Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f970cde3-30bd-3207-884d-ac39710dcedf.roa
File:                     f970cde3-30bd-3207-884d-ac39710dcedf.roa (raw, json)
Hash identifier:          GTdbH6mByBXh565T3Ifos+XEeesFYsPltPQgeUDJYsw=
Subject key identifier:   B4:71:86:63:FD:C8:C3:E8:F9:7F:38:98:0F:DE:41:4B:12:4F:7C:01
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DB77020F154BC333F4906BA40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f970cde3-30bd-3207-884d-ac39710dcedf.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     19905
IP address blocks:        2604:2d81:2b80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:20:f1:54:bc:33:3f:49:06:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=a8ee9e5b-8389-47e6-b2c3-b98cc5d8960c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3b:0f:3d:39:6b:3c:8e:42:ab:ec:3e:11:76:
                    31:06:59:f0:23:50:5f:1c:6d:64:4c:3b:25:b6:9c:
                    d5:cf:96:63:14:94:e2:1b:13:74:9a:cb:0d:a9:28:
                    a4:5c:a3:a3:d3:4f:f5:f5:73:db:17:11:19:34:47:
                    77:be:06:b4:ec:c6:69:58:af:53:e1:35:88:e0:e8:
                    3c:20:b6:9d:e9:fd:d2:e1:ca:a1:5a:df:fa:58:b1:
                    35:87:2d:9d:05:a2:ae:54:81:61:0b:ca:5e:79:83:
                    55:e9:e8:24:07:eb:3b:93:17:8e:bc:fe:aa:99:a4:
                    63:ee:a8:c2:e4:7a:55:d1:2e:1c:87:6c:57:2e:43:
                    c7:16:c4:05:24:af:6e:9d:57:b3:25:79:4e:f1:7b:
                    43:68:9b:a9:49:17:ad:dc:f2:38:2e:cb:e1:b3:c6:
                    a1:7d:03:9e:e6:49:40:07:7b:b4:91:cf:4a:70:02:
                    99:08:e6:57:43:56:32:f0:36:f8:30:9a:bb:41:41:
                    5f:ff:96:6c:f1:18:69:90:3e:f9:34:2f:23:df:6a:
                    79:29:6c:55:ea:e3:69:e8:6d:c7:f3:89:45:ab:b1:
                    34:0a:39:0f:a5:d2:1c:ee:7d:90:1b:a5:d1:20:30:
                    aa:8d:f0:9d:fa:04:29:f8:fa:42:b9:76:89:c0:a4:
                    8c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:71:86:63:FD:C8:C3:E8:F9:7F:38:98:0F:DE:41:4B:12:4F:7C:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f970cde3-30bd-3207-884d-ac39710dcedf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:2b80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:ed:71:85:59:0e:fd:61:4b:7e:3c:52:61:a9:00:af:f7:c3:
         61:d2:f2:cc:e0:4e:41:3f:5d:4f:98:d3:bf:b2:82:a9:28:f1:
         9e:6f:59:b4:db:b8:e8:25:17:67:62:b5:db:e4:ea:cf:c7:17:
         ce:09:53:d6:c1:4a:3a:04:2b:2b:26:a5:f6:b3:33:46:cb:7a:
         cd:42:c6:da:f7:f0:93:ce:10:23:dd:69:85:68:2c:52:3b:68:
         dd:97:de:68:39:f1:f0:b6:64:06:82:48:cb:99:c3:85:27:83:
         d2:2b:8b:1f:e2:0e:9c:20:90:48:83:90:57:27:f5:b2:b5:a1:
         27:3c:9b:a0:39:02:27:c8:69:21:0c:28:77:76:42:c3:03:7c:
         58:5d:1c:6f:79:13:d1:40:de:17:a7:6b:c2:89:81:1f:a4:10:
         9e:d5:64:55:78:13:f7:76:9e:4c:bb:cb:93:91:b3:21:17:d0:
         23:2f:82:47:62:35:1f:19:3f:2d:a9:e0:6e:0e:55:33:32:b3:
         55:9e:45:28:c1:6f:3f:52:0a:54:31:67:e7:86:91:8d:1f:dc:
         49:fa:80:ce:3b:af:bc:38:ad:a1:96:2e:9e:8f:77:4d:08:4c:
         ef:52:94:17:a8:ed:0c:3a:84:4c:ab:d0:8f:ac:ef:88:b6:c3:
         cd:89:05:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 21:30:11 2026 by rpki-client