Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1c7fe204-92d0-3d5b-ab61-3cc3c9b9f2fc.roa
File:                     1c7fe204-92d0-3d5b-ab61-3cc3c9b9f2fc.roa (raw, json)
Hash identifier:          fLbCgQopykB3mScEUnNlNxHf/KEv4pSeikJpOSQHDDw=
Subject key identifier:   21:FB:65:04:FF:D8:BD:CB:C0:CE:C7:11:E4:41:C8:17:82:0E:2D:44
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F49890237D289CEECE0E55C00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1c7fe204-92d0-3d5b-ab61-3cc3c9b9f2fc.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:7800::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:02:37:d2:89:ce:ec:e0:e5:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f3d1c3a3-6b51-45db-aa41-5444a4f80eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:84:50:50:2a:99:07:34:1a:66:61:aa:9f:e5:
                    c0:69:be:fa:43:de:cb:8c:7e:1d:54:9e:f6:3c:27:
                    01:24:9c:04:ad:7f:35:3f:2c:b6:d2:47:4a:43:51:
                    05:4c:1d:66:3b:f8:42:0f:0a:73:f9:a4:26:31:c6:
                    1f:e0:f7:d9:7e:18:6c:1c:49:0b:22:f2:7e:42:2e:
                    64:35:d8:85:56:12:f0:ed:62:57:17:56:04:b5:2a:
                    15:40:60:01:ee:30:6f:75:28:67:90:28:67:15:54:
                    6b:60:b9:03:ac:62:e8:ca:ea:58:fe:01:bf:b3:29:
                    86:ab:98:d5:1f:d5:9a:83:b5:3e:d1:f2:dd:cd:a3:
                    f2:06:50:67:61:c0:1e:43:6e:44:e0:01:64:93:7d:
                    cd:24:dc:a8:9a:a0:6a:7d:3c:27:39:35:b5:04:f0:
                    1f:12:aa:17:ef:44:14:9a:15:8c:3e:9f:82:41:93:
                    24:58:af:e8:08:e4:81:16:31:da:ed:97:ac:2d:8f:
                    23:b7:57:c1:1b:15:71:99:54:b2:cf:21:b0:58:cb:
                    8a:ce:e0:14:85:3a:8c:56:29:c5:8e:5a:74:12:4b:
                    9e:f8:b2:44:78:6b:52:cd:56:b9:94:de:b0:89:6c:
                    e8:71:62:27:2a:bb:5f:27:42:6f:56:7b:ca:81:1c:
                    26:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FB:65:04:FF:D8:BD:CB:C0:CE:C7:11:E4:41:C8:17:82:0E:2D:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1c7fe204-92d0-3d5b-ab61-3cc3c9b9f2fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7800::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:0d:12:01:9a:7f:a8:ce:89:a3:97:73:a7:d1:dd:8c:78:e2:
         90:db:1b:53:45:16:81:7c:d9:ae:96:81:1a:94:b6:45:31:7a:
         b5:db:0a:07:30:07:0c:d1:89:82:e8:46:9e:fa:5b:04:5e:6d:
         c2:5a:83:0c:5e:9a:9d:40:3e:36:37:ea:58:fd:67:55:53:58:
         90:5e:c0:93:74:5a:1e:88:2c:04:5e:d7:5a:1e:bc:f6:e6:cc:
         cb:36:ae:95:e6:1c:f6:8b:1e:a6:94:32:ff:6a:e6:10:6b:cc:
         1a:2c:f7:6f:5b:06:a7:68:87:df:16:50:e7:12:89:ce:16:f1:
         dd:54:b1:5a:5c:7e:f3:f5:3d:9c:ce:e3:16:f7:ed:fe:c9:51:
         d1:5c:f7:1d:36:60:d6:72:25:28:1d:f6:6e:75:57:e0:0c:80:
         db:a2:6a:78:13:11:40:f7:45:44:a4:e2:a2:bf:39:5c:f6:aa:
         4c:31:de:c9:2b:92:d0:cb:98:1f:b5:0b:58:69:ba:ca:61:43:
         f6:60:f0:6b:5b:70:c9:5e:4f:3b:22:50:4d:60:06:09:69:ab:
         9d:34:ff:a0:09:b1:cc:dc:d0:7c:bb:f7:6b:69:ea:71:97:b2:
         96:8f:59:5c:6a:39:e1:69:a8:1b:0a:2c:a0:33:6c:32:28:bf:
         88:52:fe:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:19:19 2026 by rpki-client