Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89f552c4-e871-335b-a52e-1783b13622ce.roa
File:                     89f552c4-e871-335b-a52e-1783b13622ce.roa (raw, json)
Hash identifier:          CdSJfdhnFixu/0QJ9SjAh9FGSV+Ooo0OdfXfcMT3T/Y=
Subject key identifier:   04:AF:62:F5:7E:9B:89:CE:4F:AF:D4:44:79:67:C5:F5:54:A8:07:41
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24DF79D47ADE8B34E537A180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89f552c4-e871-335b-a52e-1783b13622ce.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2d80:a180::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:79:d4:7a:de:8b:34:e5:37:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=fdcc4c0e-86dc-4e54-afec-cb1a92732378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:96:54:85:fe:ff:c6:87:61:ae:78:0d:3d:56:
                    90:bf:00:75:86:18:64:8a:6a:81:88:72:44:ba:0d:
                    90:a5:9c:1c:7b:6a:0f:be:95:8b:e2:60:50:73:dc:
                    bd:d4:d0:0a:74:13:1c:c8:d8:71:af:74:79:89:f1:
                    ef:d2:16:71:05:00:a4:58:a9:45:08:0a:cd:c7:47:
                    0d:0d:a1:91:4a:90:d6:1f:3b:66:77:bc:5d:df:13:
                    12:dd:69:26:75:f4:58:fc:ab:37:04:d2:59:a9:98:
                    2d:ca:7f:e3:fd:34:c3:e4:f5:73:8b:62:a6:60:40:
                    26:9c:5e:36:75:6e:0b:58:bb:3e:f6:bd:39:5e:27:
                    dc:aa:ed:bd:96:58:85:6c:b6:09:97:3d:f1:9f:1a:
                    82:7c:da:39:9e:7a:68:57:e9:d2:b4:03:2c:57:91:
                    ea:f7:0d:f7:df:71:10:81:2e:ec:b7:2b:a0:01:94:
                    b6:f0:1c:06:a0:26:89:d0:6f:9e:fb:1a:f9:0a:82:
                    61:90:a0:9e:7a:93:84:8f:fb:6d:51:74:74:fa:02:
                    ac:f6:9e:25:93:c5:21:83:f6:12:d2:07:94:75:02:
                    25:f9:55:f2:b4:a0:25:79:0c:fe:2d:42:8b:17:a0:
                    cb:05:ef:46:87:c1:8e:b5:d7:24:3a:f4:21:90:7c:
                    77:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AF:62:F5:7E:9B:89:CE:4F:AF:D4:44:79:67:C5:F5:54:A8:07:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89f552c4-e871-335b-a52e-1783b13622ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:a180::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:9e:9e:af:bd:b1:8c:50:d9:b3:1a:a4:fc:b4:9c:41:5b:27:
         59:22:43:2a:64:6e:44:d9:1c:17:0a:f5:22:a9:2a:77:4d:4d:
         43:45:f7:34:bd:26:dc:4f:63:ff:be:fd:1b:e9:88:fd:27:b0:
         c1:46:6e:29:39:bc:83:51:4d:4c:11:6a:52:0f:ef:6e:a3:61:
         ac:3f:39:f5:af:11:3b:18:20:1d:41:9e:6b:c0:27:4d:5b:15:
         70:ca:77:9c:38:83:48:fa:8d:f7:91:ba:a9:47:1e:82:5e:fb:
         73:f7:ca:5b:8d:30:1a:fb:db:ae:02:8f:35:ed:58:5a:cc:da:
         b7:f5:f2:8d:33:79:09:1b:5d:01:45:e5:a9:73:8b:21:a4:73:
         31:22:c2:f3:96:5b:db:c3:1f:42:1a:4d:5f:69:90:48:7f:ca:
         45:52:ea:19:97:9b:b6:02:09:55:89:b4:01:51:dc:72:2c:74:
         37:28:a8:0a:ae:58:06:c4:ca:98:17:14:ae:cc:a1:a2:1b:91:
         f8:9d:44:f1:9a:be:18:46:be:6f:ce:10:e0:ff:a1:06:7d:14:
         91:dc:c0:3c:a4:77:27:f5:34:f2:48:df:c2:c2:96:3d:aa:e8:
         30:4b:2a:8c:b1:f5:eb:f6:74:12:71:a2:50:99:64:0d:f9:75:
         8c:e7:c5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:31:34 2026 by rpki-client