Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/baa08762-89b6-3451-a73d-b9a5b614b39a.roa
File:                     baa08762-89b6-3451-a73d-b9a5b614b39a.roa (raw, json)
Hash identifier:          ZKz9F5Ye4OB0kRvN7LdC61HXVjPHDCSo7myobHHUVNI=
Subject key identifier:   2B:AA:1F:E3:8B:4E:3B:A1:DE:B5:2E:B1:51:3E:8C:3A:EC:CE:7A:D1
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584ED6FC83802D1B5D0A78925E00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/baa08762-89b6-3451-a73d-b9a5b614b39a.roa
Signing time:             Sat 15 Aug 2026 01:00:12 +0000
ROA not before:           Sat 15 Aug 2026 01:00:12 +0000
ROA not after:            Fri 13 Nov 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d81:9400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d6:fc:83:80:2d:1b:5d:0a:78:92:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 15 01:00:12 2026 GMT
            Not After : Nov 13 02:00:12 2026 GMT
        Subject: CN=51420de8-dede-40c4-a67e-e79c0ccbdbe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e7:17:e8:9e:73:03:61:cb:7b:74:06:fd:fe:
                    c6:4f:51:52:81:bd:5b:67:76:4d:d1:66:24:ec:96:
                    0e:b9:e1:c9:96:a6:de:e3:8e:7e:79:a2:a6:db:5c:
                    00:62:53:10:5b:7d:02:db:11:82:95:dd:0c:96:61:
                    2d:84:f6:f9:0a:c3:e5:79:7d:15:8e:77:d2:13:57:
                    c2:d6:71:e0:37:e7:25:8d:ad:ec:d3:9e:6d:c2:01:
                    c7:d7:2d:36:fc:cb:2a:1e:54:93:97:9e:d7:94:e1:
                    d3:3b:19:97:eb:47:2b:05:21:3c:1e:c6:bb:de:d2:
                    f2:96:f0:73:ea:25:14:6c:35:76:66:6e:7d:72:23:
                    97:62:ef:ea:a6:1d:83:59:a9:05:b5:16:5c:49:a9:
                    e2:e5:d8:e3:cd:39:c9:3d:0d:be:df:7a:28:02:66:
                    23:cc:ed:49:07:81:ba:77:70:e9:07:8a:7f:e2:1a:
                    65:31:51:94:03:e0:1f:79:5f:43:b3:4e:8c:fe:e2:
                    93:c9:b4:b3:d5:78:44:9b:e4:26:0d:76:38:04:c0:
                    ee:1d:5b:1a:d4:ac:2e:cb:de:47:28:b8:1e:f7:3f:
                    2f:bb:04:0f:b5:ab:46:d1:04:0b:65:bb:d9:d4:e3:
                    e0:65:76:49:6e:66:bb:6e:22:26:6c:9f:1e:b9:28:
                    bf:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AA:1F:E3:8B:4E:3B:A1:DE:B5:2E:B1:51:3E:8C:3A:EC:CE:7A:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/baa08762-89b6-3451-a73d-b9a5b614b39a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:9400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:2f:35:c2:0d:b9:91:3e:9a:98:dd:99:fd:da:e8:67:2e:ca:
         40:0c:e6:94:9b:fc:f8:7c:33:1b:b6:e4:8b:8f:72:fe:35:c7:
         38:2f:dc:15:64:47:57:be:8d:57:2a:24:60:95:d6:0d:46:e1:
         1d:ff:68:b9:ec:91:70:b1:e3:4f:80:22:91:ac:ff:77:6e:f0:
         48:10:e6:a0:02:43:94:f7:ed:45:de:a4:56:60:22:82:63:83:
         07:2b:dd:47:18:0c:79:63:4d:41:71:70:b4:57:46:b6:cb:47:
         88:ab:1f:61:cf:97:ca:2e:f3:f8:fc:4a:ea:14:f5:33:d2:82:
         d0:3e:e6:a1:f1:71:01:44:09:99:a8:67:49:cd:9b:6c:a5:32:
         6e:d7:39:09:7f:af:af:9a:06:99:fc:28:bd:92:0c:5c:cb:ca:
         4a:b7:6b:37:1a:b3:eb:e7:84:61:e3:c3:61:4f:63:51:d2:6c:
         6f:93:b5:dc:c0:2a:05:b6:f7:ff:30:ec:53:9a:5a:10:a8:8b:
         06:53:f3:da:dd:b7:e3:71:44:cd:6c:6d:33:c9:a5:7c:16:75:
         b8:2b:d6:f2:4c:e6:81:1f:35:7b:0e:22:44:c5:2c:ce:40:b5:
         6e:62:f8:93:60:11:0f:8a:b7:29:c3:1e:be:f7:51:46:f6:ae:
         3e:96:59:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:46:38 2026 by rpki-client