Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a8156714-5ff0-3a62-b5dc-bca394e6dd6a.roa
File:                     a8156714-5ff0-3a62-b5dc-bca394e6dd6a.roa (raw, json)
Hash identifier:          rRSQaUKSyp87L9EFd96TAKKQRPB9A2mvcuegrSOLRqM=
Subject key identifier:   54:F0:FD:02:36:87:4B:F7:05:63:22:36:EC:1E:FB:14:47:28:A2:3B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F5C96DDED5F8CBD993C72CD40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a8156714-5ff0-3a62-b5dc-bca394e6dd6a.roa
Signing time:             Thu 01 Oct 2026 21:33:48 +0000
ROA not before:           Thu 01 Oct 2026 21:33:48 +0000
ROA not after:            Wed 30 Dec 2026 22:33:48 +0000
asID:                     19905
IP address blocks:        2604:2d81:a480::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5c:96:dd:ed:5f:8c:bd:99:3c:72:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  1 21:33:48 2026 GMT
            Not After : Dec 30 22:33:48 2026 GMT
        Subject: CN=22f44d36-221c-4f6b-b5a8-c14c42136a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:67:44:bb:75:92:b9:bc:7e:6a:fc:42:f4:e7:
                    df:7b:de:ea:02:29:49:bd:45:2e:ab:59:28:4d:68:
                    f4:cf:6a:82:36:85:4b:9c:79:3e:73:78:c4:f5:36:
                    e0:94:2e:4d:9e:72:cc:44:d9:f3:15:3b:65:fd:07:
                    a1:b0:76:49:eb:b8:40:a5:c3:50:90:4b:c4:ce:c7:
                    c2:eb:55:21:14:b4:f9:92:21:32:79:c8:7f:fb:f8:
                    50:95:6a:d5:d3:9a:58:24:a2:da:ca:e9:a7:b6:9f:
                    2a:30:b3:8b:39:07:c2:26:e7:1d:06:6e:fb:3b:9d:
                    c0:cf:06:ce:82:bb:9d:37:b8:2c:c9:39:19:f5:9e:
                    19:2e:bc:b1:41:1d:19:38:c2:4f:a1:02:ef:b8:ea:
                    fb:1c:0c:bd:22:3d:98:a5:bd:f0:de:46:4a:b3:58:
                    9e:d0:25:1d:d8:48:c1:52:d0:d0:ed:63:22:50:27:
                    1f:e9:37:58:2a:d7:a0:ca:6f:95:32:48:46:aa:03:
                    32:f5:02:b0:58:ee:60:0a:04:7a:03:55:aa:40:18:
                    4f:43:cc:cf:a8:fc:79:03:0b:8c:5f:8c:3f:54:f2:
                    e2:56:0c:d6:74:9e:58:b8:4b:02:27:35:ca:57:e0:
                    38:fd:98:47:fe:e6:d1:d2:7e:11:b1:a3:61:b1:d2:
                    e9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F0:FD:02:36:87:4B:F7:05:63:22:36:EC:1E:FB:14:47:28:A2:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a8156714-5ff0-3a62-b5dc-bca394e6dd6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:a480::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:1c:2c:0b:09:2c:a0:fc:0e:d8:f5:69:0b:54:b1:9a:61:3c:
         9d:60:e7:ac:27:58:10:2a:91:f5:12:b6:5a:07:50:e0:42:81:
         78:90:97:c4:d0:69:34:cd:35:0d:5a:e8:cf:87:c3:6b:3f:06:
         10:9d:83:58:81:8a:16:50:e6:bf:d3:69:80:e4:18:02:1d:4f:
         b9:6c:0b:8f:90:9f:63:6e:9c:f2:7e:b1:2d:84:83:64:ad:c5:
         88:13:17:b0:fe:68:76:a0:6d:ef:24:81:32:a4:9e:7e:2b:3e:
         2f:b4:7d:bc:aa:c8:01:e0:71:87:3b:ad:58:3b:0e:94:46:af:
         bc:54:86:0f:1e:d2:47:a2:7a:3e:75:ca:ce:98:12:4e:9d:49:
         3b:93:d2:8e:6e:5f:83:17:b7:23:ac:f0:bb:be:45:be:33:47:
         a4:08:da:d8:b1:6a:fd:22:dc:3c:b0:45:25:d6:c9:fb:72:fe:
         bb:a7:47:8d:5b:a5:66:1c:63:1a:09:2f:34:13:ab:bb:6a:f2:
         88:a1:00:9b:d3:97:b8:59:3a:09:8b:cd:7f:2f:99:43:f5:a6:
         f8:c9:53:5e:34:80:2c:e1:40:95:05:94:26:5f:ed:b1:02:fc:
         27:6a:4c:5e:b5:30:b2:98:60:d6:cd:0b:b8:4c:5b:76:54:d3:
         d5:ce:9a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:20:18 2026 by rpki-client