Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c20a116a-c4ac-3267-98a1-fc64fd26cb3a.roa
File:                     c20a116a-c4ac-3267-98a1-fc64fd26cb3a.roa (raw, json)
Hash identifier:          bNW5ZoO6s4Prvdd2T6CF0ywTffszOQYjaTC2Fr+888I=
Subject key identifier:   BB:95:CF:C7:59:81:05:C6:03:A1:A1:13:61:74:78:EE:FA:BF:11:13
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F7FD62DB0254F58B198836B80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c20a116a-c4ac-3267-98a1-fc64fd26cb3a.roa
Signing time:             Wed 14 Oct 2026 12:34:39 +0000
ROA not before:           Wed 14 Oct 2026 12:34:39 +0000
ROA not after:            Tue 12 Jan 2027 13:34:39 +0000
asID:                     19905
IP address blocks:        2604:2d80:400::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:d6:2d:b0:25:4f:58:b1:98:83:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 14 12:34:39 2026 GMT
            Not After : Jan 12 13:34:39 2027 GMT
        Subject: CN=e3222e2c-9a9f-46b8-8b90-36bcff275e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e7:ce:02:00:3d:50:e5:ec:11:a5:7a:cf:c4:
                    f4:4e:14:41:7d:b5:41:78:cf:bc:f1:b7:c2:a5:47:
                    da:4d:33:41:85:dd:ee:60:d4:1d:e6:79:77:db:37:
                    d0:ae:eb:8f:67:25:1a:8a:27:7f:77:5f:c4:17:0c:
                    af:f1:61:09:cc:fd:e0:8e:27:32:f9:68:94:c5:fb:
                    d0:0c:70:f0:0d:e8:07:27:15:44:b9:e8:fd:9e:57:
                    28:43:11:3a:37:85:43:ac:7e:38:4d:0e:a5:8a:f7:
                    25:e2:40:c1:9f:f7:65:11:d9:e5:e9:36:e2:a2:6e:
                    fd:a1:75:62:97:9f:62:da:82:bf:20:61:a8:98:57:
                    d3:fd:43:f0:89:96:69:fb:fc:a4:bd:87:32:9e:af:
                    76:f9:94:6c:e8:69:2d:19:5e:56:49:37:de:2d:5a:
                    a4:0e:24:e0:ab:7b:35:fc:d3:5b:04:79:0c:a0:b4:
                    e0:75:02:6d:ea:2c:8b:27:89:3d:49:c0:ae:66:aa:
                    b8:d9:89:65:ab:a3:a5:8a:83:34:37:ac:c7:81:92:
                    3c:de:fd:05:59:ff:10:02:a5:ee:fd:46:42:2e:91:
                    31:a2:1f:c8:08:f3:1a:ce:97:84:2e:83:8c:78:6d:
                    11:30:c6:09:74:00:5d:71:7c:92:00:83:fd:46:dc:
                    43:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:95:CF:C7:59:81:05:C6:03:A1:A1:13:61:74:78:EE:FA:BF:11:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c20a116a-c4ac-3267-98a1-fc64fd26cb3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:400::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:26:5c:29:df:6d:d3:21:81:70:eb:a4:b4:95:c4:0d:18:84:
         69:18:0a:14:d6:b4:6a:59:5e:13:34:62:3b:99:ed:c1:3b:46:
         ca:c7:2d:ef:ac:dc:61:72:38:2b:07:a1:a2:ed:46:6a:7c:2a:
         30:19:14:05:98:2a:f1:b9:26:44:67:6f:1b:4e:65:c0:0a:38:
         bc:b0:41:d2:9b:b9:c3:75:b1:75:dd:41:59:87:d1:9d:02:27:
         27:30:e2:ba:89:3d:6b:8a:46:17:c6:db:cc:59:26:5b:5e:b6:
         b0:ca:ae:5c:b3:8f:06:55:e3:3a:a5:8a:e8:36:b1:1a:16:bf:
         f7:47:c8:7e:31:c7:6c:a8:e4:68:d8:4a:46:db:b1:ab:a5:03:
         c3:e1:00:05:83:e1:f8:17:76:93:29:71:df:4c:8f:04:24:3f:
         01:37:63:43:e1:b8:a1:a7:a9:de:8f:3f:e4:c0:49:50:88:4b:
         d1:7e:5b:fd:89:b4:c5:74:42:23:a9:88:6b:38:5f:01:b0:55:
         27:72:fe:18:8a:26:5e:b9:00:a2:37:97:1c:84:63:f3:df:8c:
         81:65:13:bd:db:84:ec:46:df:2d:97:14:d4:1d:76:fb:54:ec:
         9c:43:f8:39:89:df:11:95:5a:4a:70:3d:23:1f:9f:88:15:f6:
         e7:be:ee:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:36:31 2026 by rpki-client