Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5675dc02-c647-3581-bee2-523a1d5998c9.roa
File:                     5675dc02-c647-3581-bee2-523a1d5998c9.roa (raw, json)
Hash identifier:          qTkLRuVujb9Le5cV0VgruYtBMtLxd8p71/00xQ642Yc=
Subject key identifier:   02:A6:BD:F7:27:85:26:28:92:D2:08:29:31:43:C7:A2:70:36:00:CF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F480D66720B895AB90CDFDC40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5675dc02-c647-3581-bee2-523a1d5998c9.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d80:3f00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:66:72:0b:89:5a:b9:0c:df:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=3b81c246-8818-49b3-a94c-8899bbe72726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1c:4b:ce:f6:a1:2e:6f:a3:4b:b0:bc:25:95:
                    f6:a6:e9:f4:37:da:b3:bb:93:e6:a2:e5:39:25:9b:
                    67:cf:c6:a5:32:f4:9b:c2:aa:42:6d:7c:b7:27:03:
                    c6:4f:e4:c7:a4:56:14:85:78:65:10:95:24:62:65:
                    cd:42:ad:d5:b6:bd:76:7f:4e:04:2b:c9:99:ed:2c:
                    6c:b2:4c:cd:5a:39:8b:20:46:39:cf:15:fa:6c:4e:
                    ba:ee:c9:5d:88:a7:f9:b1:f1:b0:5e:a8:14:02:b6:
                    9e:cf:29:2f:ac:f5:03:f3:a0:1c:0d:0d:12:e1:95:
                    94:26:b5:0e:de:e6:48:0b:e8:94:c5:07:f6:62:e1:
                    23:73:5b:da:ad:a5:3f:66:33:71:6f:14:71:45:3b:
                    7b:96:da:50:d4:34:f6:9e:d6:56:8d:1c:14:24:49:
                    3a:5c:15:04:bf:1d:19:53:82:61:77:49:7d:80:8c:
                    a8:65:0f:60:fc:15:e7:c5:43:e4:1b:83:45:e4:66:
                    70:9c:8e:9b:0e:35:98:4e:a6:f7:e0:6c:0e:21:42:
                    d7:54:df:37:a1:32:c4:eb:e0:cc:5d:52:13:ef:7e:
                    74:61:aa:84:4e:89:d0:11:9b:68:b5:bc:0c:2d:77:
                    0f:49:e3:45:04:6b:f9:5b:17:71:37:79:3f:27:da:
                    41:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A6:BD:F7:27:85:26:28:92:D2:08:29:31:43:C7:A2:70:36:00:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5675dc02-c647-3581-bee2-523a1d5998c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:3f00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:d1:f4:b3:29:2a:18:94:f2:bc:13:6e:4c:ba:f0:37:49:90:
         d1:97:34:bf:ec:17:a8:ec:1f:6d:cf:41:da:19:f1:84:ef:60:
         f7:93:43:78:5b:28:55:52:8c:2e:1b:75:bf:a4:ca:73:96:f5:
         4e:33:5e:09:83:5b:68:31:08:56:4c:3d:ac:4e:43:f7:14:65:
         e1:f7:49:dd:a6:c1:f7:cd:ed:8f:1d:b4:63:b7:4a:c0:59:d8:
         68:54:35:1d:b1:95:f0:22:9e:b8:37:9e:69:69:29:f8:0d:1e:
         14:b5:00:51:e3:14:cd:cc:a4:84:60:66:cc:20:66:8f:61:ac:
         f2:a0:2c:09:c9:dd:60:90:72:ad:57:0f:53:2b:b4:24:b6:80:
         13:0f:05:9e:43:1d:d8:b6:ba:12:ab:08:45:0a:6d:7d:a4:83:
         7f:69:e4:33:2f:82:f8:5b:26:15:4e:e2:2d:c7:d4:d4:2a:58:
         f5:a9:15:7d:f4:63:aa:2b:61:84:be:bd:4e:81:65:96:cd:54:
         2c:f1:93:40:25:e9:b0:b9:4c:fc:5f:da:52:93:f7:c9:e1:2e:
         b5:d1:44:14:7b:7d:c5:66:16:e0:1d:cd:41:1d:b4:e2:61:1b:
         fa:bc:82:1a:18:78:50:d2:f0:0f:05:e5:9b:78:96:5d:68:b1:
         2c:de:c5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:33:25 2026 by rpki-client