Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/faa9837f-8086-3d49-9722-db6a2afd6600.roa
File:                     faa9837f-8086-3d49-9722-db6a2afd6600.roa (raw, json)
Hash identifier:          V8/UDDqru60KTNEVyFhh+uZ3NCfqOmpjhF34nSgCAtk=
Subject key identifier:   9A:41:7C:09:10:9F:90:1F:9A:BC:7A:2C:2C:6F:39:FF:B5:D4:8A:B3
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F77835A0B14E1876FF0FBBC00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/faa9837f-8086-3d49-9722-db6a2afd6600.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d81:8300::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:83:5a:0b:14:e1:87:6f:f0:fb:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=aed25393-1391-4989-b31b-944e69b3b4e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f9:c5:f0:b0:77:99:11:f2:b2:74:ee:7a:49:
                    19:4e:f5:18:2b:55:42:d7:74:3a:8e:6d:fc:71:07:
                    65:43:de:b7:a9:dc:26:cc:bb:83:f5:2b:30:bb:ef:
                    1e:59:79:b6:19:41:5d:69:0e:48:46:02:5e:99:f0:
                    ba:72:65:bc:36:8e:79:a4:b1:d8:36:63:a4:10:b7:
                    7c:ba:7c:38:f7:3e:2d:c2:d3:38:a1:d4:c3:4d:0a:
                    2f:94:5a:47:69:59:62:b0:96:9a:13:e9:3b:19:10:
                    b2:3b:91:20:6e:54:36:f1:f0:4c:03:83:29:d0:a8:
                    37:1e:52:e5:9e:a1:65:e0:34:ce:48:d7:1a:7f:83:
                    1f:f6:be:0e:44:0c:be:c4:54:74:1b:fa:6b:0b:b8:
                    70:6f:29:7d:ee:9b:18:10:c3:1a:f6:27:59:5d:12:
                    27:9c:d4:e7:33:8c:82:53:bc:d9:8e:41:c3:91:51:
                    84:cb:51:dc:28:37:47:3f:95:ba:b8:9e:48:82:0d:
                    8e:45:7e:7f:34:e8:16:4c:17:bc:d3:47:d4:15:29:
                    74:8d:03:bd:77:86:c3:65:fb:f0:ca:83:ac:01:46:
                    47:81:1e:ed:42:38:8b:a3:6a:41:a4:86:d4:cd:d9:
                    18:7d:5a:2a:ff:d3:6c:ea:3c:de:fe:d3:1e:92:24:
                    5d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:41:7C:09:10:9F:90:1F:9A:BC:7A:2C:2C:6F:39:FF:B5:D4:8A:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/faa9837f-8086-3d49-9722-db6a2afd6600.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:8300::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:e8:8b:9b:bf:c3:3d:0a:6a:45:03:e4:aa:43:45:80:c0:fb:
         b8:e7:51:a6:3d:dc:e6:3c:51:4b:82:66:e8:09:ae:7f:94:df:
         15:e9:b2:c8:97:61:7d:c8:54:38:a8:da:70:8a:e1:63:81:08:
         89:ea:a0:db:9c:63:5a:bd:a5:7d:bb:d3:d8:d9:f2:30:72:42:
         eb:2c:83:d1:99:c2:76:61:b0:05:89:3b:94:03:ee:d4:19:6e:
         34:9d:e9:12:3c:b0:4b:6a:16:36:9c:3e:a3:cb:e4:ec:30:ba:
         25:6d:5f:ea:b1:f8:1e:24:2b:f4:0d:77:8d:29:22:a6:29:09:
         91:05:57:4b:be:48:b8:30:5e:66:2b:b8:7b:32:b8:5c:71:43:
         fa:36:f5:0f:d2:c8:db:be:e3:1e:1a:fd:f7:27:99:e2:d9:30:
         d1:ba:c0:64:21:ec:7d:d3:a6:43:ae:d4:df:1b:2a:64:95:9e:
         66:59:c3:25:2d:73:6e:4b:ba:64:83:7c:52:fb:8d:7b:9e:fa:
         1d:41:6b:27:46:e1:1a:f1:99:5b:a7:72:1b:d9:13:92:4f:ce:
         5a:30:39:d3:5f:63:71:7c:76:fe:52:ca:03:50:af:d0:88:ac:
         c2:51:41:97:9b:01:59:0d:f1:4a:8b:15:5b:5b:92:85:73:fb:
         cc:88:74:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:42:51 2026 by rpki-client