Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6c10254a-fc26-39ea-a40a-9ded4c8e5f15.roa
File:                     6c10254a-fc26-39ea-a40a-9ded4c8e5f15.roa (raw, json)
Hash identifier:          u07fIN+gLQ/7ZGFt1e93KHnNE6JqAkT3QI7mmfgMhig=
Subject key identifier:   11:A5:35:5E:7D:63:97:7B:CA:90:69:7C:64:82:E4:F4:3F:DD:36:13
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EF44CAE22D36E66DF67A7F080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6c10254a-fc26-39ea-a40a-9ded4c8e5f15.roa
Signing time:             Tue 25 Aug 2026 13:00:12 +0000
ROA not before:           Tue 25 Aug 2026 13:00:12 +0000
ROA not after:            Mon 23 Nov 2026 14:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:7380::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:4c:ae:22:d3:6e:66:df:67:a7:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 25 13:00:12 2026 GMT
            Not After : Nov 23 14:00:12 2026 GMT
        Subject: CN=ace315c4-a270-4429-a1d4-8249eb5acfd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b4:ff:eb:b3:0f:0c:27:4c:93:cb:da:01:9a:
                    5a:02:9e:cf:b8:3a:ca:06:f8:e3:ea:d6:12:ba:2f:
                    1d:5a:47:0d:00:f3:bb:b8:7b:74:f1:18:eb:e7:00:
                    6f:f3:52:26:4f:4f:8d:22:bd:a5:eb:59:98:a3:45:
                    21:78:47:e7:ac:7a:82:81:ba:54:99:9d:24:4b:3b:
                    3f:ac:7a:d8:d8:72:f7:29:ed:33:de:bc:e9:c6:97:
                    22:d2:24:86:4d:99:14:5b:55:1d:1d:41:7a:df:54:
                    8f:59:91:b9:b0:13:2f:04:f8:2b:a7:63:65:69:4f:
                    28:d8:30:7b:96:a3:28:3c:c8:29:41:de:b8:94:a9:
                    7e:f7:a0:13:84:28:05:73:ab:25:b2:77:35:67:be:
                    bd:4c:4f:aa:35:fb:1d:d2:5c:69:64:55:9e:38:ed:
                    42:dc:57:57:65:92:fb:d3:43:02:20:59:2f:44:d0:
                    0f:a0:60:6d:2d:b6:0b:c1:59:d1:c8:ec:08:e1:bb:
                    11:01:a3:ad:2c:61:ca:0c:7f:e0:e8:d2:91:8e:ca:
                    25:4b:2a:88:67:26:ce:5d:5e:45:1f:12:d8:44:dc:
                    a7:d3:2a:88:c0:8b:ad:e7:b0:32:6a:8a:71:61:dd:
                    c8:22:e0:74:12:ff:cc:74:57:fb:fc:4d:62:d6:42:
                    e3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A5:35:5E:7D:63:97:7B:CA:90:69:7C:64:82:E4:F4:3F:DD:36:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6c10254a-fc26-39ea-a40a-9ded4c8e5f15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7380::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:14:34:c6:dc:98:91:f4:ea:28:7b:db:9f:45:8b:8a:ef:72:
         55:12:0a:76:b7:6a:52:de:e3:55:79:75:e3:2f:55:1a:89:09:
         d5:4d:61:64:ff:74:8b:53:cb:10:3c:65:93:35:df:20:ae:e3:
         85:21:b0:ac:30:14:5e:fe:d2:36:87:8b:47:79:25:7b:2c:b9:
         0e:6f:97:e2:58:b3:5b:f5:a5:81:69:ad:2e:98:15:43:cf:96:
         b8:59:1f:5b:39:e6:ff:74:93:9c:34:fa:01:e8:88:2e:38:92:
         73:7a:b6:5b:7c:86:6d:a4:ce:1f:04:fe:4b:65:df:71:67:95:
         1b:c5:fd:44:72:b8:98:19:e5:e7:68:f9:bc:03:fb:70:bc:ea:
         b4:07:cd:d3:41:e7:0d:ec:8f:76:fd:ee:22:c3:ab:6d:e6:24:
         eb:64:e7:11:92:06:04:28:b5:6a:6e:45:04:97:51:06:54:35:
         93:63:3c:a0:ee:80:47:1c:8e:2e:cd:89:c4:09:b7:3c:9d:d1:
         eb:d2:81:c4:9f:d4:b4:b9:6a:1b:f0:0c:41:82:46:2f:91:2e:
         f6:4b:46:e7:e2:f9:11:08:c2:f5:8d:5d:45:5b:95:40:c6:3f:
         cd:dc:ae:98:d8:83:e4:7b:e3:14:29:ad:0a:f8:e5:af:ae:32:
         57:38:cd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:26:51 2026 by rpki-client