Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/019358f5-4e4a-3b0b-9e51-6a6cef0a442a.roa
File:                     019358f5-4e4a-3b0b-9e51-6a6cef0a442a.roa (raw, json)
Hash identifier:          +1w7HsCaKPcc8Gz5G02wC2mwY+b7WxFTxSYtU+zpr5M=
Subject key identifier:   DC:2E:8F:D6:AF:77:54:BD:E8:63:C8:77:36:A6:F1:F6:A3:F7:8C:F2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D47C4D872CCCEF21987E4C7C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/019358f5-4e4a-3b0b-9e51-6a6cef0a442a.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d80:e900::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c4:d8:72:cc:ce:f2:19:87:e4:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=28ab5ac8-7832-4171-98f8-9db0e4e56dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c4:b3:be:d3:0e:55:2e:00:95:dd:12:35:1c:
                    b1:df:1b:af:d4:eb:41:93:04:0b:75:c0:1a:46:55:
                    28:6a:bb:64:88:23:2d:5a:17:8b:ce:f4:67:21:f5:
                    9c:73:05:81:8c:5e:b8:09:fa:36:0e:89:b5:40:8f:
                    cb:d6:a0:13:d1:21:78:aa:37:3c:05:a5:c9:84:3f:
                    62:89:96:9f:41:08:2e:57:5a:88:c2:d8:5f:3c:5d:
                    3b:d5:6a:72:6b:b4:11:11:9d:43:8c:7f:7c:81:fb:
                    f8:58:e4:bf:2d:47:0c:30:3b:42:9d:fc:13:12:dd:
                    d6:df:f7:43:6c:a8:0f:de:15:14:03:13:5a:5a:15:
                    3f:af:1c:17:0c:37:94:67:fe:45:f0:3d:f5:85:9a:
                    b2:99:fe:f2:5c:d8:14:9d:b9:ad:70:d2:dd:8c:a0:
                    16:d3:6b:46:bb:09:c2:d3:0a:b8:df:7b:ea:ed:7e:
                    8d:6c:30:45:5a:d7:74:74:9e:c2:d1:91:e8:c9:d5:
                    bb:08:48:d3:23:4b:a4:c5:14:4d:47:96:d6:2d:51:
                    cb:72:6f:d7:de:d3:a4:0a:0c:af:ba:1c:7c:b1:6f:
                    c8:ee:89:be:ba:a3:b1:db:84:e4:fa:a5:79:80:10:
                    58:b4:2a:03:e0:84:7a:b2:44:5e:5d:b5:ab:f3:77:
                    93:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2E:8F:D6:AF:77:54:BD:E8:63:C8:77:36:A6:F1:F6:A3:F7:8C:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/019358f5-4e4a-3b0b-9e51-6a6cef0a442a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:e900::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:63:5a:8a:c8:14:84:61:b7:53:62:e6:9f:66:1a:fc:18:8c:
         f6:f1:1e:01:a2:1c:b1:5c:01:bb:59:4d:c4:f6:15:b9:bd:ac:
         d8:97:6c:ae:65:dd:fa:0e:ce:9c:cf:58:73:31:83:d8:e8:9d:
         f9:78:d4:a1:11:7a:9c:9d:cc:f7:4b:08:71:81:cd:df:43:1f:
         a2:7a:ee:53:70:34:08:15:12:36:53:6e:b8:ef:f4:d4:fb:6d:
         6d:9f:1e:ae:c6:9a:60:9d:4b:da:43:62:f6:c5:4a:11:b7:91:
         5b:f6:64:1d:83:85:06:6b:4e:fb:4d:26:0f:2b:66:57:36:b6:
         ea:48:02:d9:02:fc:5f:f9:65:eb:76:a7:a0:9a:ef:02:fb:5d:
         fa:17:34:04:60:0d:6b:d2:bc:03:7c:30:3e:23:04:44:94:a2:
         53:1b:5b:d2:57:33:a6:33:6a:ce:ad:6e:74:43:23:6c:bc:2f:
         44:5e:37:74:59:37:29:ee:18:19:8c:13:88:46:20:03:97:20:
         7f:fb:fb:37:93:f7:b1:f2:88:40:d1:7a:9e:8b:e1:2a:dc:89:
         5f:f4:1b:61:30:26:68:8c:18:38:c5:6a:6a:c2:26:9f:c6:57:
         c3:4c:39:6a:42:7f:09:50:5e:be:90:f2:08:a6:77:8c:39:a5:
         6c:66:27:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:13:03 2026 by rpki-client