Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1b4cb94-a61f-38ff-9c01-0feadbd16920.roa
File:                     c1b4cb94-a61f-38ff-9c01-0feadbd16920.roa (raw, json)
Hash identifier:          yLGSpHp5pdwjEbSTY3uxFKRwQNlnsImrrjTfb4TMBzc=
Subject key identifier:   A8:CA:F5:CC:B0:8E:DE:4B:4D:0F:94:D7:C7:16:FB:63:45:86:00:E8
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F778362978575EF88261DFA40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1b4cb94-a61f-38ff-9c01-0feadbd16920.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d81:8c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:83:62:97:85:75:ef:88:26:1d:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=7a1f0cd5-9757-480e-a651-f384213a7466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d3:e6:c0:b7:73:e1:7d:ce:ef:7a:7e:02:45:
                    66:bc:ac:ae:f4:e5:f7:23:12:c3:1b:fe:67:41:c0:
                    c2:2b:3c:2f:b5:a4:38:4f:13:5a:37:33:2c:d6:7d:
                    0a:ac:91:61:f0:8f:be:86:41:06:36:fd:8c:85:df:
                    05:63:49:8f:c6:df:e0:c1:63:e0:35:d6:14:32:ef:
                    50:a7:5a:7d:2c:d1:a4:02:d1:4e:84:e4:be:64:6a:
                    66:e9:87:21:5b:06:b8:18:dd:da:42:4a:cd:03:c9:
                    15:6c:6b:0f:da:5e:0b:69:da:43:db:00:be:fd:3d:
                    3e:64:6d:e4:cf:0a:1f:d7:85:c3:28:46:88:f4:4b:
                    88:23:d0:3d:30:b3:6e:df:68:26:4c:8d:59:c4:f9:
                    0d:85:04:0f:e5:1c:ce:9b:c2:37:12:88:d6:1b:b3:
                    1a:55:e3:5b:42:da:b7:5a:54:33:1c:4f:c9:d9:9a:
                    57:c3:cb:b5:85:2f:df:8d:68:72:5d:2f:87:d8:02:
                    d0:dd:5d:0d:14:d9:77:6e:a7:50:5a:56:68:76:cb:
                    bf:04:ce:f4:7c:fc:db:fe:ec:ba:f9:ec:98:bd:40:
                    26:4f:82:49:9c:45:c4:ca:d8:24:83:02:c7:93:0d:
                    e9:ef:8d:d0:7f:5c:9a:87:3a:36:5c:9d:82:52:be:
                    3f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:CA:F5:CC:B0:8E:DE:4B:4D:0F:94:D7:C7:16:FB:63:45:86:00:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1b4cb94-a61f-38ff-9c01-0feadbd16920.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:8c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:48:a1:9d:e0:f5:56:14:92:89:17:7b:74:82:f3:b1:3e:61:
         d8:6c:c1:e0:d6:ee:de:ef:0f:45:1f:ba:68:72:3b:ee:93:2c:
         1e:71:50:9b:8e:8f:48:ce:f0:e4:ea:00:c9:72:5c:a6:07:05:
         79:5c:8e:5b:e0:fb:69:e7:20:1d:36:4b:fc:20:d6:18:10:e2:
         0d:c8:14:1a:1f:b3:fe:eb:9c:02:0b:54:f0:b6:cc:d7:d5:9b:
         f7:35:da:40:44:32:ef:9f:d7:f9:f8:e5:e8:83:13:a2:31:55:
         70:d2:83:ca:64:c7:9b:f7:2f:0a:45:d0:56:5f:37:31:c1:f4:
         6a:ff:44:0d:55:be:aa:f9:ba:09:ca:23:26:dc:b6:c9:1f:bd:
         50:d2:74:f6:b1:ed:cc:5a:a3:6d:de:d2:65:49:d3:64:91:0b:
         3f:bc:d6:44:07:87:8a:a6:8c:e8:c4:8b:38:6c:f4:75:06:34:
         11:50:e4:60:94:ed:40:7e:92:f5:8c:0e:1f:4a:60:a8:94:d5:
         52:46:b2:13:4f:f7:44:30:b0:12:c3:ad:c3:59:83:1a:c0:0f:
         14:46:e0:48:66:92:52:40:6d:7e:6a:4a:18:e9:8d:15:aa:72:
         b3:59:83:93:5f:4f:ae:a5:64:a5:41:70:76:bb:f2:d6:89:0a:
         5b:cc:d5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:56:45 2026 by rpki-client