Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0acdb127-849d-3ad8-b339-03b9e0feb6f4.roa
File:                     0acdb127-849d-3ad8-b339-03b9e0feb6f4.roa (raw, json)
Hash identifier:          b4Mq0Euhg3dXbw8DCKauahW521Sp79aTr256rmUBX58=
Subject key identifier:   25:11:F9:8E:8E:AF:41:6A:94:98:BD:1C:6B:94:B2:94:86:51:98:E9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24DF77FF02DBB34E8CF22980
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0acdb127-849d-3ad8-b339-03b9e0feb6f4.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2d80:2100::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:77:ff:02:db:b3:4e:8c:f2:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=80138159-ca83-4bf1-8428-2519dab3ac12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f6:f4:ac:41:54:c9:23:01:c8:f7:bf:99:96:
                    7c:35:e4:71:43:3a:aa:7c:7a:a3:df:5d:eb:65:9c:
                    d3:2d:6c:1b:18:c6:46:64:66:6f:e5:a2:f9:d5:0b:
                    b1:01:2a:0f:b7:4e:a5:b2:c6:a0:53:ab:bd:8d:67:
                    c4:f4:11:5e:bb:7d:81:65:c9:42:08:f3:3b:bd:60:
                    33:bf:28:28:5a:95:62:62:59:68:12:d9:e9:ff:ae:
                    9b:ce:ce:25:97:10:fe:59:6d:9f:a1:b9:97:4e:fe:
                    a0:7e:bc:fb:7b:3d:37:16:f8:5a:a3:89:e4:c7:12:
                    2a:d2:16:84:2f:a7:6c:17:d3:96:d0:d6:71:9c:c9:
                    7b:84:bc:a9:67:d5:37:4e:3e:01:65:ee:6b:94:dd:
                    88:9c:1c:4b:3c:fb:e7:30:59:b2:fa:68:a3:90:26:
                    9f:59:63:a4:15:17:38:76:99:b5:e4:f3:f1:53:49:
                    11:ae:3e:88:da:5b:78:9f:59:36:ab:83:2c:8a:03:
                    8f:08:bd:a3:82:13:58:f2:53:f2:80:9f:03:8e:d7:
                    95:0e:31:9f:3c:0b:8a:f6:e5:84:5e:87:65:93:f8:
                    ac:bf:b0:30:31:fd:4a:69:eb:24:2c:e0:2d:84:72:
                    c1:30:81:96:9e:77:a8:07:89:3e:fe:76:90:ef:ae:
                    9a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:11:F9:8E:8E:AF:41:6A:94:98:BD:1C:6B:94:B2:94:86:51:98:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0acdb127-849d-3ad8-b339-03b9e0feb6f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:2100::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:00:3d:30:97:84:39:86:f8:f1:0f:23:d0:27:cb:98:85:ca:
         08:02:b8:4c:e6:e3:38:55:41:e4:94:cd:36:92:73:63:ea:e6:
         ca:46:f4:fe:87:10:31:4d:4c:4a:cd:24:27:b6:3d:7a:00:23:
         3b:b2:97:48:03:da:95:4f:1a:54:2c:da:f7:3c:95:0e:b4:b3:
         e6:4f:a3:31:9e:d7:c8:46:78:77:ec:88:d9:0b:e4:df:23:ee:
         6c:18:35:d3:c6:39:13:d2:7a:51:bd:93:fd:50:28:7a:b9:6f:
         15:23:7c:24:ba:aa:1f:52:42:8a:18:45:fc:9a:20:a4:dd:63:
         98:2b:b1:95:a4:76:25:50:d5:6f:4d:17:00:33:36:b7:8a:7f:
         20:ab:26:09:65:80:4d:fb:b5:5a:02:52:73:a9:dd:e5:46:d6:
         8f:0f:8a:0e:09:7c:20:fc:82:46:b0:e3:d3:80:db:a5:e2:fe:
         86:cb:97:45:36:cd:48:f0:00:62:04:4f:36:59:fd:ea:1a:b7:
         35:84:a2:1c:d9:62:c1:ec:59:e2:4d:0c:ea:0a:a1:00:b0:de:
         cf:e8:dd:ae:11:2d:2e:f3:86:9d:b1:b9:82:41:09:61:03:d5:
         06:c4:a1:e7:c6:18:54:f7:d2:53:98:e5:2c:9d:50:6c:16:6d:
         cf:99:ee:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:38:16 2026 by rpki-client