Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96efea69-f6ec-3a9a-9fe3-13f5418086ba.roa
File:                     96efea69-f6ec-3a9a-9fe3-13f5418086ba.roa (raw, json)
Hash identifier:          Z/1CUHMUQO97Bjx9uXerSj5yzzOUxn783tSmlZATGuo=
Subject key identifier:   06:2D:90:BF:B6:61:C2:44:64:F0:9F:09:D7:64:26:F3:1F:74:4F:35
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EF01CDF2EDE6065A93CAE46C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96efea69-f6ec-3a9a-9fe3-13f5418086ba.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d81:3800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:df:2e:de:60:65:a9:3c:ae:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=5df06f46-8bf4-4e35-8ba1-68612990d2ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f6:d8:14:74:d0:2a:c8:88:94:94:b9:c0:79:
                    d2:9e:10:b0:6f:75:41:cb:3b:f2:f3:f1:5c:f3:36:
                    07:b2:66:54:03:b3:33:1b:7d:2e:e9:86:f8:42:fc:
                    41:0c:e2:d0:87:41:55:52:a7:1c:eb:92:9a:9f:a1:
                    00:80:99:bd:ae:e2:23:0b:e2:f4:b0:4a:49:68:2f:
                    62:ec:15:6e:26:20:8f:00:39:8b:70:b5:0c:be:dd:
                    c2:72:ad:ff:0f:cb:8d:36:3a:58:f4:60:0f:c0:89:
                    68:f5:9c:10:58:6d:35:a8:cc:c5:99:cd:b8:60:37:
                    b0:35:d2:65:36:5f:b9:1f:93:23:fd:69:e0:0e:87:
                    26:9f:7a:ee:8c:11:8c:0f:59:7b:53:24:e3:a4:06:
                    3c:e6:0e:14:7b:2f:7f:70:2a:a1:87:ca:d3:63:71:
                    ec:9d:d4:48:64:f0:fa:38:8c:92:c0:f9:5a:ee:0a:
                    fd:b9:82:5b:c8:f1:65:df:14:90:e9:df:8d:3e:bc:
                    3e:76:c4:54:22:25:4d:73:38:e8:6d:f5:2f:cf:a8:
                    78:1e:35:f9:ec:7c:d2:1c:d4:0b:f1:3f:02:29:cd:
                    f7:6a:e2:d5:f6:a4:48:15:52:c8:ee:d9:d8:70:a4:
                    7b:6f:dc:a3:74:8c:a0:ab:1f:5b:41:01:4a:3d:85:
                    a9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2D:90:BF:B6:61:C2:44:64:F0:9F:09:D7:64:26:F3:1F:74:4F:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96efea69-f6ec-3a9a-9fe3-13f5418086ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:3800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:72:98:99:6e:74:86:e4:9e:01:69:e6:87:c5:1e:d7:34:64:
         10:bd:81:9d:ca:e1:7b:c8:0a:40:c7:e8:1b:8f:f1:d2:f4:ac:
         b0:75:04:7e:a1:28:43:02:f3:65:37:64:32:d4:a4:e8:8d:5c:
         dc:a5:a4:b2:a1:4d:58:68:24:b9:a5:ea:5a:8e:bb:1b:33:e3:
         92:5f:b9:f9:1d:03:52:5c:ff:c6:e5:96:72:a2:9a:a2:f7:87:
         7a:54:28:91:c3:db:63:21:88:74:25:ed:cc:57:7e:62:13:d4:
         56:e5:5e:62:b6:2b:33:7b:7a:35:ad:64:45:b2:00:6e:4f:a8:
         3d:37:da:d3:a1:fd:0d:1d:63:f8:35:17:1a:9f:09:ba:96:fc:
         9b:2e:69:35:43:09:98:0f:8f:a5:13:7d:f1:b7:c2:32:bf:80:
         77:48:d5:78:ab:0d:93:6f:71:68:c5:c3:88:33:0d:ea:75:91:
         5b:63:d9:67:9e:a1:07:c3:a2:ec:28:29:29:40:26:45:17:98:
         23:8b:a2:99:11:4c:47:e9:11:92:86:67:36:09:bb:b6:f7:89:
         16:ca:67:fd:7e:8d:00:55:76:7a:69:4e:bc:65:06:3a:a3:58:
         e8:a7:92:6b:12:c5:98:11:ba:bc:a0:0b:d1:03:8c:31:b6:7f:
         a6:41:9d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 19:56:19 2026 by rpki-client