Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6176d5fe-bd5c-33ab-8182-6422869bdd78.roa
File:                     6176d5fe-bd5c-33ab-8182-6422869bdd78.roa (raw, json)
Hash identifier:          Me2ZXOpxxvLwCQ59lgLxfwdP8Dp7J9BRnViz23xVMmI=
Subject key identifier:   D1:E8:0C:69:24:88:1C:F6:87:38:66:28:0B:C0:84:99:42:09:EE:86
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F49733295D7000E44D918E500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6176d5fe-bd5c-33ab-8182-6422869bdd78.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:4f80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:32:95:d7:00:0e:44:d9:18:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d12c31a6-a835-410d-87d1-d7516d92be19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:09:2c:e8:55:ec:c2:9b:e6:f0:7e:3f:9c:18:
                    28:e6:2e:de:82:1a:5a:f2:eb:63:27:98:9f:9e:61:
                    f8:30:be:09:00:1e:e4:c7:5a:4c:96:b9:d4:7b:ee:
                    90:c0:ce:fc:56:1f:f7:81:a4:d0:eb:ca:e6:ba:f1:
                    8b:8e:16:22:b2:fa:62:a6:8a:bd:2a:00:65:80:3a:
                    ad:a5:3c:00:70:2f:90:a2:24:ce:75:3e:02:26:91:
                    31:6d:28:e5:c6:85:21:14:47:91:29:30:c3:15:db:
                    f7:f6:01:a3:d0:2e:c9:51:13:f3:af:7b:da:49:05:
                    9c:0b:c7:0f:8a:ec:59:02:d1:5f:8c:30:ee:f4:df:
                    db:0a:a6:5e:c6:a7:74:fa:5f:1f:3f:46:39:ea:dc:
                    f6:9b:fc:2a:83:fa:8f:08:10:bf:1f:bc:ef:62:3a:
                    39:e6:aa:48:ec:d6:d0:66:40:71:89:16:ae:5d:8d:
                    21:19:6f:15:dc:88:4d:eb:c0:e2:4d:77:98:c6:d8:
                    8a:2e:1c:fc:e4:81:3f:3f:b3:36:6b:b1:aa:a2:0c:
                    21:3d:f1:75:c5:6e:1a:c5:f0:d3:62:e1:33:7a:e7:
                    28:53:d9:74:d8:34:bd:c2:c8:de:93:31:8b:3c:2d:
                    db:d2:65:13:82:a0:0d:a5:04:e8:07:41:a9:77:4d:
                    ba:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E8:0C:69:24:88:1C:F6:87:38:66:28:0B:C0:84:99:42:09:EE:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6176d5fe-bd5c-33ab-8182-6422869bdd78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:4f80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:21:4a:2c:ee:fe:92:7a:3a:63:67:9e:34:c2:93:db:ac:53:
         80:a8:69:84:95:40:b5:4b:09:b5:68:38:f4:a2:24:f8:ee:d1:
         15:26:33:ae:6b:db:3e:36:60:bc:18:36:28:75:5e:71:22:67:
         19:d0:d5:ca:c5:d6:28:ca:2c:1f:ed:24:d1:42:1b:29:de:49:
         34:54:f0:76:54:f3:db:be:e7:c0:f0:6d:da:17:16:69:0b:47:
         fc:0c:b9:19:3b:01:34:02:d0:6f:13:11:ee:b2:96:f5:eb:c0:
         b8:01:de:7f:11:aa:e6:49:db:49:de:b2:49:b3:cf:d0:89:82:
         f9:1d:d4:5c:52:fb:bf:0c:34:da:35:23:af:6f:07:b2:1a:85:
         16:20:5f:83:b8:78:2a:ac:f6:f8:fc:85:3a:3e:3a:fa:8d:6f:
         d2:aa:d3:1a:e9:24:55:78:7d:fb:9d:5a:92:32:bd:de:5b:17:
         18:a3:63:33:f6:08:36:62:a6:40:f4:ab:a2:4b:c3:2d:9e:f1:
         24:76:f5:4c:6c:1a:81:3a:b0:f7:99:50:07:27:43:b2:69:f0:
         18:99:8b:b0:ba:23:ad:15:a2:b0:be:b7:1c:4c:d0:19:9d:6e:
         77:f7:aa:e7:0a:61:e6:6f:7f:0d:74:b9:cd:46:c4:67:fc:ff:
         6e:e9:32:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 13:18:12 2026 by rpki-client