Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba8410fd-ecfa-325c-806b-af21cf081d2b.roa
File:                     ba8410fd-ecfa-325c-806b-af21cf081d2b.roa (raw, json)
Hash identifier:          ZNrrGV4WsIVAKdf4w5nlRYdNF9VO42EyKNjhXli6qb4=
Subject key identifier:   9D:B2:76:39:F8:B6:0B:98:F8:39:37:58:5B:68:DD:C0:79:20:95:66
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EBD0DD16F744AB4DBCFBCD5C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba8410fd-ecfa-325c-806b-af21cf081d2b.roa
Signing time:             Wed 05 Aug 2026 18:04:08 +0000
ROA not before:           Wed 05 Aug 2026 18:04:08 +0000
ROA not after:            Tue 03 Nov 2026 19:04:08 +0000
asID:                     19905
IP address blocks:        2604:2d80:5c00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:0d:d1:6f:74:4a:b4:db:cf:bc:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug  5 18:04:08 2026 GMT
            Not After : Nov  3 19:04:08 2026 GMT
        Subject: CN=8838a748-7ec7-43b3-bb3e-787b6f267176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bb:e7:cb:12:80:f7:60:1b:d7:12:19:cf:a3:
                    5f:21:63:ac:c6:43:97:02:99:ec:bf:66:64:b9:74:
                    a2:a7:37:91:55:2c:d3:8a:0e:71:75:14:9e:c1:78:
                    95:bf:fb:93:86:1a:48:30:f8:fe:8b:e6:5f:5b:7e:
                    89:8f:54:64:cc:ac:99:cf:d7:23:e6:f7:de:f2:80:
                    43:e4:48:58:5c:7f:3c:7f:c0:b5:32:0b:84:52:bc:
                    6f:3a:08:d9:78:aa:9f:c1:1c:61:4f:5f:df:78:77:
                    40:46:90:84:37:e7:48:ed:72:f5:f5:ab:43:47:b6:
                    25:1f:58:bf:4d:50:b8:db:ce:73:cc:cd:6a:b0:88:
                    98:f0:c2:a9:52:47:e4:96:c0:b6:cc:cb:b6:f6:e7:
                    fe:ec:4a:e2:bd:47:06:c1:ba:e1:1d:d9:a8:bf:01:
                    98:b7:33:b3:50:97:50:37:7b:fb:f0:d5:0f:ab:8c:
                    d1:6d:31:8f:52:02:a0:20:29:5d:2e:91:cc:cb:75:
                    f5:ff:36:f9:5d:66:db:9f:ea:6e:55:db:3d:38:cc:
                    f8:48:e5:a0:7f:ad:d7:2c:8a:35:8c:cc:9e:b7:47:
                    b7:96:e4:7f:b5:17:4b:52:c7:82:0a:6f:36:b3:b8:
                    18:e2:33:d6:ce:06:92:f9:24:99:3e:89:f6:ad:1d:
                    97:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B2:76:39:F8:B6:0B:98:F8:39:37:58:5B:68:DD:C0:79:20:95:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba8410fd-ecfa-325c-806b-af21cf081d2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:5c00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:af:9b:30:ee:5a:89:ad:01:95:b7:0e:8e:06:3f:ab:b5:f3:
         07:78:aa:b2:75:cd:f0:b1:07:36:1c:05:4d:76:df:78:98:83:
         ef:5e:96:93:22:02:cf:0c:cd:cd:95:8f:3c:eb:91:49:4d:23:
         9a:da:fd:4d:a1:e3:4f:65:e0:b1:93:c7:13:ab:69:a4:f0:fd:
         2c:9b:21:3f:48:09:3a:7b:45:ac:43:5e:0f:7b:d0:f7:83:7d:
         68:4f:24:50:a0:87:29:8b:c6:56:7b:c3:66:3d:10:d9:c0:6d:
         02:2c:95:d0:1d:e0:73:07:40:ed:17:16:1c:e9:ea:df:93:07:
         44:05:41:d5:04:00:76:f0:43:c5:30:ce:c4:46:2b:fc:09:54:
         7e:d6:e3:99:b4:2c:ce:13:26:40:57:53:d5:d5:6a:14:68:8d:
         ad:61:0b:d9:89:a1:f6:26:25:13:37:dd:9d:61:37:a5:ee:fc:
         6e:42:6b:68:60:51:23:b2:39:d4:d9:c8:02:03:4d:b0:d1:c4:
         e3:6f:65:3f:95:62:f0:a4:fd:f4:45:f5:ce:6e:d6:01:bb:76:
         4f:0d:d4:42:04:e6:61:1f:c8:7d:58:95:0d:e2:25:20:33:2d:
         53:41:27:2d:30:51:68:4f:21:c8:e4:bc:8d:88:99:3a:3b:e5:
         c0:5b:c8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:24:10 2026 by rpki-client