Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9c478a56-0c0c-3a07-a378-02b51f3fc7f2.roa
File:                     9c478a56-0c0c-3a07-a378-02b51f3fc7f2.roa (raw, json)
Hash identifier:          jcpZK9Rwvf1VrS57t9IlRTdg+iw1KnTbTGh2s+VTHKA=
Subject key identifier:   A9:68:0C:1B:1E:1A:D2:B6:F3:5F:86:05:5B:18:84:02:E2:84:D0:F9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F2ABD07AC5D2C4206BB52DB80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9c478a56-0c0c-3a07-a378-02b51f3fc7f2.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d81:f00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:07:ac:5d:2c:42:06:bb:52:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=6a3578bb-104c-439e-a230-40e067f503d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:52:14:b5:ff:c7:62:c4:4d:9c:6c:b8:91:18:
                    e8:42:39:f8:23:a4:34:d4:0b:10:67:12:82:81:81:
                    26:59:c0:21:54:97:f8:9c:d2:0a:4c:c4:13:3a:23:
                    0b:56:56:6b:4f:d8:ab:ab:bc:3f:ff:cd:e5:2f:a6:
                    83:a8:3e:75:65:76:8f:ce:f7:c3:ec:b6:92:c0:f4:
                    ec:70:07:bb:bc:83:13:71:35:19:ab:2f:43:e8:50:
                    31:f4:1e:1b:dd:bc:0f:98:51:7b:a5:82:4b:d4:2b:
                    5e:b4:af:f5:c8:88:3f:63:53:1d:32:88:ab:b7:ed:
                    ea:dd:0c:81:8f:1f:65:8a:19:1b:f7:48:f6:6a:cc:
                    2b:5e:63:0f:73:c7:68:2e:44:7a:45:bd:7c:a4:5c:
                    ec:be:32:28:b0:5f:da:5a:5d:09:43:33:13:20:88:
                    ce:6e:8d:e2:02:6f:de:e4:d5:0d:d1:84:2d:1c:13:
                    fe:a0:c8:75:bf:67:b7:75:86:f7:4d:e6:35:75:be:
                    eb:60:06:f0:41:75:d5:78:96:b1:bf:c4:d1:f3:a3:
                    b5:09:a5:10:f4:a3:37:18:b8:a5:11:41:b9:78:8a:
                    0d:47:29:3a:c8:49:33:73:14:6a:56:ab:9c:fc:1f:
                    6e:5d:49:02:b3:93:c3:fb:d2:c1:da:99:9b:03:49:
                    65:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:68:0C:1B:1E:1A:D2:B6:F3:5F:86:05:5B:18:84:02:E2:84:D0:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9c478a56-0c0c-3a07-a378-02b51f3fc7f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:f00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:d5:a8:08:06:93:82:5d:88:0f:89:b4:24:29:f2:ad:ce:e8:
         ae:11:19:bd:8b:c5:1f:40:25:d3:4c:b1:12:bf:6e:24:45:c3:
         ee:71:97:bb:fb:0f:a3:b1:0a:dd:a1:89:b6:9e:20:2f:01:7e:
         b9:37:8a:a0:46:d9:e2:55:45:8c:ed:7a:85:b9:05:39:f5:1b:
         55:eb:f6:93:37:bc:a1:b4:33:9f:87:ce:e8:b5:55:da:d4:c0:
         b2:99:de:75:8d:6d:c1:d5:cf:46:31:ad:55:09:f3:18:02:9e:
         27:5f:cd:ad:9d:0e:d2:b3:db:c1:e6:80:5a:d0:c3:05:fa:d9:
         0f:fd:d6:7f:77:a6:dd:11:a5:71:be:92:4f:02:88:00:11:e6:
         e5:c6:2e:72:30:15:e2:c4:b0:42:55:56:6e:92:fd:8e:7f:90:
         10:01:ba:7d:00:8f:5b:ed:b3:ec:03:06:d3:ca:25:b3:59:86:
         6a:e0:07:3e:21:7f:a1:6f:4b:48:e6:d8:bd:ab:a2:b7:5f:4e:
         98:55:ce:a6:96:8f:6a:7d:4f:c4:fa:fb:3e:4b:08:ca:bf:b7:
         b1:7c:8c:48:c1:ae:33:a6:dd:e6:7a:0e:11:20:72:90:91:3e:
         4e:27:9c:f0:d8:9d:bb:c0:5a:b3:d8:e9:e6:15:fd:87:e8:47:
         15:4d:53:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:03:36 2026 by rpki-client