Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad26cd58-9d63-3f93-a13b-be5480b3e7fe.roa
File:                     ad26cd58-9d63-3f93-a13b-be5480b3e7fe.roa (raw, json)
Hash identifier:          l0K5yVwJtVWrEZZWJCLxntZ5Klm1XhLdfEytqVxStEE=
Subject key identifier:   B0:07:96:EF:D1:38:AB:B7:68:47:D3:92:3E:60:41:D8:23:98:B9:1D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA7A0EF064320697D129ADF00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad26cd58-9d63-3f93-a13b-be5480b3e7fe.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:b800::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:ef:06:43:20:69:7d:12:9a:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5f66dd94-1062-4e9f-a3bd-64baa0ac596f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c4:c9:e6:c1:00:2c:0d:9f:6e:bd:68:05:dd:
                    9a:1e:8c:58:c6:76:24:dc:59:38:44:f7:6b:89:60:
                    b7:9b:ee:a9:6f:ee:37:7c:87:74:b2:3f:55:05:94:
                    1f:35:f4:a7:5f:6c:13:9b:ec:66:6c:00:07:53:f1:
                    cc:8b:56:2b:ec:bd:24:7d:b0:8c:cf:24:d0:5f:77:
                    2a:8e:1e:65:0d:7f:57:0c:db:af:e4:3e:13:ed:1b:
                    a0:68:ec:a7:03:8e:e8:24:cb:1e:2b:d7:bb:aa:0b:
                    c2:ac:05:d3:8a:7f:65:e1:8a:fa:6b:a0:ce:e6:ea:
                    ea:93:e7:f8:15:65:81:76:28:88:bd:5c:63:91:30:
                    08:9c:f6:c8:fe:5d:f9:f2:02:46:a6:cc:cc:91:ff:
                    e6:39:bd:59:9a:80:52:46:eb:47:77:e0:2b:26:6e:
                    77:bf:8c:c2:d2:02:30:fb:ba:93:bb:e4:cd:52:0f:
                    7f:51:14:11:3a:ef:c9:f7:6d:84:a7:eb:4d:26:19:
                    4f:5c:85:4b:13:09:72:76:be:4f:96:34:2d:b2:98:
                    9f:49:7b:2c:bf:3f:02:5b:a7:c6:07:82:54:26:96:
                    82:95:11:d2:87:c3:76:49:be:b7:f9:c7:52:24:13:
                    92:ee:14:cb:25:a4:7d:6d:78:b5:85:f0:96:fb:05:
                    32:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:07:96:EF:D1:38:AB:B7:68:47:D3:92:3E:60:41:D8:23:98:B9:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad26cd58-9d63-3f93-a13b-be5480b3e7fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:b800::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ae:98:ba:59:4b:6c:a9:f5:35:bd:ea:fa:68:75:b7:a2:81:
         8d:b4:4a:f7:a2:3a:bf:b6:ae:26:76:a7:d9:cd:64:0d:02:6d:
         dc:cf:5d:39:fa:4e:4a:2f:b6:99:2c:68:0c:80:8e:b3:6d:0f:
         cd:7c:9e:7d:bc:b9:e3:8a:b8:fb:80:ba:0a:a6:1a:81:db:45:
         8c:40:47:dd:be:47:04:d1:39:fc:1c:84:33:cd:d8:52:bd:d3:
         57:53:21:50:fa:ff:6d:91:eb:84:19:67:3d:4f:cb:a8:79:65:
         47:34:ee:8b:67:03:33:67:af:bf:1f:be:14:d0:3e:6e:9d:28:
         77:86:d7:d3:87:71:d3:84:42:49:ba:07:12:6b:53:8e:40:8b:
         78:bb:26:e6:6f:6e:60:04:98:8a:63:6e:b9:ea:16:8f:1b:17:
         6e:c9:7d:f3:c5:e0:1c:1f:88:cc:72:c8:f6:97:d1:92:3b:08:
         09:d7:79:ad:ad:22:4d:6a:18:58:50:5b:3e:98:2c:9b:c1:2d:
         48:14:04:8d:d0:21:98:60:9d:70:21:49:c8:f4:2a:54:2d:a7:
         92:4d:ab:65:69:04:1e:2e:81:1f:b7:ab:46:f5:6b:ea:0f:b6:
         74:d9:65:5e:6d:b2:67:51:9e:be:a7:d3:86:5f:68:e2:1e:60:
         b4:9c:a8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:43:26 2026 by rpki-client