Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/20a40525-27ca-34b7-9a37-e05b0cd7f5d7.roa
File:                     20a40525-27ca-34b7-9a37-e05b0cd7f5d7.roa (raw, json)
Hash identifier:          LGRIV2Ee1GSd3pV0QopufGizRmPvCy1pi0FB30S9h/E=
Subject key identifier:   CD:5F:E8:2C:B4:8B:07:5A:89:35:06:71:40:B9:C9:4A:AE:F5:1A:8E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D2A74E44B53A4D9D158F39CC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/20a40525-27ca-34b7-9a37-e05b0cd7f5d7.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2d81:1980::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:e4:4b:53:a4:d9:d1:58:f3:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=e4dc3ac7-4d74-409d-b5b8-708efa2cd069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:25:25:0d:5c:d3:2b:1b:fe:a9:40:5a:43:f3:
                    88:d6:1b:9f:19:6f:da:19:9e:d8:eb:75:52:1e:fc:
                    5d:97:5b:b3:11:4f:d2:7d:3d:c9:e2:61:a5:cc:ae:
                    ce:98:98:a7:79:a1:cd:33:dc:88:f5:de:8b:76:71:
                    7d:3e:38:7e:3c:75:ae:84:79:89:38:b1:59:e3:a9:
                    e0:7a:cc:6a:ef:a9:cf:c8:74:ad:80:57:14:4b:bf:
                    81:8a:b7:3f:7b:5d:89:02:c7:67:33:8d:9f:f9:48:
                    5e:6d:5d:77:94:2e:8d:2d:0f:9c:8a:7a:4a:65:98:
                    93:2d:8d:f9:92:b9:e5:34:0b:79:31:1f:a6:ae:48:
                    23:ce:e8:5e:6d:bc:4c:bd:ca:07:36:ac:4c:ce:cc:
                    d6:1e:93:7b:24:94:f7:d2:59:8d:d0:38:96:c2:57:
                    1b:2d:00:12:ab:58:7c:57:7f:2b:1a:2c:d0:5a:03:
                    a1:b8:0b:12:e5:bc:0c:81:3f:26:1b:d6:ee:1a:c9:
                    31:57:45:05:a3:20:80:2f:2b:e9:90:ad:bc:ff:6d:
                    ad:bb:40:9d:45:9f:72:8e:c1:ae:e0:5e:fc:c7:ac:
                    9f:e9:58:ff:10:07:55:6d:8b:42:8b:c9:47:bb:e5:
                    36:83:13:cb:c1:a4:6f:8b:ac:2e:f0:f1:c9:31:24:
                    c0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:5F:E8:2C:B4:8B:07:5A:89:35:06:71:40:B9:C9:4A:AE:F5:1A:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/20a40525-27ca-34b7-9a37-e05b0cd7f5d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1980::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:5a:79:e5:34:69:0e:91:49:f2:aa:fc:8f:a9:94:8b:6c:45:
         86:2b:67:65:9b:96:7f:72:e2:a3:0a:e7:82:20:98:51:38:a0:
         ef:87:c1:8a:89:cc:e5:30:ee:02:69:d2:b4:bc:48:56:b8:4f:
         d3:7f:cb:53:ca:b3:97:f0:21:5d:e2:4d:38:47:45:e3:79:5a:
         71:80:dc:7a:24:78:fe:03:b6:91:e7:19:80:86:76:0b:25:2c:
         83:9c:fd:36:a0:d7:1d:2f:8b:ea:c2:5c:26:f5:64:80:4e:3a:
         f3:97:da:9f:ac:47:4c:da:c3:b4:33:fc:08:e1:a4:6d:f1:67:
         7b:73:7e:93:1f:08:a3:ed:9d:e4:66:b8:3b:5b:84:86:ca:d6:
         c1:48:cd:b9:6d:f9:86:49:42:18:01:ae:91:26:2c:a4:5f:ab:
         3a:59:52:64:04:1f:28:a1:d3:d3:10:e3:79:1d:f6:e8:1c:1d:
         95:85:66:19:74:6c:48:f3:4b:64:85:aa:39:6e:d6:a3:15:cb:
         65:59:4f:7f:7e:8c:6b:58:78:17:ea:ac:f7:43:c4:d7:93:44:
         a9:88:10:20:68:cc:18:9a:ad:fe:20:0b:98:29:ec:f2:92:7e:
         d6:54:31:98:7d:4d:87:76:44:6a:b1:13:0a:b9:3f:07:34:1a:
         5d:76:d8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:56:38 2026 by rpki-client