Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5a1f46b-864c-3312-8c6e-b2be1f00a1af.roa
File:                     b5a1f46b-864c-3312-8c6e-b2be1f00a1af.roa (raw, json)
Hash identifier:          43fCUHQ/cwswmeS1/Hweur2mDX7aOApZgumMwcUBc6c=
Subject key identifier:   51:2D:7C:5D:53:27:90:AB:41:10:85:5A:D2:21:E3:DF:91:08:4C:49
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E2D9F0791C2E8472390803C80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5a1f46b-864c-3312-8c6e-b2be1f00a1af.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d81:3280::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:07:91:c2:e8:47:23:90:80:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=380c5159-02a6-4e44-b81d-e325923ff51a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:72:15:b8:28:e8:fb:44:d7:e2:4f:46:33:0e:
                    ea:b9:fd:1f:0c:27:dd:ef:96:46:b6:f7:36:e1:05:
                    0f:ca:f5:c0:7d:59:e8:29:37:d1:0a:2b:c1:95:f8:
                    01:f8:bd:2a:aa:95:e9:c0:a5:57:a9:38:1d:89:f7:
                    6e:8a:22:7e:71:ee:8d:27:52:e6:e2:df:67:95:43:
                    81:2a:64:94:e7:db:22:86:69:fd:aa:9f:97:2b:d3:
                    74:8e:af:0b:b7:26:3f:f1:e1:e3:67:a8:ac:8f:29:
                    29:0d:e0:5b:34:73:7c:28:91:f8:79:cb:e1:03:b0:
                    01:8d:62:1e:92:5c:bc:7e:75:81:64:23:af:5d:bb:
                    6e:93:b5:60:0b:de:12:9d:46:31:3d:85:50:d3:a1:
                    16:ca:a7:17:4d:dd:cd:b2:b9:89:62:64:51:58:c8:
                    55:92:ef:a4:19:5b:34:9e:c0:05:e1:6d:45:c3:d3:
                    8f:e4:4f:79:31:b6:8c:c7:6f:53:c3:cf:32:f1:4a:
                    d3:2b:6d:78:6e:94:b9:28:e3:3f:30:2c:90:2f:bd:
                    a1:56:24:09:be:09:e6:7f:22:59:2f:58:29:24:c9:
                    ab:4d:30:2e:97:0a:73:8c:00:eb:fc:cf:cd:da:e2:
                    59:f8:9d:be:f6:a1:c5:d5:bb:f7:8b:4e:8b:b5:4a:
                    33:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2D:7C:5D:53:27:90:AB:41:10:85:5A:D2:21:E3:DF:91:08:4C:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5a1f46b-864c-3312-8c6e-b2be1f00a1af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:3280::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:3b:72:35:9e:48:9f:c2:56:e4:a5:5b:f9:ca:76:dd:c4:ec:
         e9:0d:03:e1:2a:be:a1:10:5f:d6:0b:a8:d9:99:4c:66:6e:e4:
         50:fb:da:6c:d9:ff:df:ec:3b:7d:93:48:bf:cd:78:9d:71:88:
         d2:32:6a:0e:f1:6b:ef:2c:25:08:d6:c8:9b:35:d5:8a:34:3c:
         89:7f:bb:da:c3:f2:14:c0:b0:38:9f:f0:ec:6c:a8:83:9a:ab:
         dc:50:ff:3a:76:f8:75:86:0b:fc:5e:2d:00:d6:9b:3e:31:8b:
         c2:86:14:b7:41:63:7a:ab:da:0b:ef:7e:91:89:d5:93:31:32:
         b3:72:9d:39:bf:8e:76:8b:66:4e:8a:63:2d:bf:2f:90:a1:a2:
         53:b7:ef:c7:a2:38:08:12:ac:ef:dc:4a:1c:92:8d:b2:89:71:
         94:cc:d6:81:ee:3b:ac:2d:28:b6:bd:46:75:e9:3b:5f:0e:1a:
         09:c5:1c:e0:c3:8d:41:c1:57:db:d0:3d:16:80:e3:84:0d:77:
         74:67:95:e3:90:4e:35:fc:c1:e2:ce:ae:ed:42:1d:e0:ee:50:
         ab:6d:be:ea:a9:40:93:44:27:f9:14:8f:80:e1:9e:de:7d:6f:
         15:35:8a:00:95:11:ef:ab:44:93:2f:54:be:00:78:a0:c8:e0:
         63:12:a7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 03:13:04 2026 by rpki-client