Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af24fabb-a446-3593-9b02-7544b4fbbf3c.roa
File:                     af24fabb-a446-3593-9b02-7544b4fbbf3c.roa (raw, json)
Hash identifier:          v+fslKzPFbsWZPRwb3UkLJVRkOUv61dncQ3GtzaUFvc=
Subject key identifier:   DE:6E:AF:C8:B6:C4:77:2C:33:93:99:BC:65:0A:55:98:74:CC:0E:1C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EE4F1F32F7B5E0442D81F7880
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af24fabb-a446-3593-9b02-7544b4fbbf3c.roa
Signing time:             Thu 20 Aug 2026 01:00:12 +0000
ROA not before:           Thu 20 Aug 2026 01:00:12 +0000
ROA not after:            Wed 18 Nov 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:3000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:f1:f3:2f:7b:5e:04:42:d8:1f:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 20 01:00:12 2026 GMT
            Not After : Nov 18 02:00:12 2026 GMT
        Subject: CN=c887289a-54de-4ae0-b7d3-fe1fabac9966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5a:57:c7:f0:6a:c0:ae:c0:aa:98:1b:cf:08:
                    56:e8:bf:83:de:3f:b5:03:d3:12:3e:46:4b:95:a9:
                    f1:9a:53:fe:8e:58:43:26:b3:21:6f:e1:4c:eb:64:
                    0e:78:30:09:14:10:8b:ff:84:65:92:3a:80:9a:25:
                    c1:73:0c:cf:ca:9d:b7:10:06:a5:74:44:49:f3:b9:
                    b7:47:da:3e:d3:8f:3a:d6:60:00:a2:c2:b3:fd:a1:
                    55:22:06:d9:0a:fa:d2:cf:22:35:19:f3:3f:5e:8c:
                    6b:aa:13:0e:18:7e:af:7b:c7:6f:97:26:b0:53:bd:
                    86:dd:5b:d5:d2:68:26:73:a5:8c:89:a0:63:b9:19:
                    0b:0a:08:3c:da:61:50:f2:89:fa:a2:2a:6d:2d:a9:
                    a7:dc:64:b3:a7:e7:09:15:f7:13:7a:b1:d5:4a:82:
                    ed:a5:91:43:a2:b3:23:05:4c:96:79:d4:e0:4f:92:
                    bb:46:b3:97:7b:ba:89:b5:00:88:83:1a:21:a1:6e:
                    ed:d0:14:27:f0:14:38:d1:bc:51:05:e1:1b:44:f7:
                    f0:84:7d:af:5e:2c:aa:c7:c6:43:6e:2f:31:cd:ea:
                    5f:e0:e0:52:f9:e3:b3:6d:4c:2f:05:9a:28:1e:b3:
                    e9:73:62:10:38:14:50:f1:ce:97:ec:d9:d0:24:02:
                    86:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6E:AF:C8:B6:C4:77:2C:33:93:99:BC:65:0A:55:98:74:CC:0E:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af24fabb-a446-3593-9b02-7544b4fbbf3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:3000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:24:24:5b:3f:94:73:b9:59:c3:a8:ca:e7:e9:c2:76:50:a4:
         77:bd:a7:90:5d:05:d8:ae:fb:a8:4e:c3:a8:81:fc:28:52:c5:
         a8:16:9b:42:46:d7:e0:20:ad:a6:ca:55:05:b6:fd:d5:b5:db:
         7b:4e:f2:88:7b:a9:20:18:24:69:f8:9a:c3:af:64:0a:55:b6:
         f0:ee:8b:6f:6a:97:27:68:e1:2c:4d:17:be:a7:0f:aa:bb:ff:
         bd:e5:68:4c:46:6d:0f:93:96:db:21:0e:9a:2a:ae:c4:dd:27:
         99:ae:17:fb:eb:ec:19:0d:87:e7:ad:ad:28:6b:77:62:44:2e:
         a8:48:9c:43:38:50:66:3f:ae:45:2a:e2:61:a5:ca:c5:b6:77:
         a5:bb:08:91:bf:0c:d1:08:1c:49:1e:57:7d:6e:3e:2b:0b:ab:
         46:d9:47:ae:7f:61:6c:1a:9d:e5:f5:16:5c:ef:22:50:54:e2:
         bd:c6:ce:92:ec:af:64:a4:e7:9e:06:98:24:8c:9c:67:a8:94:
         b5:87:79:d3:1a:d5:42:3d:96:38:68:16:1a:1f:ac:9d:e0:58:
         c8:e0:f2:8c:d3:1d:3e:1a:07:93:17:d5:f5:f3:a9:07:cd:d0:
         e4:36:ae:52:45:3b:40:4f:43:cc:6c:1d:ad:7b:9b:18:e6:01:
         e1:c6:15:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:01:22 2026 by rpki-client