Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dffc65ac-b880-3d4a-a065-093d70d8a397.roa
File:                     dffc65ac-b880-3d4a-a065-093d70d8a397.roa (raw, json)
Hash identifier:          siWvfEdo7vGKpLusBOnHj9fYM7x5/2HZSmZRlFsJPPY=
Subject key identifier:   9C:E9:D0:4B:B8:BF:61:7D:00:DF:2D:60:E6:9B:99:0A:B5:3E:4D:F0
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D1707F099850562483C164340
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dffc65ac-b880-3d4a-a065-093d70d8a397.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     30036
IP address blocks:        2604:2d80:4e80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:f0:99:85:05:62:48:3c:16:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=0a91dbd8-e10b-40e7-8923-b522623cc1ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:56:75:a2:67:46:55:84:5e:c3:67:dc:9a:27:
                    a5:d8:c8:f9:63:4b:3f:6b:cd:e2:e6:8f:b0:ef:bb:
                    f8:ca:ab:11:aa:7f:1f:5b:3e:54:15:b3:aa:73:c0:
                    b6:88:64:6c:1b:ed:ac:18:20:cd:f8:78:e3:88:72:
                    13:47:f1:d1:e3:d8:d8:30:73:bd:d1:2e:49:19:2c:
                    c2:7a:7e:a6:a5:e8:93:89:72:fe:39:b8:bf:66:31:
                    44:cd:07:cc:5c:b9:dd:dc:a7:f6:4b:b5:6e:c2:0a:
                    80:73:3f:24:72:95:64:e0:c1:b2:e9:fd:78:d4:7c:
                    53:17:95:e3:00:cf:63:67:82:9f:b0:01:ba:34:86:
                    ec:b6:61:ad:9e:6b:73:0e:85:2f:87:c7:ac:37:a2:
                    3b:ee:99:46:ae:08:e0:58:2b:cb:a9:cc:2e:2a:82:
                    7a:61:26:da:a8:b6:14:b3:ef:03:e2:73:87:2a:0d:
                    2a:97:3c:a9:5a:7c:8a:d5:3c:01:ec:c6:f5:35:0f:
                    6a:8a:57:38:42:89:f3:4b:b1:cd:fe:2a:f5:c2:fd:
                    2c:1b:a2:ed:d2:63:68:fd:84:39:78:c1:61:36:e3:
                    89:cc:a3:14:56:b1:92:08:b3:af:65:1e:c3:51:0d:
                    d8:65:eb:a4:a7:1b:19:33:74:a6:33:35:a5:1b:26:
                    ee:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E9:D0:4B:B8:BF:61:7D:00:DF:2D:60:E6:9B:99:0A:B5:3E:4D:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dffc65ac-b880-3d4a-a065-093d70d8a397.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:4e80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:4f:b9:59:c5:06:7a:46:17:a8:cf:4e:eb:10:4d:b2:17:db:
         b2:69:2c:af:05:b7:54:e4:f5:67:90:52:53:63:b9:d1:28:25:
         49:77:c8:d2:c7:9f:4c:1b:97:30:f8:b9:2f:25:55:09:ec:1b:
         f5:57:01:a4:7f:84:72:30:79:8b:47:cc:e9:a0:19:0d:a2:5c:
         69:15:be:16:20:4a:14:81:03:61:20:b8:50:95:96:a8:c6:2f:
         73:91:0b:2a:3d:e6:49:b1:30:81:4b:44:45:24:57:e7:4f:02:
         5b:7f:75:56:12:4f:5a:12:bf:c8:d2:47:9f:f9:7c:3d:c9:21:
         9e:72:94:42:d5:d2:36:e9:4e:80:75:ce:c0:be:8a:59:e9:e9:
         63:cf:92:fb:23:42:08:a8:8b:b8:3c:e5:68:51:f0:62:24:71:
         17:06:7e:83:31:37:b6:a4:5b:8c:8f:65:a3:e4:8c:65:b1:1e:
         9c:d1:75:bf:02:d3:e3:04:07:ad:11:60:9e:d3:10:c7:64:85:
         5d:2e:35:09:82:c0:10:4f:96:5c:39:89:a1:44:26:e2:97:16:
         ab:23:32:45:c0:0f:0d:eb:a9:d8:21:cd:a5:9f:fb:08:0c:72:
         a5:36:a0:e3:1b:6c:cb:52:c8:39:6b:17:12:4c:5f:22:d2:b2:
         a7:95:46:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:42:10 2026 by rpki-client