Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9d63340-9ad4-30c0-9cf0-6f053c39cd80.roa
File:                     f9d63340-9ad4-30c0-9cf0-6f053c39cd80.roa (raw, json)
Hash identifier:          /ix0SRqH7d4wVSyLACRDmaEWd3TS5zcHCcX7vX4AUuw=
Subject key identifier:   1E:08:9E:5B:E5:54:EF:C7:BB:4C:42:6F:76:66:CD:DC:FE:BE:FD:61
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D1707EF496CAF16DC1422F6C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9d63340-9ad4-30c0-9cf0-6f053c39cd80.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     30036
IP address blocks:        2604:2d80:4900::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:ef:49:6c:af:16:dc:14:22:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=dd66b59a-e232-43ce-9350-384990f1c4a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0f:13:27:9d:ab:1b:93:e3:ae:73:9c:ea:c8:
                    3a:29:30:df:a0:99:b6:c3:53:7b:96:16:ed:3c:2c:
                    a0:f0:f1:93:6a:cd:6d:59:cb:ce:fd:ed:df:4a:04:
                    8e:fc:e9:d3:f0:d7:a7:d5:99:06:db:bf:b0:5c:62:
                    a2:c8:9b:19:ed:91:8b:f3:76:83:8c:db:9c:b5:d9:
                    6c:3b:5d:bc:06:77:7e:81:3c:fa:f8:f1:e0:f5:34:
                    ba:de:4d:03:3d:e9:a9:ab:40:b9:5e:d5:9e:cd:af:
                    fb:b9:b0:69:6d:bf:16:96:96:ca:c9:de:3c:61:3b:
                    9a:54:69:5b:7c:90:eb:73:9f:19:09:93:dc:1b:28:
                    16:9d:fe:01:ab:22:a8:15:ac:a1:c0:80:ab:3b:dd:
                    16:da:81:78:27:7d:b7:cb:64:bf:d0:32:c9:11:a7:
                    a5:35:9a:ca:f1:cd:23:1a:87:84:ea:8e:2e:49:91:
                    b8:19:16:c2:95:f7:54:f2:af:5a:7e:9c:2a:60:e6:
                    3d:c6:c1:52:19:4a:94:cf:56:c0:0c:c8:af:15:ef:
                    ee:e5:4e:5b:4c:84:c5:d1:a0:c1:75:fc:85:99:90:
                    82:6d:3b:e4:fd:e5:a5:ef:7a:cf:27:20:99:81:cb:
                    d6:51:87:23:27:19:9c:2d:40:ff:22:8a:73:ad:86:
                    43:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:08:9E:5B:E5:54:EF:C7:BB:4C:42:6F:76:66:CD:DC:FE:BE:FD:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9d63340-9ad4-30c0-9cf0-6f053c39cd80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:4900::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:91:61:a3:7c:03:26:75:1a:f5:8b:b8:b8:de:70:10:51:3e:
         9c:64:b2:c3:a0:4f:b2:e7:2a:08:f8:90:9a:9e:73:9b:89:03:
         b0:b7:d3:99:98:be:99:e6:b2:ed:25:18:4b:d1:cd:94:16:f4:
         14:27:32:05:cd:1d:19:6d:db:85:26:5d:b6:c6:bd:3e:2b:85:
         50:50:af:a7:e2:0f:5e:62:38:f2:09:3f:59:4e:f5:96:56:01:
         84:1f:44:3c:7d:30:84:5e:98:ec:a9:d7:08:3f:b3:08:47:4e:
         dc:72:75:06:e3:9d:cc:fc:dd:ad:75:3d:d4:0c:48:27:eb:03:
         80:5f:f8:4d:2e:78:a6:a8:d6:fa:0e:9a:a6:3a:83:48:93:26:
         b6:18:63:6c:1b:73:71:6e:0e:8a:54:e2:a9:56:30:33:8e:82:
         4b:a5:34:be:48:c4:54:4e:11:17:95:14:7f:a6:e2:ef:6b:2d:
         e4:92:a2:c9:14:ee:b0:20:09:a9:51:84:9b:89:20:22:60:15:
         f5:40:ff:ad:28:d4:dc:99:d4:c8:45:9f:c7:ac:30:8f:c2:00:
         8f:cc:d1:ff:1c:2e:40:19:de:fa:0f:21:1e:dd:ea:e4:46:19:
         ab:c9:81:de:4d:b5:b1:c0:70:52:db:99:df:d7:10:ad:d3:f9:
         03:ee:9c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:44:31 2026 by rpki-client