Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4af779d3-3ad5-368f-ae8a-873a3a528992.roa
File:                     4af779d3-3ad5-368f-ae8a-873a3a528992.roa (raw, json)
Hash identifier:          zg9uHjMgnd0ftbRVOdM6iukiH/V+rd3yoBjBPANOzVo=
Subject key identifier:   32:EF:A2:4C:EE:7C:DF:B5:9A:A1:27:22:A7:ED:A7:F9:DB:DC:2F:6F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24DF9E646152302A4D064780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4af779d3-3ad5-368f-ae8a-873a3a528992.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2d80:a680::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:9e:64:61:52:30:2a:4d:06:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=78d951c0-1ee3-4f70-9453-2ed18952afa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f9:20:38:42:b7:a5:d3:4b:39:38:47:10:11:
                    54:4a:e4:8b:ca:f7:73:29:a4:ff:52:60:a9:6f:bf:
                    9c:77:e1:b3:60:39:8e:05:96:05:50:26:41:ab:ae:
                    7d:8a:a0:f9:41:2c:22:17:67:83:3c:43:c6:c1:f1:
                    00:41:20:59:66:42:b7:e8:bd:20:d0:17:07:13:38:
                    7e:a8:e3:7a:f7:ef:17:9c:b6:39:c8:f4:43:de:ab:
                    b4:e4:5d:52:1a:a6:5a:d6:ae:40:44:ca:07:82:19:
                    ba:9c:80:80:46:09:c3:28:c4:52:fa:ae:0d:7e:03:
                    80:21:b1:64:02:ba:f2:32:b4:ae:15:08:11:02:d3:
                    02:61:4f:c4:e2:94:1e:0a:80:1c:e4:30:01:bd:1a:
                    84:08:88:94:87:7c:2a:0a:2f:82:7b:20:9e:2e:9f:
                    ce:4a:75:4e:42:07:32:dd:67:65:c4:8e:44:47:6a:
                    16:03:03:72:40:10:d3:d7:82:8f:27:a8:b2:01:ea:
                    7c:d8:94:0f:fb:c1:fe:d7:6b:a0:5d:2e:a9:09:8a:
                    e4:55:8c:2a:a2:27:b3:61:e0:89:ad:9b:69:18:3b:
                    7b:cb:12:41:37:77:07:03:3c:5b:25:27:ed:f5:86:
                    40:31:19:e8:70:03:90:6d:5b:92:d2:13:a9:78:4e:
                    48:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:EF:A2:4C:EE:7C:DF:B5:9A:A1:27:22:A7:ED:A7:F9:DB:DC:2F:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4af779d3-3ad5-368f-ae8a-873a3a528992.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:a680::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:c7:73:22:7c:24:35:67:23:e4:47:52:67:05:ae:77:c5:2f:
         22:7f:1f:e0:7e:8d:13:5e:5a:b3:dd:b7:94:b1:04:69:12:7a:
         22:7e:6c:3e:da:96:c1:85:e9:3d:67:69:b0:89:e5:14:dd:0e:
         47:b2:84:c2:dc:ff:ff:47:60:a9:c2:e2:24:24:08:0a:ff:44:
         89:13:d9:20:30:de:27:5d:3c:5b:17:15:aa:bc:66:0b:d9:06:
         32:af:ca:3a:9b:44:9b:4a:be:2d:57:bd:78:71:86:1e:a0:a3:
         a6:cf:f8:38:5b:d0:2a:ee:85:b3:c3:20:a9:cd:4b:71:5c:6a:
         3e:3e:1c:b5:43:0c:eb:ea:17:53:f2:ba:ba:61:9f:4c:d0:f4:
         59:a1:8b:38:8a:ef:28:2a:d5:cb:c5:74:ad:58:ad:4b:66:df:
         31:70:e2:c7:92:f7:e8:87:9b:95:34:b4:4a:de:48:81:ee:48:
         38:ee:4c:f5:e0:67:ef:79:eb:e1:f6:c9:b0:ca:19:c6:87:2c:
         22:da:05:c1:d1:64:07:01:2c:f4:91:5c:ed:3c:5d:eb:dd:b5:
         90:b5:51:ce:e2:ed:a6:04:3a:48:bd:cc:c1:f8:c8:dd:68:2f:
         3d:08:47:c9:37:83:28:3e:0b:f4:9f:9e:d8:3e:07:40:d4:9a:
         7d:cd:99:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:41:01 2026 by rpki-client