Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d6b47269-d6bd-3161-8660-a6207ffe81db.roa
File:                     d6b47269-d6bd-3161-8660-a6207ffe81db.roa (raw, json)
Hash identifier:          mkTRPbAZojLcMb5204C07A0RMQtuMrNL1f1Dsx1lVGw=
Subject key identifier:   6B:A7:23:D5:F4:B7:3B:CC:4A:CC:DB:0D:57:ED:53:9A:DF:52:76:69
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F7FD636A6D638403DBCD832C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d6b47269-d6bd-3161-8660-a6207ffe81db.roa
Signing time:             Wed 14 Oct 2026 12:34:43 +0000
ROA not before:           Wed 14 Oct 2026 12:34:43 +0000
ROA not after:            Tue 12 Jan 2027 13:34:43 +0000
asID:                     19905
IP address blocks:        2604:2d80:d800::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:d6:36:a6:d6:38:40:3d:bc:d8:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 14 12:34:43 2026 GMT
            Not After : Jan 12 13:34:43 2027 GMT
        Subject: CN=e3778c73-1023-4a0c-ac63-586d99c3598d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a4:db:53:04:d9:c2:ad:f8:94:fb:79:5e:ac:
                    ce:f7:71:44:25:7c:96:34:f4:cd:f7:7b:10:48:d1:
                    60:b5:f5:f4:95:8b:98:78:85:b4:1d:33:57:07:67:
                    8f:ab:fc:37:2e:04:8f:9c:66:22:95:a1:5f:46:35:
                    a4:63:ef:b1:33:3e:cb:71:3f:a4:88:4d:34:45:04:
                    0e:9e:b0:ee:92:24:7e:e9:bf:5b:f2:f3:6d:55:a9:
                    54:60:4a:77:90:bf:d8:db:40:ef:e8:06:e9:f1:23:
                    be:e9:de:b0:5d:06:9e:24:9f:06:a3:92:ea:93:fc:
                    d4:f3:71:7a:f6:ac:50:82:34:ab:c9:59:fd:a3:dc:
                    ce:18:7e:e8:ab:35:bc:90:5e:bb:51:15:cf:c0:5b:
                    ce:33:83:cf:79:7d:7e:01:13:da:48:1c:d3:de:b6:
                    0d:f2:b3:b0:d6:84:ad:f3:8f:48:81:3c:e9:0b:f0:
                    15:44:37:5e:f7:01:e3:f5:1b:73:f1:a6:ea:d6:5c:
                    69:3f:f5:87:22:9e:43:d5:b2:83:e4:d3:21:de:e4:
                    de:f7:ea:b7:f9:b9:a5:e1:10:ab:4d:44:e4:f8:27:
                    53:c6:df:85:34:11:1b:1a:72:12:8a:db:d1:ad:e4:
                    c4:df:d1:d0:df:b0:91:90:8f:0b:fb:94:6e:15:1b:
                    45:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A7:23:D5:F4:B7:3B:CC:4A:CC:DB:0D:57:ED:53:9A:DF:52:76:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d6b47269-d6bd-3161-8660-a6207ffe81db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:d800::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:35:f4:21:43:a6:58:1c:53:73:70:b4:83:a9:73:4c:7c:c8:
         1f:d7:66:be:1a:80:83:fc:06:52:34:5e:ba:a2:67:55:2b:11:
         fb:a5:94:ec:19:24:93:fd:bb:d5:8b:37:be:36:c7:39:bc:e7:
         c4:3a:42:9b:72:09:0b:0b:54:c6:2a:b5:e9:e3:87:7a:c7:19:
         1f:8d:89:24:19:a6:1b:4b:62:2f:aa:04:9b:a6:aa:66:05:a1:
         c2:1d:ac:0f:af:b4:ac:f9:23:46:48:a9:7c:ee:15:05:8b:02:
         21:ca:0d:a3:e4:82:cc:3f:e3:99:b6:69:6f:8c:55:2f:14:4a:
         ab:a4:76:7d:eb:44:9d:b9:bb:af:5c:07:a3:a1:be:46:f0:c9:
         ac:0f:ca:7e:f3:97:8c:90:48:76:7f:c5:94:d7:b1:26:73:1e:
         f7:1b:ee:7b:22:43:ff:98:1c:71:98:df:c4:92:3e:7f:19:3f:
         8a:81:19:6d:ce:ec:4e:cb:77:f4:e9:24:8d:9c:cf:52:39:e0:
         3b:1d:4f:e9:f4:39:02:af:6a:c0:57:8c:f3:34:16:b5:c3:26:
         3f:77:10:fd:e9:46:48:9c:6b:cd:c5:5a:d2:1e:5d:01:f7:cd:
         78:7a:5a:6c:98:f8:9a:5b:30:37:9e:b5:b5:b9:c8:e4:8d:93:
         23:e3:26:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 00:19:23 2026 by rpki-client