Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9e38154b-5132-3a70-8627-5686b75d2e40.roa
File:                     9e38154b-5132-3a70-8627-5686b75d2e40.roa (raw, json)
Hash identifier:          YuN0ZPQqURhRmkPJuz4weoxhXcWQXkdN61WVe/r9PTo=
Subject key identifier:   5F:BF:A9:E0:91:37:A1:93:B1:1B:BC:8F:BD:8A:63:BD:34:C9:2A:61
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F480D31D5948D42FEDF07A000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9e38154b-5132-3a70-8627-5686b75d2e40.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d81:9080::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:31:d5:94:8d:42:fe:df:07:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=cff4ea90-f413-4c6c-a43a-7699cf2b617f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d2:35:cf:91:9c:4e:82:52:97:97:da:a9:cc:
                    e5:83:63:00:29:47:7f:23:0d:cd:d6:fe:ce:69:f8:
                    c3:de:b6:59:2a:b0:b1:94:79:f7:b8:8f:9f:28:68:
                    42:d1:13:85:c4:f5:47:2f:10:e1:dd:09:82:1c:78:
                    00:c0:b3:c8:26:ed:c8:79:ed:72:0a:b4:33:33:77:
                    a3:e9:4e:20:30:f3:e7:35:48:eb:b2:41:2d:d1:85:
                    4e:fb:91:d0:cf:8e:87:af:76:ff:d3:bf:f7:00:22:
                    8a:58:27:28:67:be:84:99:54:42:c0:16:5f:8e:d7:
                    12:c5:36:98:b4:e0:72:0b:5a:b5:b6:88:8b:6f:52:
                    9f:81:3b:14:af:8e:39:f0:9e:2b:de:bb:6d:0b:c3:
                    5a:f4:bb:09:53:93:cf:5a:b7:4f:ab:36:2c:cb:ff:
                    a1:18:c4:37:dd:28:db:fd:34:b1:1c:41:24:52:d2:
                    ae:bf:a5:50:6c:a7:38:a4:6b:b4:23:ee:88:92:0a:
                    fa:70:20:b0:7a:c2:ba:13:e4:05:5d:54:2e:db:e8:
                    19:41:ec:cb:a4:5c:b3:a9:de:d0:cb:87:79:82:6b:
                    43:44:c5:8c:c6:8e:c7:db:f1:f9:10:2d:3b:4b:42:
                    be:74:74:7c:14:a4:3c:7a:43:55:85:0e:97:b2:20:
                    46:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BF:A9:E0:91:37:A1:93:B1:1B:BC:8F:BD:8A:63:BD:34:C9:2A:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9e38154b-5132-3a70-8627-5686b75d2e40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:9080::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:78:e7:8d:8d:8b:30:d6:fd:db:9e:6b:fb:3f:5c:79:98:e8:
         34:5a:94:d1:f9:ce:e9:47:a9:45:31:83:55:93:79:59:6e:b6:
         ff:e5:6a:54:ed:b8:71:16:46:4d:75:e4:4f:47:11:89:19:eb:
         ae:a4:b4:4e:7e:1b:41:be:a8:ef:78:ef:50:e3:cf:ad:c2:de:
         3c:b7:1a:92:9a:c0:88:2a:c3:cb:f3:6a:ed:60:ab:df:cb:30:
         09:4e:95:59:c1:b0:6f:17:23:f2:fd:65:3d:2c:77:3c:b9:63:
         44:4e:0d:d8:75:5d:0d:13:7c:20:4c:48:ce:35:11:de:1b:6b:
         de:52:38:14:55:30:6c:ee:66:35:92:3f:84:54:57:f8:a9:6b:
         ea:67:8a:b8:5d:22:e4:17:64:c8:b9:e3:cd:72:58:59:45:db:
         1d:bd:73:b4:c0:e0:97:af:a1:c5:a3:a3:e7:33:65:c9:f0:f9:
         3d:95:9b:f6:d0:77:0d:86:fe:b2:f0:8a:20:5d:13:5c:6f:e5:
         55:67:45:b1:a8:4f:25:a2:41:88:14:32:cd:af:29:4c:94:ac:
         64:58:d8:2d:72:9d:00:08:ef:39:7f:95:26:de:66:1a:99:8b:
         30:88:cd:fb:2c:4a:ce:c8:c1:1b:e7:b1:ac:a4:55:77:bf:40:
         81:87:1f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:24:59 2026 by rpki-client