Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4e945cfe-9098-36b7-81fd-423ed720bf88.roa
File:                     4e945cfe-9098-36b7-81fd-423ed720bf88.roa (raw, json)
Hash identifier:          eKKc8sZC5tmAMzMflSPKF+9wyqImmuz2iVag3rXKjTI=
Subject key identifier:   6F:C5:AC:2C:42:C0:87:77:E0:45:E8:9D:03:0C:FD:A9:18:A1:50:9B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F49885E7D174F37379CDC6100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4e945cfe-9098-36b7-81fd-423ed720bf88.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:8e00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:5e:7d:17:4f:37:37:9c:dc:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d07c1b8f-5663-4a0b-981d-0159c2e119a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d0:59:e3:ec:2f:1d:9b:47:88:71:e4:52:e0:
                    9e:98:e1:77:77:59:82:71:e4:0c:ae:3c:8a:70:97:
                    a3:e8:4c:13:b7:16:d7:c0:aa:b6:d9:85:fe:34:61:
                    2a:2a:e0:08:ec:77:3a:79:ea:04:2a:17:1f:76:9d:
                    c9:10:69:54:d6:ea:55:e0:8a:4d:01:e6:d0:d8:12:
                    40:4f:53:05:da:68:c3:09:93:3c:07:a5:93:0a:f2:
                    60:fc:98:11:ad:26:c0:8f:eb:71:68:6b:a9:0f:38:
                    73:7f:89:a4:a3:02:1d:56:71:70:ba:93:ae:96:0f:
                    48:80:4c:62:98:53:3b:d0:c9:e2:8e:80:93:80:42:
                    e2:29:dc:b3:50:00:0e:8d:1a:ad:ab:f5:91:49:fc:
                    4a:33:59:58:3b:23:56:cf:a1:76:fb:4b:5e:d4:99:
                    3e:a5:6a:0c:8d:1e:f7:23:96:ae:93:4a:95:50:a1:
                    27:94:c1:37:34:7f:4c:0d:2f:9b:26:fe:0d:92:5c:
                    1f:c7:8e:eb:37:fa:e4:21:bb:31:b5:db:f3:ba:74:
                    33:82:f4:04:8b:5c:b9:07:d8:ea:ee:26:05:94:c6:
                    12:22:13:d3:5c:4f:bd:62:ad:5a:02:62:90:f4:2e:
                    70:01:fe:b5:34:a9:a9:a7:95:31:4f:10:25:f8:95:
                    19:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C5:AC:2C:42:C0:87:77:E0:45:E8:9D:03:0C:FD:A9:18:A1:50:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4e945cfe-9098-36b7-81fd-423ed720bf88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:8e00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:da:6d:05:bb:d1:44:88:78:e1:42:e2:a3:0b:da:0a:fc:29:
         65:0c:9c:46:e3:64:b4:f5:93:df:a7:5e:3e:3f:10:13:58:b3:
         f4:b5:d1:26:32:3e:6a:5a:fb:66:8a:81:95:61:02:6a:04:09:
         47:59:4c:31:ed:ef:2a:23:97:15:92:45:51:c3:b6:d4:9e:a3:
         1b:7e:6c:0d:57:16:df:c9:ff:43:0b:da:5c:89:a6:a4:8b:00:
         62:02:fe:85:98:8a:24:41:58:e6:b3:be:ec:37:ad:c9:1d:ca:
         7d:03:e1:af:1a:d8:7f:ca:d9:40:37:1b:09:95:f8:09:e3:59:
         3d:c2:34:5a:09:f8:3c:7d:15:4f:ad:03:65:6d:fe:f4:49:83:
         c7:ea:ec:36:28:99:3f:9f:5f:42:d0:56:24:df:01:58:b0:a1:
         32:ab:e1:36:d6:5a:9b:bd:a0:29:55:a7:c1:be:d9:a8:6a:55:
         84:6c:34:be:bc:11:83:2f:1c:2b:d4:4b:14:64:a8:b5:1a:ce:
         e0:e9:78:13:d0:e6:6a:16:26:33:30:b2:45:72:c9:e7:39:b7:
         94:80:a3:a5:29:1e:c5:2f:1c:62:08:0e:86:cf:ae:75:b0:71:
         5d:dd:8a:23:75:94:4d:f2:c8:2f:7d:9b:f5:b8:ac:eb:34:8f:
         38:af:79:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:22:22 2026 by rpki-client