Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/73b43347-6fb9-3488-a979-4768613d4993.roa
File:                     73b43347-6fb9-3488-a979-4768613d4993.roa (raw, json)
Hash identifier:          JNJKt1UEHuDO/06jy0sWCp1xzAkAy91Mk+LYMbFz+hg=
Subject key identifier:   6A:B5:C1:E5:C8:4B:99:EB:F3:BF:D0:97:A0:CF:1A:A0:B3:16:EA:46
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DCF2B18ABAD0410A66594A400
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/73b43347-6fb9-3488-a979-4768613d4993.roa
Signing time:             Tue 12 May 2026 13:00:30 +0000
ROA not before:           Tue 12 May 2026 13:00:30 +0000
ROA not after:            Mon 10 Aug 2026 13:00:30 +0000
asID:                     19905
IP address blocks:        2604:2d81:1400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2b:18:ab:ad:04:10:a6:65:94:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 12 13:00:30 2026 GMT
            Not After : Aug 10 13:00:30 2026 GMT
        Subject: CN=03ddb494-1bb0-42dc-8209-5bf8f4c75504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:83:3b:1c:07:ac:05:f1:d0:3c:b0:82:8e:6c:
                    74:60:8e:4d:b8:6c:ee:49:5a:79:38:98:aa:27:90:
                    42:6c:04:21:a0:d7:4e:14:12:6f:f7:7e:52:0f:89:
                    1a:0c:18:14:60:77:6e:c4:a0:fe:11:97:77:aa:2d:
                    b8:f8:1c:53:a2:e6:c8:60:10:45:23:8a:51:0f:45:
                    36:27:c4:a8:db:40:e6:3e:76:57:6e:59:35:0e:41:
                    f5:52:d4:3b:e5:41:4b:97:d2:0f:a8:2c:8b:85:bc:
                    2b:cb:33:c7:54:fe:09:8b:42:5f:f9:38:88:cf:08:
                    bc:41:84:e6:95:94:27:c3:92:b0:bd:f7:26:ef:1d:
                    96:96:a7:a4:85:2a:d5:f7:34:f0:92:37:93:26:1a:
                    c1:d6:45:98:57:c9:bc:c0:fb:e2:32:ca:49:61:e7:
                    68:f3:46:50:61:51:7f:a1:ed:d1:3d:1b:ae:0d:d6:
                    c6:eb:f9:52:4d:fa:6f:c0:41:f5:19:c2:b1:ac:bd:
                    03:9d:0c:29:ef:97:6c:50:60:a9:28:ae:a6:6e:c3:
                    24:0b:fb:e0:5a:2f:60:32:0e:76:6f:ca:a4:e3:47:
                    74:d3:9d:bf:a6:85:45:03:38:77:94:94:47:00:7c:
                    da:af:cd:21:e1:98:71:62:ab:96:64:c4:3e:bf:33:
                    46:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B5:C1:E5:C8:4B:99:EB:F3:BF:D0:97:A0:CF:1A:A0:B3:16:EA:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/73b43347-6fb9-3488-a979-4768613d4993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:4e:54:16:be:5f:d8:69:14:01:92:e6:15:40:3d:17:94:32:
         4d:84:4a:a2:e7:bd:ca:37:b2:a1:1b:fd:42:8f:d3:a1:cf:0c:
         b5:f7:f1:2c:2a:70:36:b6:03:14:f1:83:9f:c0:4f:45:53:28:
         95:9f:b0:2e:ec:d5:d9:ca:c0:66:28:43:22:22:42:9f:40:bc:
         8a:ba:e7:3e:56:ec:66:c8:e6:5b:3f:b4:38:d3:a6:c5:d1:e6:
         68:7c:18:66:80:f6:9a:fa:40:9d:96:e5:19:b1:5b:35:8a:51:
         50:92:6e:c2:b5:21:b8:06:f2:16:43:2c:b8:11:fd:67:1c:78:
         cd:96:ee:86:94:59:6a:e9:24:00:c1:f0:7c:c6:d5:74:d3:70:
         08:06:68:50:44:41:69:df:fa:79:04:78:bd:77:9a:e2:6b:4b:
         06:78:1c:4b:f3:34:04:51:16:b7:d9:b1:55:26:03:66:a3:df:
         6f:7b:f0:58:5f:59:4e:58:2d:00:ba:a4:2f:ab:63:86:15:96:
         0c:c7:d9:f4:97:4f:15:f4:6d:7c:38:b4:ce:fc:28:cf:ef:f3:
         b7:e4:83:a8:c9:f0:ab:ba:de:a0:49:bf:d6:aa:bc:6a:34:de:
         84:90:8c:a0:74:48:e9:20:97:2f:bd:ef:5e:69:d5:9c:11:7d:
         1d:0a:66:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:38:42 2026 by rpki-client