Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0d0ac967-96a5-3f6f-9050-18003a44bc8f.roa
File:                     0d0ac967-96a5-3f6f-9050-18003a44bc8f.roa (raw, json)
Hash identifier:          dnU6oW02UBy9/GUPoW/wNzb2uPb1yRaLTcN7dWgkak4=
Subject key identifier:   0C:53:FE:09:AF:14:ED:78:68:DD:FD:FE:52:8D:47:12:D7:74:CE:CF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4974435C07B32519E5721E00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0d0ac967-96a5-3f6f-9050-18003a44bc8f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d80:6300::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:43:5c:07:b3:25:19:e5:72:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1517d086-21e3-4687-8c0e-197fc16d3683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:25:e1:0c:2e:a6:8f:52:cb:fb:9b:56:fe:5d:
                    7c:23:ef:24:34:b7:1d:08:09:a3:92:8c:a6:38:f0:
                    2b:c0:10:14:bd:0e:1e:1a:b1:52:70:cf:64:30:3f:
                    e0:f9:00:8f:10:62:52:0f:82:d8:91:d9:89:e8:30:
                    cf:78:94:f8:22:e8:17:47:71:e0:1e:de:b6:aa:a6:
                    42:ef:72:47:3c:ff:9d:39:28:ac:45:e9:4a:69:9e:
                    04:8e:6a:4f:5f:8c:0b:d3:c1:25:53:ec:b3:aa:4f:
                    7f:68:37:c0:a8:b7:41:3f:dd:c1:f1:2c:d1:da:f0:
                    8f:78:43:89:7a:41:55:93:cc:46:7a:82:1d:ba:85:
                    27:2b:5d:69:c7:64:d0:a4:39:ae:e5:60:24:b3:0b:
                    e7:6e:42:42:75:3f:7f:1a:e6:32:7c:22:cb:fe:6e:
                    3a:7e:80:fa:ca:63:d6:4e:9d:ac:ec:c2:a3:41:70:
                    5f:cf:5f:5c:12:fe:67:bc:5a:e7:e5:c7:5e:a1:1a:
                    85:da:b5:5e:25:ea:69:7a:15:23:39:6e:7e:a5:62:
                    11:4c:af:62:81:30:25:d6:59:c2:25:98:35:15:a3:
                    76:ef:d7:67:c4:00:fc:e7:89:3c:95:6f:7f:b1:b8:
                    0d:fc:93:e6:f2:66:40:61:25:e3:58:dc:00:9a:3e:
                    00:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:53:FE:09:AF:14:ED:78:68:DD:FD:FE:52:8D:47:12:D7:74:CE:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0d0ac967-96a5-3f6f-9050-18003a44bc8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:6300::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:f2:01:1a:b8:29:38:bb:8a:df:fc:23:dd:f2:8f:3b:4f:79:
         b0:cb:bf:20:67:fd:b2:f1:ca:5d:e1:3b:72:fb:16:6f:29:cc:
         87:ae:7f:ec:a2:d2:aa:ce:d5:b2:04:c2:12:e2:e3:ce:28:9a:
         54:c7:a8:c8:49:da:bf:65:1f:72:4d:7b:82:6a:d1:6a:08:90:
         11:e2:ff:94:0b:94:6e:81:90:1f:a5:5b:ee:b6:99:16:a8:b8:
         3b:96:55:fd:78:d6:65:94:e2:ea:1d:2b:b2:5c:b3:bb:a7:21:
         7a:72:68:93:9b:42:7c:72:bc:c5:3c:1f:6a:0a:25:66:d5:08:
         52:2e:d0:48:9b:b2:5b:13:a8:a1:c2:61:d1:5f:97:cc:d9:9c:
         15:2e:d3:a7:1c:7c:8f:4b:12:73:9b:21:81:64:29:b0:22:d0:
         65:0e:5f:c4:d2:00:81:dc:c5:4b:97:c6:3a:57:b0:63:f0:10:
         27:ea:50:3c:15:7d:68:22:bc:8f:93:3a:27:b2:fd:33:ec:e6:
         36:2b:11:40:fa:d7:d1:d8:c0:e2:b9:14:43:3d:23:84:0e:71:
         f9:0f:23:0e:7b:8e:71:62:6e:ad:02:b8:c4:18:e4:53:f1:01:
         6b:85:d7:c3:6d:de:e5:ae:5e:7e:62:26:0c:45:63:72:8f:78:
         03:98:50:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:00:19 2026 by rpki-client