Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8df46c56-2d27-3bb7-9422-3944715feb76.roa
File:                     8df46c56-2d27-3bb7-9422-3944715feb76.roa (raw, json)
Hash identifier:          kyAm6AeXoE1Qx2jLl7lsuEh0XYwinf+KUBDuAhEZKgU=
Subject key identifier:   0E:73:81:32:38:0C:E2:DD:AE:B8:B4:B6:AA:C1:77:52:AA:DE:17:81
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24E10D49DF2FF06116337680
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8df46c56-2d27-3bb7-9422-3944715feb76.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2d80:f580::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:0d:49:df:2f:f0:61:16:33:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=5d042255-32df-4aeb-bb0d-243f59d5aa46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:72:22:b6:e2:7d:c1:07:9b:1f:a7:92:25:5a:
                    1e:77:c7:02:01:61:15:39:dd:b4:d4:3c:5c:c6:1a:
                    c2:6e:10:b7:14:ea:eb:52:79:6f:cc:d7:8b:8f:27:
                    f1:e3:15:8c:08:be:35:de:65:ee:2b:bd:5e:26:1d:
                    a2:ef:05:64:e4:66:a2:f9:1d:df:26:21:e4:f5:bb:
                    64:a7:c1:df:d0:99:e6:cb:d5:ea:40:b5:08:8c:37:
                    8a:75:fd:2a:3e:b3:e4:c9:51:13:fe:54:94:f1:97:
                    59:82:5b:81:29:e0:30:3d:c1:bc:0b:60:89:e5:89:
                    12:c8:98:e1:d1:13:18:de:9e:cd:b5:cc:00:15:73:
                    3f:53:6a:bf:81:dd:9e:f0:d1:a7:e0:15:90:99:29:
                    b9:0f:cc:3a:a8:56:33:75:ef:a8:78:32:f8:1e:03:
                    30:70:2f:2d:14:6e:28:f9:c5:d9:d1:e0:52:dc:23:
                    0d:f8:d8:5e:13:c9:95:f1:d8:55:9c:c8:c8:fb:f2:
                    43:d2:e9:96:62:94:8e:04:53:9b:27:49:c8:dc:88:
                    fa:fa:19:b4:a1:c5:37:2b:2a:d5:75:d8:3f:57:b5:
                    6f:40:16:0b:bb:9f:c3:c2:c0:26:cb:f9:fe:12:37:
                    fc:fd:0e:19:47:ae:55:d3:fd:c8:d5:2e:2d:f3:2d:
                    ad:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:73:81:32:38:0C:E2:DD:AE:B8:B4:B6:AA:C1:77:52:AA:DE:17:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8df46c56-2d27-3bb7-9422-3944715feb76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:f580::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:ff:49:83:68:0b:c9:e2:fe:d3:6d:7d:04:ba:99:7a:d2:e2:
         a4:29:e2:40:3b:a0:0e:41:49:ad:69:91:20:d5:3b:f4:25:7b:
         55:36:6c:f2:8e:99:2d:08:bd:dd:65:81:8f:8f:84:4d:71:24:
         6d:a7:3f:31:e2:9c:1d:4c:2a:24:05:99:ee:b9:63:20:37:c7:
         ee:28:a4:9c:73:10:3b:e1:ac:2f:00:cc:8b:ab:48:6c:2d:6f:
         b5:e6:32:bc:81:30:b5:4c:f1:d1:bc:b2:83:a9:a2:32:c7:3d:
         a3:62:c1:1a:c6:b8:3f:e6:f1:dd:2b:37:16:04:50:9d:b0:5e:
         7c:91:7e:8f:9c:6c:40:3c:9a:82:97:70:15:0e:17:02:1d:d3:
         d3:90:aa:1d:70:b7:7b:7d:ab:66:7e:da:4c:50:a1:2a:81:2b:
         3f:65:36:de:5a:dd:5d:e3:11:1e:83:85:7f:9e:c3:c6:43:56:
         3f:16:c0:e2:2a:f1:54:33:fb:0f:34:24:30:74:c4:8d:65:98:
         d3:6c:20:d1:0e:73:f5:35:04:b1:b6:9d:bc:da:f1:c0:48:33:
         b0:47:f7:8c:9f:96:2b:e4:c5:a1:9d:3d:f6:70:2e:97:7e:ba:
         58:4b:2d:ab:e3:e2:94:cb:86:4b:1a:4b:cf:ba:01:9d:fc:64:
         a7:46:b2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:06:14 2026 by rpki-client