Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e72bff0-0832-39e7-8e8b-f28d2a52db36.roa
File:                     3e72bff0-0832-39e7-8e8b-f28d2a52db36.roa (raw, json)
Hash identifier:          EqYugfj6EI+WuX4pWvOhM+L/cYhCSXfg8t+tQaTnUio=
Subject key identifier:   39:72:71:E9:25:67:0C:6A:0C:6D:15:D2:C8:80:0F:39:BB:6A:48:E7
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4974B63711254EE9F066BA00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e72bff0-0832-39e7-8e8b-f28d2a52db36.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d81:400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:b6:37:11:25:4e:e9:f0:66:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ebddceda-97de-4e27-9e4d-79b2ebb09b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:18:9d:22:22:5a:62:a6:00:43:7b:f5:bf:64:
                    23:8d:1a:0b:34:1b:9e:a3:ec:87:62:09:c2:69:fc:
                    82:f2:73:bc:96:05:f7:0e:35:11:81:e4:17:d4:5b:
                    81:35:c5:f9:fc:10:77:f2:ab:f5:43:c6:e4:90:9f:
                    05:22:be:77:0d:63:2a:bb:7c:c8:f0:87:c1:7e:d5:
                    02:30:46:7b:f9:46:f0:fc:ef:70:72:41:74:d7:b0:
                    7d:5e:cf:8f:21:d6:84:50:c6:eb:cb:dc:d1:6d:09:
                    59:cc:dc:b6:5e:2e:50:55:22:02:c8:7c:36:85:9e:
                    c9:06:54:ac:c3:6d:2e:92:fb:fa:b3:97:24:79:ef:
                    3c:d6:d3:d8:fc:fd:82:c7:f7:4b:fc:3d:41:85:d2:
                    72:b8:c1:5b:9b:08:bf:0a:d6:c9:59:ec:c7:11:05:
                    ee:68:2b:12:ea:84:70:67:22:0e:8a:a5:1b:ff:f0:
                    43:72:72:8c:58:e4:d0:82:54:f1:44:cd:a4:1a:18:
                    2e:5f:71:e1:27:1e:5c:97:43:63:36:d2:71:21:e6:
                    46:67:67:2c:31:7e:e5:4b:65:b0:f8:44:da:4e:ef:
                    42:74:55:3f:51:14:6f:cf:34:f8:1b:9e:e6:d0:a1:
                    05:3b:26:dd:ae:f5:57:0a:f9:e0:3d:9d:33:56:ce:
                    51:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:72:71:E9:25:67:0C:6A:0C:6D:15:D2:C8:80:0F:39:BB:6A:48:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e72bff0-0832-39e7-8e8b-f28d2a52db36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:e0:89:a0:28:db:ec:00:70:62:53:c3:fb:5d:ec:a2:d6:fb:
         25:4c:23:c6:a9:4f:6f:15:d7:23:c5:94:b8:d3:e5:cb:f3:48:
         0b:d0:2f:2f:08:e3:cb:0c:53:9e:68:4b:c8:c9:a0:0c:40:f8:
         79:9a:67:ec:32:a6:99:84:4d:21:62:6e:7e:71:3e:90:ca:0c:
         86:ba:99:09:ef:29:bd:02:09:06:74:dd:6f:c6:f1:c6:cc:4e:
         f2:e6:a2:01:04:73:c4:e0:d2:54:9f:9c:3c:49:80:f8:36:67:
         34:97:cd:4e:5b:85:d8:25:9e:cc:d1:63:58:78:49:ea:79:c2:
         b5:b3:37:c5:13:eb:a2:5d:98:b2:e0:33:6d:ba:83:b5:85:96:
         5e:34:bc:6b:37:e2:3f:1c:7a:9a:87:e4:0b:71:14:73:c5:d0:
         f2:3e:48:85:a8:36:cd:f3:4c:83:23:b6:95:47:af:18:17:1a:
         bc:3f:fe:66:bc:13:83:80:9c:5f:5f:c3:f7:1e:07:fb:f9:fe:
         87:6f:2a:f8:a4:d9:ff:1c:f2:51:f9:87:86:71:cc:d7:2b:b8:
         c6:19:e1:fa:ed:54:d4:47:c9:0c:a3:5d:cf:8a:7e:75:16:c2:
         9b:20:6b:99:e2:8d:96:8e:c1:83:cf:55:ff:9c:7f:3a:b8:85:
         c1:3f:70:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:28:40 2026 by rpki-client