Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/275c9add-be98-3412-bf43-31167602a23e.roa
File:                     275c9add-be98-3412-bf43-31167602a23e.roa (raw, json)
Hash identifier:          0CvkoBlm9gxtxTC3Aruzxblx7d13htkndpaVaQs8bqo=
Subject key identifier:   25:9A:55:D0:2C:BD:E4:87:51:56:E6:8A:25:48:B3:7B:26:9C:93:F5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24DF9F9B0024B28A2EB8B400
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/275c9add-be98-3412-bf43-31167602a23e.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2d80:7600::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:9f:9b:00:24:b2:8a:2e:b8:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=d3651681-d61a-48f3-9a55-7bc742bd1a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6a:ba:51:5d:2f:70:ca:53:c3:71:27:62:c7:
                    48:f7:c5:22:cd:bb:20:02:9c:99:67:28:69:98:2c:
                    2d:e0:0f:23:f0:38:75:92:b2:35:f5:20:f0:df:d6:
                    36:36:5c:bb:56:2d:8e:fd:aa:aa:46:1b:28:65:a4:
                    7e:61:2d:c0:9b:ea:be:95:a5:a8:fd:b9:57:59:b9:
                    b1:06:80:7d:cb:e7:b7:14:b4:3b:69:66:04:8c:34:
                    62:08:d1:5f:a3:e6:3a:5d:3c:67:0d:c1:31:89:9b:
                    bc:69:77:2e:5c:8c:11:5a:ec:82:32:bf:b8:8b:af:
                    d1:8c:b0:ea:2c:60:e4:56:26:e5:24:65:66:17:ac:
                    e0:25:2c:b6:13:97:db:2b:8e:2c:98:73:87:04:ad:
                    c7:c7:fc:83:48:c4:20:b2:e8:63:a6:7a:61:5d:b7:
                    7c:bb:6a:5b:1d:d3:ee:75:2f:e2:5c:b3:40:a2:ed:
                    9d:32:9e:ba:f4:a9:f0:47:cf:cc:c4:9b:86:7f:ed:
                    f5:90:94:dc:80:70:02:92:c0:0c:c2:30:44:fd:02:
                    a6:6e:63:6b:5c:a1:68:8b:86:3f:7b:d1:15:64:34:
                    67:fd:8a:b8:31:a1:78:ac:19:63:0d:8f:c3:b0:f6:
                    2e:77:79:69:b6:7c:a8:1d:b3:36:13:d4:f3:b6:47:
                    df:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9A:55:D0:2C:BD:E4:87:51:56:E6:8A:25:48:B3:7B:26:9C:93:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/275c9add-be98-3412-bf43-31167602a23e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7600::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:75:66:91:38:a5:07:6c:60:87:54:eb:ab:26:d3:5c:c0:df:
         8c:8a:97:1f:b2:ff:a5:7a:be:dd:e8:68:af:b9:e3:5f:0f:81:
         03:37:23:2e:75:a4:5a:2d:8a:f5:54:1d:1c:02:1b:81:31:0b:
         5b:cf:12:ac:63:6b:b9:a6:73:77:9d:8c:a2:29:cb:ab:e3:4e:
         97:e3:d2:50:60:18:c5:4d:90:b3:86:53:dc:a4:22:7a:ff:c7:
         2f:95:21:d4:80:cd:6c:8f:a4:dd:72:04:ed:af:f6:ed:14:bd:
         5c:e4:d8:b7:50:2f:1d:8d:49:ee:59:fa:44:2d:47:4b:17:88:
         0c:f8:87:4b:f0:97:df:2d:a9:c2:8b:c5:eb:5f:7c:3c:5b:f2:
         e5:49:92:a3:fb:2b:9b:4e:a0:a0:b8:95:c2:38:63:22:14:dc:
         f3:b3:9b:b3:01:74:9f:72:c7:67:91:df:8b:3a:a8:ad:97:e0:
         3c:66:a4:28:c6:cf:6d:d2:b1:3c:81:d7:e1:e0:66:71:db:3e:
         7b:2c:62:b3:24:3b:7d:e3:3d:61:b8:c1:ae:89:46:b8:49:82:
         60:bf:bd:50:b7:af:bf:31:9d:38:29:43:92:22:3e:2c:55:1b:
         af:74:54:d5:4a:ea:af:f1:43:28:92:fd:4e:a4:4d:ee:e8:92:
         0b:d9:5e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:46:47 2026 by rpki-client