Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8624c36e-b8d3-3f8c-b33b-0ed25c28b804.roa
File:                     8624c36e-b8d3-3f8c-b33b-0ed25c28b804.roa (raw, json)
Hash identifier:          4HM0ix8DKGq6TXJWCKYoiEqn1gK/a5FVaMDcp3YfvEc=
Subject key identifier:   B9:0A:22:98:BC:18:1C:80:14:54:68:D6:50:EE:9B:81:4F:BA:C8:83
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E5E1545A9DF9A2A56881C98C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8624c36e-b8d3-3f8c-b33b-0ed25c28b804.roa
Signing time:             Thu 02 Jul 2026 17:37:21 +0000
ROA not before:           Thu 02 Jul 2026 17:37:21 +0000
ROA not after:            Wed 30 Sep 2026 17:37:21 +0000
asID:                     30036
IP address blocks:        2604:2d81:9800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:15:45:a9:df:9a:2a:56:88:1c:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  2 17:37:21 2026 GMT
            Not After : Sep 30 17:37:21 2026 GMT
        Subject: CN=3fdc2b16-5562-4ec3-a1ce-645bf4d6deb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:58:c3:8d:f6:59:95:f6:44:91:0b:ab:db:a1:
                    af:9e:4e:c8:34:89:57:62:33:2b:fe:37:65:37:59:
                    1d:da:9e:a6:6e:d2:66:47:6e:b4:44:d5:be:b5:74:
                    cb:77:0a:99:67:45:61:72:8f:28:e4:d5:44:06:65:
                    c7:c4:20:31:58:e1:5a:21:64:13:73:2a:3e:e5:56:
                    97:2b:a5:1a:6f:76:82:e0:ad:bb:49:b7:48:15:3d:
                    1f:db:ad:92:33:48:94:93:92:4d:1b:81:1e:8d:ee:
                    0d:a8:8e:f8:c7:cb:8b:0b:80:44:4a:77:9c:38:21:
                    c5:1b:70:79:58:91:76:2c:ae:e7:75:8a:0d:ce:27:
                    69:e7:df:2c:6a:c0:97:1d:0e:e2:fe:a5:80:59:1a:
                    5b:ea:fb:b5:74:bd:ff:44:f2:fd:7a:32:46:2b:80:
                    45:35:1a:b5:33:2d:32:54:19:da:26:62:4a:0d:b4:
                    fa:df:f7:74:8d:c7:a9:5f:17:19:c2:87:84:a2:0c:
                    02:41:cc:06:b6:a3:7d:e2:45:74:95:3d:ba:37:9b:
                    bc:00:93:fc:ab:99:0e:f6:af:fa:c4:05:36:c3:77:
                    d9:30:e9:8d:58:d9:a1:a2:8a:1a:09:a1:55:48:e4:
                    02:9e:e6:eb:96:87:d8:18:ff:36:2e:ef:d1:cb:4f:
                    6d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:0A:22:98:BC:18:1C:80:14:54:68:D6:50:EE:9B:81:4F:BA:C8:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8624c36e-b8d3-3f8c-b33b-0ed25c28b804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:9800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:86:6e:60:a3:08:7d:16:a3:7a:f5:05:e5:24:b7:0d:90:5d:
         f6:7a:ad:41:85:81:12:49:84:7b:d4:f1:95:1e:3c:6e:fd:70:
         cd:a9:c7:c2:3a:49:33:fe:78:d3:b9:b9:6d:8a:a7:8f:05:87:
         93:4d:b7:42:31:71:5d:9b:fd:ee:8d:7e:ae:30:22:b4:65:9b:
         67:64:7a:81:4e:a6:42:b0:ee:e2:29:3d:23:b2:b5:29:83:08:
         e2:94:9f:77:c6:3f:39:6f:b8:1f:2f:bc:ff:7d:e0:b9:49:17:
         cd:4c:96:96:2b:e2:d5:b7:a9:80:46:f8:bb:7e:67:ec:bb:73:
         13:9a:58:a7:53:80:4b:bc:00:51:89:09:84:f2:33:d1:66:50:
         c5:51:de:9a:00:b3:98:b1:93:a4:13:89:8b:b3:8c:eb:0b:fc:
         aa:6c:c6:cf:64:13:f7:20:07:ce:4c:0a:5e:ef:b0:e6:e6:6f:
         17:86:c8:df:72:ce:9d:d5:25:f4:d8:95:e5:16:44:95:8b:4e:
         5f:ba:db:0b:74:ab:a9:fe:47:4b:c9:fd:a2:91:a1:df:6e:51:
         27:97:4b:d9:a6:a9:f4:82:58:9d:48:1a:cd:f5:61:98:73:e0:
         87:7f:d3:92:c9:01:8d:37:7f:b4:7e:b7:eb:ce:00:1a:ce:bd:
         3b:31:95:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:08:27 2026 by rpki-client