Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f5627f26-3f9e-3a0d-8341-e6f234e6754e.roa
File:                     f5627f26-3f9e-3a0d-8341-e6f234e6754e.roa (raw, json)
Hash identifier:          Hx0s9MF6tZhJ6l2OBwwwZV8GGLBLy1BCnwOaMZ1TBH0=
Subject key identifier:   53:72:60:70:66:42:EE:C4:0F:E9:74:CE:FE:0C:94:39:8A:E4:12:41
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA7A09BEB856C8FF6F2521D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f5627f26-3f9e-3a0d-8341-e6f234e6754e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:a880::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:9b:eb:85:6c:8f:f6:f2:52:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=557803c1-d6df-491f-9dcc-5b0655d1cb33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b9:f1:d4:31:f4:ed:fa:56:7e:af:8f:6e:4c:
                    f5:8b:fe:15:d8:e4:e4:d1:21:63:93:14:4d:97:ce:
                    33:42:92:30:db:fa:2a:68:45:7d:3a:3d:99:cc:a0:
                    02:a9:5d:74:63:f7:ba:64:0f:91:08:2a:10:fc:eb:
                    95:ff:e2:e8:4e:9c:85:47:27:1e:d5:e0:0d:ea:2a:
                    0d:3a:7d:4a:2f:d0:96:2e:23:ee:e2:85:a1:3a:1c:
                    0b:da:8d:1a:ec:f8:b7:dc:9e:e8:95:26:da:fa:68:
                    1e:92:5f:c0:49:07:d0:47:f2:ac:ae:5a:27:70:dc:
                    07:d9:b9:e8:cf:a5:cc:a8:4a:63:53:fe:90:ef:1f:
                    f0:fa:da:10:20:f7:f9:9f:70:fa:4c:d4:53:b0:96:
                    0f:cf:33:08:dd:81:c4:28:f3:9b:73:cd:6a:29:e8:
                    1a:c5:73:22:a5:b8:a4:76:df:88:4e:67:bf:80:64:
                    e9:90:d7:6b:6c:98:f3:24:91:3c:af:13:08:0c:1b:
                    16:a3:70:23:8d:1a:c2:95:8d:dc:af:ea:6f:d4:e7:
                    b6:91:83:a4:04:57:9e:aa:21:10:10:bc:f2:cf:e2:
                    33:44:f8:ab:72:63:8f:78:f6:6c:da:c2:35:ce:fd:
                    79:e4:a9:a5:ce:a0:80:c7:f7:dd:df:34:61:8a:ca:
                    3e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:72:60:70:66:42:EE:C4:0F:E9:74:CE:FE:0C:94:39:8A:E4:12:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f5627f26-3f9e-3a0d-8341-e6f234e6754e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:a880::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:3a:1d:5b:d1:e7:b4:2d:16:b3:fd:5e:a9:dd:b7:41:1a:52:
         7b:52:df:57:f4:72:1e:4d:7f:17:53:61:e5:52:e9:48:21:d9:
         b8:e9:65:0b:6e:fa:5a:c4:55:6b:da:a3:4f:8a:0e:33:29:a8:
         8a:67:ea:86:64:0b:ae:f8:fb:1d:fe:79:83:f7:4f:72:7f:5d:
         25:f3:ee:7c:55:1f:bf:a2:b3:7b:f1:e6:da:42:03:b0:d5:59:
         a0:97:e0:88:8d:ba:9a:b8:3c:69:ac:7c:94:97:fa:68:d6:5e:
         cb:f7:31:f4:dc:15:40:a4:a7:08:bf:0f:6a:60:a5:25:9a:d6:
         96:66:d0:e5:ca:ea:af:41:f7:7a:4c:59:77:33:b3:cb:36:2f:
         e6:7e:93:36:b4:12:71:35:f9:1e:e1:97:85:05:6b:57:28:c7:
         42:c1:6d:cb:71:3a:7e:a4:6c:e6:52:13:aa:e8:ca:e5:3c:67:
         87:36:41:17:30:4b:b6:6d:c3:e1:ec:e4:64:36:3e:8c:49:21:
         bc:b5:95:7c:80:f9:dc:65:68:9e:10:51:d5:ea:60:81:69:48:
         39:72:bd:f4:46:b1:54:f3:b5:c2:38:0a:eb:35:c2:e6:2c:0e:
         4a:78:4c:da:37:68:d3:d6:b2:a9:86:f9:60:b8:5d:8d:0b:2e:
         3f:b8:fa:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:00:47 2026 by rpki-client