Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1795452d-1177-3f58-8f9a-935bece8a2ba.roa
File:                     1795452d-1177-3f58-8f9a-935bece8a2ba.roa (raw, json)
Hash identifier:          flqpsAHmcHQCnp2r6VP8yIa+j4krQFOKeXe8sVAKBRk=
Subject key identifier:   96:03:CE:A1:EB:22:FA:B8:E8:96:16:99:07:25:A2:67:FB:1A:21:65
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4C3DE7D485CAD09BE1DA8A80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1795452d-1177-3f58-8f9a-935bece8a2ba.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     30036
IP address blocks:        2604:2d80:200::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:e7:d4:85:ca:d0:9b:e1:da:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=3b6e7bd5-f10f-4247-8161-9461d10d4288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b5:fa:04:35:f7:4d:ea:a9:91:15:ef:56:86:
                    03:7c:a8:69:ac:f2:4b:5e:5e:c8:78:1a:8a:10:fd:
                    59:f7:db:c1:6a:80:a2:86:e1:a0:19:56:0a:8e:75:
                    e1:77:19:82:8b:ba:f8:42:ef:8a:fe:c4:11:a2:79:
                    8d:61:0e:00:99:c8:ee:a7:ad:1a:fe:d9:b9:6c:07:
                    0e:d7:ec:91:a8:32:7e:45:2d:cd:28:6a:c2:58:e2:
                    f6:bb:fe:b3:be:9c:71:09:30:9e:22:3c:0e:37:07:
                    ee:d3:10:62:f6:a6:0c:25:bd:fc:69:be:4b:27:51:
                    49:e7:60:28:25:a6:8e:b3:77:58:42:cb:05:f5:b1:
                    1e:b6:96:28:5e:5e:5f:1b:73:8a:79:fb:cf:15:3d:
                    30:26:ec:e2:e7:5b:6b:46:b8:e8:76:03:5d:60:5d:
                    f3:51:2a:ff:7a:54:ed:13:92:44:3e:58:22:9d:c6:
                    86:4e:c9:ed:84:4b:93:97:bc:e1:29:bc:c5:55:0e:
                    20:d5:5b:36:69:1e:0d:3e:f8:ee:f8:83:12:84:e6:
                    fd:1a:5c:85:f6:1a:0d:4b:80:ad:fc:0a:d9:81:5f:
                    0f:fd:8b:c6:2c:aa:11:f9:b4:8a:4a:f0:e5:a2:79:
                    db:a1:04:e9:39:c9:79:2f:5b:b5:2d:92:3c:61:08:
                    75:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:03:CE:A1:EB:22:FA:B8:E8:96:16:99:07:25:A2:67:FB:1A:21:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1795452d-1177-3f58-8f9a-935bece8a2ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:200::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:65:c5:38:e0:c4:cf:14:4a:d1:e0:d0:81:5e:ae:72:c4:08:
         f2:ae:5b:b0:66:2e:80:c3:b6:43:f8:fd:aa:22:d7:21:f2:b0:
         39:1f:bb:1d:9c:15:86:b2:d2:88:be:0f:69:73:df:1d:b1:4a:
         bc:cb:19:27:15:0e:43:f8:01:ad:2e:53:4e:43:a9:50:fa:0f:
         0a:7b:99:9a:d6:9e:7d:30:a8:48:5c:a4:50:cd:89:e4:88:7c:
         2c:bb:a0:77:82:f1:ca:a0:ee:70:9f:02:52:f0:13:0b:9b:20:
         e3:91:6a:d8:e1:e2:a1:4a:38:1a:09:53:49:42:c9:9e:0c:5f:
         77:b5:44:da:4d:cb:a0:a1:e7:af:a3:45:ca:95:d4:d3:de:43:
         5f:a9:8f:a9:ae:3d:47:4b:e9:98:f4:be:53:b9:12:24:76:99:
         b3:8e:4b:4d:86:b1:97:b1:9d:93:a3:e8:64:50:6d:98:fc:28:
         d9:be:88:30:f2:7c:f0:5c:41:71:4a:9f:93:e7:a1:2a:4d:c2:
         af:0f:b1:bb:6b:34:45:2d:ce:06:34:9d:f3:b5:d4:b7:ae:36:
         b5:50:05:92:4b:bf:9b:c7:03:ed:95:f7:47:b7:26:43:67:2f:
         79:18:cb:49:94:3f:f5:0e:47:cf:04:dc:c1:e3:77:a0:d4:dc:
         ef:8a:bb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 03:46:44 2026 by rpki-client