Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23fb03a5-0b23-37e9-825d-3664ad7f96ca.roa
File:                     23fb03a5-0b23-37e9-825d-3664ad7f96ca.roa (raw, json)
Hash identifier:          jNWk3nuOW03aXsV3jKY27NU1ef8Mb+ngdeyXsYSgNrk=
Subject key identifier:   AA:80:0D:F0:47:35:89:59:6D:64:34:4D:84:5D:CB:56:43:E9:4A:77
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D3342D2C3F93727A44486F280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23fb03a5-0b23-37e9-825d-3664ad7f96ca.roa
Signing time:             Tue 17 Mar 2026 16:42:26 +0000
ROA not before:           Tue 17 Mar 2026 16:42:26 +0000
ROA not after:            Mon 15 Jun 2026 16:42:26 +0000
asID:                     19905
IP address blocks:        2604:2d80:d280::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:33:42:d2:c3:f9:37:27:a4:44:86:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 17 16:42:26 2026 GMT
            Not After : Jun 15 16:42:26 2026 GMT
        Subject: CN=b5a7c212-a266-4a55-8d07-d6a4ba8b08a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:43:89:61:6e:da:2c:7e:d9:93:f9:ab:43:a5:
                    ba:30:6d:2b:39:c2:c3:b0:3c:40:39:7e:98:a5:c7:
                    32:fa:3c:8d:7f:1c:68:8a:5e:36:27:44:3b:8c:fe:
                    12:1c:9c:a5:4e:21:59:ca:ab:c6:64:7e:4b:98:95:
                    15:cc:90:5a:fd:52:4b:2c:2d:fc:7d:c2:7c:d2:33:
                    71:82:e0:82:b6:11:dd:37:0f:3a:24:67:33:60:ea:
                    20:58:81:7d:58:c3:8f:f5:6c:10:46:93:de:b4:11:
                    79:0f:f8:7b:19:71:d3:f9:1a:fa:e0:9c:a3:b1:3e:
                    be:69:05:cd:a6:39:80:88:34:77:0f:4e:bf:19:c3:
                    ab:3d:5b:82:5b:39:36:48:44:df:a7:77:e7:39:9f:
                    c2:4e:51:8c:79:8c:80:fa:8c:c0:f9:f1:89:fb:d5:
                    ad:6c:49:5b:09:58:53:e9:20:1b:89:e3:88:27:f5:
                    85:6e:08:31:78:05:38:db:9e:80:e2:63:c1:ec:95:
                    55:3a:ae:0b:d5:42:b6:e5:ba:d3:51:ba:1a:3c:dc:
                    02:4c:0e:e2:4c:48:ea:4d:5c:2c:44:06:34:6a:d3:
                    11:52:db:99:75:13:e2:7b:13:05:a6:df:56:1e:05:
                    5c:c3:20:40:d6:bb:d3:2d:76:65:f9:7a:d4:5c:ec:
                    f7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:80:0D:F0:47:35:89:59:6D:64:34:4D:84:5D:CB:56:43:E9:4A:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23fb03a5-0b23-37e9-825d-3664ad7f96ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:d280::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:5c:48:6f:5a:af:e8:f9:d3:eb:5a:ab:69:7a:31:d5:14:6e:
         0f:7b:7d:17:73:dd:ea:5f:c4:93:38:78:a1:d9:66:9f:d3:9a:
         06:b5:a2:10:3e:d1:c8:b4:1f:a4:3a:e1:da:68:d1:33:4e:2a:
         ac:a3:19:35:f0:46:48:5e:34:7a:8b:6a:70:a6:39:15:41:09:
         56:f5:69:9e:1c:44:49:c0:90:3a:4e:f8:8b:eb:a6:62:ac:94:
         c8:cf:17:4e:1a:f9:7d:f4:cb:93:35:06:e2:01:23:eb:b0:79:
         b6:36:4f:15:d7:ae:97:38:3e:4d:7e:bc:07:9a:89:c0:5a:9d:
         a4:8c:0a:78:df:55:7b:b6:b0:52:ca:bd:96:c9:a8:64:3a:79:
         e9:6a:ce:71:48:b3:b2:66:87:8a:36:0a:a0:c2:92:25:71:b5:
         45:31:3f:01:48:6e:75:bc:24:e0:41:01:a4:d6:2d:6c:2a:88:
         de:1b:9b:c4:d8:15:26:e4:b6:fe:86:06:f9:c0:dd:95:36:1d:
         f5:d7:fa:32:dd:d8:0b:12:aa:a2:db:2d:16:10:fa:ad:37:88:
         15:70:9f:7c:01:a5:e6:91:73:31:50:f1:46:de:fd:9b:9b:5c:
         f0:e2:2c:1d:1a:92:34:a3:d5:d5:db:28:25:2e:bf:c4:4b:9b:
         11:07:dc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:18:45 2026 by rpki-client