Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bbf596c4-6bbd-3f84-bd8f-494730637821.roa
File:                     bbf596c4-6bbd-3f84-bd8f-494730637821.roa (raw, json)
Hash identifier:          Hs40neH5rFPEBe/NLtn4A3iLIympr6wGEz9OcvXTsXs=
Subject key identifier:   47:DB:19:A9:79:5F:F7:B3:AC:60:E9:FE:0B:CA:B0:42:05:63:C3:9B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DF358A5BD9F1EEEC195EC6E80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bbf596c4-6bbd-3f84-bd8f-494730637821.roa
Signing time:             Mon 25 May 2026 12:01:37 +0000
ROA not before:           Mon 25 May 2026 12:01:37 +0000
ROA not after:            Sun 23 Aug 2026 12:01:37 +0000
asID:                     19905
IP address blocks:        2604:2d80:e80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f3:58:a5:bd:9f:1e:ee:c1:95:ec:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 25 12:01:37 2026 GMT
            Not After : Aug 23 12:01:37 2026 GMT
        Subject: CN=1a2be366-1fe9-4719-8ba4-5175c7262371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b1:a8:c6:3c:de:8c:9c:3c:5b:e0:69:3a:f8:
                    39:ca:aa:6f:6b:6f:42:42:69:50:63:63:65:fc:00:
                    45:3d:90:05:38:42:ce:fd:d7:f2:8c:b8:da:7c:7b:
                    85:79:97:6f:07:96:47:e0:99:88:a4:67:65:16:ae:
                    8e:8c:44:a8:51:12:1f:31:2b:61:b2:7e:37:f6:da:
                    7d:7e:6b:84:18:cd:0d:80:7e:74:0c:3c:2b:1b:b5:
                    33:50:cc:46:a2:a4:28:fd:ac:9d:be:80:c9:e1:d3:
                    08:a7:c4:35:72:a3:61:ea:67:19:1a:da:cb:17:52:
                    ac:0c:6c:d0:59:72:37:5a:5e:59:ea:41:83:b5:b3:
                    38:33:97:52:6a:4e:6f:1a:62:2c:3a:20:52:e4:a8:
                    e7:a9:da:f9:51:44:23:9b:d3:5c:66:29:ba:d3:d4:
                    ab:02:87:c3:b4:b9:b8:10:c4:d4:c9:83:39:c7:38:
                    0d:64:53:d1:b9:5f:65:97:51:19:99:51:a2:c6:b1:
                    b0:3f:d0:19:2b:6a:2e:7e:d2:68:9a:d5:bc:52:ec:
                    19:9e:f8:04:e9:32:e7:9d:ae:24:4a:a4:1b:a6:c7:
                    e3:58:81:06:55:5d:f0:2a:b2:de:9d:0e:3c:81:58:
                    ed:88:9c:3c:63:29:e6:27:73:a4:20:fb:39:df:1a:
                    51:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DB:19:A9:79:5F:F7:B3:AC:60:E9:FE:0B:CA:B0:42:05:63:C3:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bbf596c4-6bbd-3f84-bd8f-494730637821.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:e80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:fa:0e:23:46:25:70:c9:fe:9a:be:72:18:04:42:50:2d:93:
         84:d5:e9:0a:7b:ed:d4:74:93:29:03:be:ba:35:e9:20:a6:5c:
         7b:7b:1e:cd:7f:17:fe:1a:cc:ff:7f:0b:68:3c:b1:d3:0b:8c:
         1a:7c:03:94:94:f8:50:69:ce:28:b0:73:19:06:2e:6a:d5:06:
         ce:3f:0a:1d:70:e3:6a:c2:4c:cc:da:28:21:5b:6e:4e:80:51:
         8e:19:ee:0a:54:d3:ca:42:87:25:94:33:bd:83:7c:d2:3b:9c:
         a3:32:1f:bd:b4:d3:4b:4a:97:3a:c0:80:10:87:1c:f9:9e:7c:
         41:4b:22:b7:c7:54:b4:8c:71:9b:6c:7a:16:5c:f1:ed:1d:8c:
         0c:ae:f2:60:64:78:35:b2:17:28:b2:1f:82:7e:ac:9c:df:cd:
         fc:9e:88:b2:57:ce:88:6e:55:3c:b4:5b:7c:67:64:ea:aa:04:
         7a:ae:7c:3e:02:26:df:76:4b:05:31:5b:de:5d:a5:f6:48:1f:
         24:f5:98:f0:b4:a0:38:b8:7f:33:f8:42:04:5b:33:65:74:9f:
         88:64:40:68:a2:7e:39:bc:4f:fe:92:dc:b7:26:bc:5f:54:c5:
         6a:51:d9:99:79:01:59:b2:23:84:ad:56:7e:d5:5a:21:04:c3:
         ff:dd:df:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:18:53 2026 by rpki-client