Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/52b59420-ad92-3c28-8724-8ec6b4e7df57.roa
File:                     52b59420-ad92-3c28-8724-8ec6b4e7df57.roa (raw, json)
Hash identifier:          pwlEzsF6hVdt1NlldfUYAEBGrKYdC/4EtBJYUgSEGV0=
Subject key identifier:   06:0B:86:E9:6D:AC:BA:62:C6:96:54:83:B4:05:3B:42:E6:C1:D4:B6
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E51E9FC82E0649BFB12B11A90
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/52b59420-ad92-3c28-8724-8ec6b4e7df57.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     30036
IP address blocks:        2604:2d80:3600::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:fc:82:e0:64:9b:fb:12:b1:1a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=5c33f712-0686-490c-8c98-4df1d33e3487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b8:fd:21:7f:98:c7:79:ff:3e:97:9d:06:94:
                    80:be:eb:50:ef:b7:3c:02:35:7d:80:17:ae:89:aa:
                    e1:ef:9c:12:5c:ad:73:43:36:57:02:df:44:14:57:
                    0e:ce:14:0f:f0:d0:9c:59:c8:69:7f:74:4b:8e:cf:
                    ae:83:84:fb:66:14:26:0f:db:3e:cc:74:58:43:32:
                    6c:f3:d0:82:19:8d:e5:ae:7d:1b:d4:87:34:91:c7:
                    32:52:d6:d0:60:da:17:a2:8c:a8:a5:83:8d:df:a2:
                    c0:02:13:a3:ef:9d:d8:64:0e:ee:40:36:92:58:01:
                    96:e2:22:ab:43:c9:86:63:e5:f0:6e:8c:8f:d8:3c:
                    48:66:71:78:68:ea:57:6b:33:87:49:a2:c9:f4:30:
                    6d:ad:ce:66:fc:12:a8:7e:8a:c8:02:2a:1d:40:69:
                    d1:4e:ff:d8:3d:0a:60:a1:2b:9e:1a:0e:4a:24:81:
                    d2:4e:0d:da:5c:1d:92:44:14:c9:80:53:7f:5a:0f:
                    61:a8:4e:d5:39:83:dc:9a:9f:ae:41:ad:eb:8e:2f:
                    d7:07:a0:2a:34:7d:d1:6d:74:06:5b:1b:2a:55:d9:
                    82:3c:0b:ec:c9:a1:1c:a9:36:8c:07:83:19:ca:68:
                    97:03:1e:65:99:3b:5c:9a:cb:17:4e:5b:e8:94:b8:
                    68:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0B:86:E9:6D:AC:BA:62:C6:96:54:83:B4:05:3B:42:E6:C1:D4:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/52b59420-ad92-3c28-8724-8ec6b4e7df57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:3600::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:52:d1:06:d0:43:3d:e1:59:cf:e4:fc:1b:cd:9b:c4:80:78:
         f9:7a:07:4b:63:c2:9a:d5:26:25:6c:8f:0c:23:18:d1:6a:82:
         71:b4:66:9e:0d:0e:a9:85:11:a8:f5:46:84:85:c9:b7:9f:2c:
         ec:c9:51:3f:ff:ee:39:e5:52:80:f6:ec:73:61:72:14:48:ac:
         e9:93:6c:d6:a5:07:6d:88:4e:d7:f6:79:29:35:3f:9d:5e:53:
         d8:d8:c8:8c:0e:bd:32:56:29:3c:3a:66:50:60:0a:dc:9c:fb:
         09:d2:82:13:fc:14:b8:3c:04:2c:2e:f4:26:fe:9d:60:b9:14:
         92:a2:ba:df:4a:d9:dd:2f:57:aa:d1:de:05:8a:4b:53:7a:21:
         6b:24:3e:b8:9f:d6:62:92:ea:6a:f9:a5:00:d2:7d:38:15:20:
         ee:91:dd:d1:88:3f:2e:ad:e9:39:66:7e:dd:28:23:07:db:b3:
         05:8c:08:06:dd:41:d3:b6:72:1f:01:0f:56:f0:32:04:60:87:
         55:a5:a0:52:b6:6f:10:c7:ae:60:ab:98:5d:ca:0f:10:38:9a:
         ff:0c:52:61:03:04:43:89:d6:71:a6:93:14:44:5d:f4:28:a6:
         35:83:a0:b8:0e:36:4e:63:db:57:b4:61:b1:ed:10:b1:19:2c:
         f3:f2:cb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:37:26 2026 by rpki-client