Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/56f13a19-fc7b-3085-a266-8451a1f19b08.roa
File:                     56f13a19-fc7b-3085-a266-8451a1f19b08.roa (raw, json)
Hash identifier:          Cujf4ik0PeObGJfIEUdHXC069kaGXBlFs+w+76owVPY=
Subject key identifier:   30:1F:E8:85:B1:24:84:28:25:25:AE:63:22:8C:57:1F:16:AC:9C:BA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F5A331F802E72EFBC8CE02800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/56f13a19-fc7b-3085-a266-8451a1f19b08.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d81:1c80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:33:1f:80:2e:72:ef:bc:8c:e0:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=52272bb2-fbba-49c4-a857-7e6c7387169b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:27:e9:a4:91:53:9f:18:87:a5:21:ab:5b:56:
                    1b:fd:07:72:17:52:1d:89:f2:2b:20:43:3e:93:29:
                    90:8c:59:a3:52:08:74:7a:a5:dd:f4:2b:07:3a:5d:
                    45:30:da:eb:cb:0d:fa:f1:34:9b:36:26:13:7c:56:
                    3c:60:21:d6:cd:3a:d3:2e:09:66:c4:72:b8:c1:07:
                    3f:25:83:e3:c3:d9:40:df:79:d7:da:28:e7:61:de:
                    c8:de:ac:45:38:cc:7d:1e:fc:33:5e:fc:74:98:eb:
                    ae:e4:6a:91:15:bc:06:90:24:9d:b4:5f:1b:36:f3:
                    81:3a:04:8a:ae:13:a7:42:37:0f:48:98:6b:19:4b:
                    67:43:df:38:82:e6:a4:72:a4:ae:40:13:4a:5d:78:
                    db:c3:68:a0:76:37:6d:86:42:84:f8:11:13:e2:47:
                    f2:53:71:76:47:ea:2a:93:72:ce:00:f0:4d:e5:0e:
                    24:c5:b2:b6:e9:55:01:8a:77:a1:36:e8:16:a8:60:
                    66:60:e8:cd:44:0b:9a:66:22:b0:63:d4:fe:46:0c:
                    9a:7b:e1:13:63:e5:7f:3e:66:8c:46:87:b2:2c:17:
                    e5:47:85:0a:b7:8f:7a:c5:a4:ef:a3:9d:01:14:54:
                    15:c4:93:a5:31:3c:6a:9e:ed:73:80:8e:66:7f:68:
                    ee:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1F:E8:85:B1:24:84:28:25:25:AE:63:22:8C:57:1F:16:AC:9C:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/56f13a19-fc7b-3085-a266-8451a1f19b08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1c80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:a8:da:b5:74:ab:54:ac:3c:b2:5f:7a:cb:1e:8e:54:83:70:
         1d:46:60:bc:38:c0:a6:df:f1:6e:0e:9d:c7:64:cd:9b:1f:ff:
         94:55:8e:3e:56:4d:93:3a:c4:ab:bb:35:d7:60:d5:b6:ec:28:
         e5:6b:ac:b8:a9:4d:5d:fd:b4:8f:a5:86:c2:9f:15:a6:30:91:
         38:27:99:fb:85:b2:63:b3:e0:3d:08:98:e1:f7:b9:52:d8:83:
         16:41:8a:f2:88:1c:a5:3c:34:e1:b0:bb:0e:f5:0b:85:5e:1f:
         e7:1c:23:00:ec:72:7a:62:bc:13:c3:16:60:ad:34:a4:39:0d:
         9d:16:25:8b:43:63:b6:8c:12:0f:eb:93:56:3c:d3:68:30:45:
         34:3b:33:c4:03:88:29:37:6b:79:e6:84:e8:7d:57:e4:3d:8d:
         59:53:d7:c8:35:e1:da:9b:2f:3e:c4:c1:77:a1:c8:9e:60:62:
         38:91:9d:c9:bb:8f:34:f9:0d:70:0c:32:50:35:25:31:46:dd:
         66:4f:4a:d8:7e:13:da:0f:96:a5:c7:d7:12:c1:69:85:65:3c:
         d9:bb:c1:e0:e6:e2:e6:54:34:ea:62:ad:71:43:ef:1a:a0:c2:
         4d:e9:bb:38:22:f2:f0:04:02:91:18:43:f0:89:f6:0d:5b:bb:
         2f:13:59:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:41:27 2026 by rpki-client