Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9cd093a-d969-3e0d-9a23-a2e018c7c252.roa
File:                     a9cd093a-d969-3e0d-9a23-a2e018c7c252.roa (raw, json)
Hash identifier:          gBh7VJM/YHvKrs8TXwY35sglgR/TzKUmFaEe2nZEHwI=
Subject key identifier:   7F:3C:73:D2:0C:F1:EF:C6:47:3B:5D:17:27:96:CA:6B:8D:97:7E:E3
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA797C1087990B2595467E1DD
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9cd093a-d969-3e0d-9a23-a2e018c7c252.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:2780::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:c1:08:79:90:b2:59:54:67:e1:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0f42d98a-dda8-444a-a8d7-f9a99296d38d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:09:06:24:90:eb:83:57:0f:35:e3:97:00:71:
                    cf:03:da:55:bd:f3:6c:62:fd:f5:43:a9:79:da:b9:
                    9b:6e:ce:6c:da:6c:38:e0:0e:60:ae:2f:07:4d:7f:
                    aa:62:f9:d3:0d:14:a6:f0:0a:ea:0f:47:c1:9f:5a:
                    eb:73:4a:5e:97:cf:87:3e:63:44:9f:bc:63:4d:92:
                    36:e0:b6:cc:7b:89:c7:02:f2:cc:af:0b:39:c3:b6:
                    6a:1c:72:ad:0f:23:4d:db:52:0f:e2:43:41:30:b4:
                    e2:27:a5:39:ff:1f:f5:72:e2:cf:26:e9:c5:84:1b:
                    c4:63:25:46:3b:68:2a:3a:dd:81:10:be:7c:14:02:
                    5f:5a:79:f7:10:9b:ab:dc:23:4d:01:8c:cf:f9:95:
                    99:33:c2:5d:c4:59:ee:1e:9c:0f:e9:d8:c8:6a:4e:
                    cb:a7:b0:95:67:db:c5:fc:31:a1:75:2a:92:ef:e5:
                    2b:e5:92:a9:3b:a4:d4:8c:28:bc:a7:90:00:cf:be:
                    be:4d:f5:c2:49:72:1e:0b:df:cc:b8:af:cd:f3:f4:
                    73:ee:32:40:d6:46:c4:60:77:c0:4a:08:82:a6:5b:
                    ef:7b:90:57:74:a6:87:ae:9d:dc:04:07:dd:71:9a:
                    82:4b:e1:a8:e1:36:31:7c:31:9c:23:7b:3f:b0:95:
                    3d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3C:73:D2:0C:F1:EF:C6:47:3B:5D:17:27:96:CA:6B:8D:97:7E:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9cd093a-d969-3e0d-9a23-a2e018c7c252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:2780::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:df:0d:a0:15:ba:b1:fe:c8:d6:43:7c:70:3c:61:5d:0d:2c:
         25:3b:55:51:b5:42:63:95:dc:e1:7d:e1:0d:0b:f4:3a:5a:4c:
         31:2d:a2:23:03:1d:26:08:ed:66:6e:ef:b8:72:b1:f4:23:4e:
         59:2a:4c:9e:9a:cd:5c:42:09:8e:94:fe:ec:b7:37:cf:8f:90:
         3f:7d:c1:95:f3:24:c8:20:3d:09:8b:17:21:24:16:1b:bb:4a:
         4b:f3:b3:23:e0:f0:ec:9e:b6:45:9a:41:ba:f4:f6:df:4f:d4:
         b7:62:65:11:25:eb:a1:09:eb:13:9f:8c:15:53:27:24:2d:24:
         d4:41:84:d0:51:3f:ad:24:52:c8:67:47:22:a7:05:62:a7:7b:
         b8:27:97:99:01:89:66:a6:8f:20:6d:78:9b:d1:96:6d:ef:41:
         ab:0f:66:e8:64:b5:9b:4c:03:b9:a5:ca:e9:78:61:10:8e:3e:
         21:5a:b4:e0:87:c5:b4:33:6c:89:50:27:30:88:b3:ca:dd:d7:
         0a:ea:c3:f0:ae:f0:19:9c:28:4c:90:f7:37:73:8f:95:ed:1b:
         93:3b:84:61:d7:02:3e:94:d9:bb:7c:9a:be:43:d0:e1:f7:70:
         fe:0e:c8:99:2c:6c:af:c3:54:1f:b4:ab:f0:dd:04:93:3e:ac:
         26:2d:4c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:01:35 2026 by rpki-client