31:26:
                    c6:f8:1d:5f:e2:5f:c0:9b:38:29:16:2d:44:e7:c6:
                    f8:99:9e:2f:5d:a8:69:79:ef:5e:5b:ea:93:9a:09:
                    5f:11:d6:89:88:23:b2:15:b0:64:56:a4:e7:66:fc:
                    70:8e:3a:b4:84:e8:1b:92:96:ad:1b:21:10:27:11:
                    4a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:19:CA:CB:55:BA:F5:72:0B:6C:9A:40:E3:8A:85:EC:F4:5C:52:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a74ba2db-ac8b-3056-993e-e2081fb5cd1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:bc00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:fa:d1:28:e1:c5:9c:ce:ec:08:33:77:d2:a7:3d:83:f9:53:
         c8:be:81:25:78:f1:01:8c:ab:d3:49:f5:cb:44:f2:83:14:a4:
         1a:dc:83:39:7d:0c:0d:df:c3:d2:5d:92:c7:6a:d6:3e:25:cc:
         f3:da:15:01:0c:82:d9:d0:44:29:2c:d5:ff:28:c2:e9:b3:b4:
         24:b3:7d:5c:b8:21:a4:f7:37:25:ec:3e:59:00:a6:a6:9f:7e:
         3a:6f:2b:98:b6:e5:8c:5a:12:dc:ee:05:51:6c:0b:e6:61:ae:
         33:65:7d:86:19:27:32:37:82:37:b7:ea:89:14:61:0d:7e:a5:
         0c:95:6c:ff:a3:a1:dc:7e:2b:ee:d6:50:be:68:0e:bd:65:50:
         7d:91:9f:6a:14:72:a7:be:85:28:ce:5f:e7:b0:56:0b:b4:82:
         73:76:60:e4:82:e1:f9:c9:96:a5:48:93:2c:f0:02:0c:6e:74:
         d8:b1:db:ee:11:5d:6c:75:ba:3f:96:b5:33:3f:32:13:cd:fe:
         c4:dc:6d:17:48:71:6f:54:5a:15:67:53:57:fd:4c:36:b7:69:
         87:04:69:92:49:90:2f:6b:3a:30:8d:0e:57:0a:d6:78:b7:1d:
         d1:34:94:5f:9a:dd:bb:cc:60:24:17:2c:ea:39:62:31:26:5d:
         99:25:86:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:00:28 2026 by rpki-client