Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3980d51d-07db-3b1f-965c-cd48b27da63d.roa
File:                     3980d51d-07db-3b1f-965c-cd48b27da63d.roa (raw, json)
Hash identifier:          jlfmYucw7VCHCmQpO9LYkHvDFC/eb62f4FP/fOOmNhw=
Subject key identifier:   50:97:99:51:48:92:71:47:8D:C6:8F:B4:D9:B7:D4:28:44:7E:65:23
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24E13645B721B1A4C25CED80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3980d51d-07db-3b1f-965c-cd48b27da63d.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2d80:7680::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:36:45:b7:21:b1:a4:c2:5c:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=a46057a1-0191-4393-b65f-ddee73996c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2d:f2:16:89:69:05:c6:c7:4b:24:17:ce:e1:
                    44:5d:3f:6e:bf:2f:d5:ea:92:b1:c0:c7:51:06:25:
                    0a:57:d9:94:59:01:47:32:4e:dc:c1:d3:fe:92:73:
                    a9:ce:c2:74:6e:99:53:ac:bb:05:d2:9b:a6:71:4c:
                    1b:ce:7f:6f:46:c5:e7:cb:be:2c:d8:e3:23:34:3b:
                    a0:2b:f4:7e:61:9b:e7:83:d2:35:d3:93:bd:97:4f:
                    68:39:4d:95:b5:50:ad:65:30:a8:13:27:34:74:2a:
                    ee:17:2c:79:ca:1b:55:b1:c6:32:80:6b:79:ba:6c:
                    f9:4a:ea:39:e9:64:fe:78:57:0a:47:33:f0:74:0b:
                    d7:44:89:8e:01:c5:2e:17:49:7d:8e:7b:73:1a:d2:
                    f7:d7:ca:fc:bb:05:70:67:52:ca:0e:1b:12:58:a6:
                    c2:26:a6:80:a3:64:1b:ab:82:17:14:24:2c:83:ff:
                    94:ff:20:55:43:c7:fb:34:75:fb:7c:25:dd:75:81:
                    26:51:ce:96:63:a7:f9:48:f5:de:d3:63:9e:5f:6b:
                    18:66:1c:75:eb:7c:c9:bd:91:c8:b9:a5:2d:db:ba:
                    f2:ef:0d:9e:64:65:5b:6c:91:c0:31:11:3b:fc:be:
                    d6:64:3c:b0:2f:2f:af:5d:ea:2a:3c:af:3c:54:22:
                    04:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:97:99:51:48:92:71:47:8D:C6:8F:B4:D9:B7:D4:28:44:7E:65:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3980d51d-07db-3b1f-965c-cd48b27da63d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7680::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:b6:e8:82:55:b4:ee:34:1c:92:04:6b:30:39:ce:79:98:02:
         d7:39:8b:31:2a:b7:eb:6f:ec:d3:fc:26:8b:d8:2e:4e:c1:89:
         d8:32:7b:a0:0f:71:91:57:6b:11:e6:6c:08:57:94:d1:d2:ea:
         a9:89:4d:7f:6c:9f:6f:5c:b1:ee:f9:07:22:5a:7b:c6:93:9d:
         fa:03:58:7b:9d:f0:1b:1e:f8:8c:e5:08:4c:c3:21:91:1e:e8:
         c2:ed:f2:41:88:18:44:37:3c:d4:78:63:4d:14:51:e2:b7:76:
         23:e9:00:96:2c:e2:cd:96:33:b1:2d:67:49:44:c4:41:a6:cf:
         51:86:3c:86:e2:9f:36:eb:2f:3a:16:ca:37:1a:e1:ab:e6:a6:
         de:83:f1:cf:77:68:a3:0a:00:15:47:c7:6f:18:05:67:bb:3b:
         78:60:ed:65:3d:bb:b2:f3:83:85:2c:66:ea:68:1b:0a:30:6d:
         c8:4d:95:7c:08:5a:3c:e0:af:83:01:d6:80:1a:74:c0:03:1a:
         4a:a5:b9:a0:1f:66:26:04:cb:d2:c8:67:a9:7e:8e:e8:cc:ff:
         2f:1e:37:69:80:eb:7a:a6:1f:ef:38:c2:ef:60:03:fe:79:53:
         a8:7c:5c:33:34:ce:33:9c:61:c6:b0:87:0a:5b:59:40:6d:f5:
         5a:c0:be:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:29:32 2026 by rpki-client