Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/55d6dda9-1a48-3728-bc2d-7d6e4aead5a4.roa
File:                     55d6dda9-1a48-3728-bc2d-7d6e4aead5a4.roa (raw, json)
Hash identifier:          Dhu3TfMFgn5OLGs/UB0m5M0P8BaFbYCbFFSRJb73S/c=
Subject key identifier:   28:12:CC:04:5B:1B:84:59:74:50:89:06:20:87:FE:28:B0:28:C2:47
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D300A5301AC3A5ECE3BE19E00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/55d6dda9-1a48-3728-bc2d-7d6e4aead5a4.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     19905
IP address blocks:        2604:2d81:1580::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:53:01:ac:3a:5e:ce:3b:e1:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=98990042-b864-4156-801f-3862640f1094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:f9:4a:e5:13:35:b2:75:4f:22:51:5f:f6:ec:
                    bf:05:de:f5:53:79:61:01:b8:e3:de:83:7c:de:aa:
                    2f:b5:d0:ba:58:2f:a8:7a:6d:cd:3f:36:ae:db:00:
                    c9:4d:a9:6d:05:f0:c2:d8:e9:c9:2d:68:eb:2c:bf:
                    cc:44:e9:dc:67:de:f9:81:ae:21:d8:7b:dc:da:f3:
                    a5:d5:00:4b:6f:2f:c3:94:ff:15:15:50:36:e4:c9:
                    ed:59:33:82:9f:99:dc:55:4f:11:23:d3:8e:48:10:
                    a3:60:1d:c5:30:32:9b:e0:56:9e:b0:1b:da:5b:71:
                    98:59:a5:43:c1:df:4d:26:1f:e2:2f:70:5f:13:00:
                    f0:ab:cf:6e:1e:d5:71:b6:79:bd:c3:d0:41:2e:40:
                    be:14:fe:6f:01:b0:f2:d6:83:d0:03:0d:82:94:15:
                    d7:f5:6f:35:5f:b8:b1:2e:6a:a5:16:a1:3a:37:19:
                    d2:44:bc:1a:1a:db:3d:68:94:e9:e7:a9:4b:bf:a8:
                    d8:87:77:4e:21:a8:1c:45:49:1a:5d:75:5e:3e:46:
                    a6:f3:a5:f3:e7:3a:f9:82:34:12:2e:b4:9f:8c:c6:
                    cd:c8:3a:b9:e0:04:55:37:7c:45:4b:65:00:33:a3:
                    09:8b:63:e7:03:76:78:b3:4b:ba:c4:34:85:ad:20:
                    7e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:12:CC:04:5B:1B:84:59:74:50:89:06:20:87:FE:28:B0:28:C2:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/55d6dda9-1a48-3728-bc2d-7d6e4aead5a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1580::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:28:e7:ac:af:e0:b5:93:85:d8:47:3b:1e:d1:48:0b:12:58:
         dd:2b:af:84:3d:2c:24:9c:c6:48:83:04:17:94:d2:6e:25:e8:
         e0:4f:6c:40:75:e2:85:62:36:3a:ff:dc:a2:7f:4f:98:38:ce:
         4f:b9:41:72:e1:ee:50:aa:51:fc:bd:7c:0d:bd:97:d3:e4:f8:
         44:06:3d:c8:93:eb:88:2c:97:00:be:b7:f2:81:64:ad:13:92:
         e6:bd:98:36:e0:e2:b2:e3:0a:e8:1b:7d:c9:60:f4:55:0f:a6:
         33:06:f7:c4:15:20:dc:aa:ab:fc:ea:a5:32:81:e4:b2:98:52:
         4d:f3:18:7b:9e:87:5e:19:ed:3e:c6:ad:55:cd:a4:5b:80:52:
         9d:ff:72:b6:8c:fc:6f:d2:cf:e2:06:97:36:b9:42:90:c2:71:
         57:f9:81:bb:c0:3c:8e:a5:55:cb:82:4b:a1:56:28:b6:25:f0:
         a3:0b:9c:78:0a:2b:2d:3e:57:3a:e9:57:b6:96:df:6b:aa:6e:
         11:80:0c:96:98:99:c8:76:e4:8d:53:86:f1:c0:6c:25:10:07:
         3c:a8:1c:d8:d3:a9:4f:02:a0:84:c3:9c:57:74:18:a0:bc:1b:
         06:0b:6c:ac:a0:10:27:9e:32:02:97:ed:4b:89:64:05:a4:67:
         d5:a1:82:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:36:39 2026 by rpki-client