Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aed558aa-edfb-3843-81dc-08c64632ee56.roa
File:                     aed558aa-edfb-3843-81dc-08c64632ee56.roa (raw, json)
Hash identifier:          pcnYp6I68tCNmngYZ6OofrmrMPpJtngdjWpt7mxHCI4=
Subject key identifier:   58:B0:93:E5:6E:8C:AE:E4:1A:42:4A:E5:9A:D2:7F:29:D4:DE:60:F4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E8DEFB4363F07100C159A37C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aed558aa-edfb-3843-81dc-08c64632ee56.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:a000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:b4:36:3f:07:10:0c:15:9a:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=f44d9803-d1c4-4224-8931-f060879db078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5f:7d:b6:7e:54:9f:07:e1:f6:93:c9:93:7c:
                    05:e5:bb:f3:85:b3:08:7d:d2:33:f5:3f:ec:dd:6e:
                    5d:e4:bc:0c:9d:3c:fd:79:3a:f2:da:16:8a:62:15:
                    f3:da:9a:f7:ac:39:51:42:1a:c3:8e:89:20:71:71:
                    78:ee:e5:86:69:b6:55:ad:fd:f3:da:f0:86:43:12:
                    ba:04:30:26:89:89:05:2f:5a:07:c9:a2:3b:34:d3:
                    1a:06:be:a2:41:dd:68:c6:ea:88:f0:66:27:7a:9f:
                    26:f4:4d:cd:ab:87:b3:2e:36:a2:ba:c6:d8:fa:4a:
                    50:6a:f0:9c:94:df:3a:76:ef:69:39:3a:24:ac:f2:
                    72:eb:df:bf:2b:f4:fe:48:6a:e6:96:3b:42:6f:1c:
                    4c:a3:ee:a8:b4:00:c5:87:bf:8b:73:36:f7:2a:40:
                    48:46:2b:ad:2b:62:71:ad:8d:0d:48:30:bb:20:06:
                    b8:5d:09:e5:95:de:f4:c2:ad:b8:22:cb:30:69:59:
                    be:9b:8b:71:83:ca:1c:2a:93:67:2e:5d:b3:a7:ae:
                    92:46:d0:a3:c6:1c:10:13:45:3f:22:9c:f3:ef:8a:
                    5e:b7:36:3a:78:4e:e6:8a:d9:fb:ea:cf:1f:5c:67:
                    0e:12:c9:4e:2d:85:1a:1e:03:61:71:85:25:82:a5:
                    ee:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B0:93:E5:6E:8C:AE:E4:1A:42:4A:E5:9A:D2:7F:29:D4:DE:60:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aed558aa-edfb-3843-81dc-08c64632ee56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:a000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:34:7c:f1:f4:a1:2c:c6:75:58:6f:a5:38:fe:7e:16:77:d3:
         4b:38:fd:67:e9:69:df:f2:6a:79:ef:91:bc:3e:9a:c2:c4:4d:
         b3:a0:ca:8c:cb:fc:11:06:38:6e:07:0f:7a:94:fd:f5:2e:75:
         8a:7d:f5:fc:4f:03:0c:af:b2:40:c4:9d:14:07:58:3d:7b:7d:
         b9:68:ec:26:07:1c:d4:a8:27:b4:3c:ea:86:fb:17:95:91:b2:
         32:99:13:1a:bc:c0:a9:42:60:cb:89:97:dd:c9:57:b8:2b:f4:
         f5:16:34:5e:8d:b9:0b:0e:1b:0a:58:dc:ed:8f:a0:34:ed:e2:
         d9:77:c6:b7:a8:c8:ab:32:1f:c2:cd:4e:fa:6e:a8:6a:05:65:
         12:a9:fa:00:e5:ed:e4:11:dd:fa:b4:2e:cc:8d:d9:88:b8:33:
         ee:03:61:68:ba:2e:a7:6b:9b:fa:29:8c:71:37:45:e1:50:01:
         83:5f:e3:87:ed:89:dc:15:10:54:1a:2a:0f:d3:5e:08:d2:48:
         57:4c:03:36:11:fa:a1:07:e9:73:48:3f:4c:fc:97:cf:7d:0d:
         d0:94:3e:ca:1a:01:db:20:51:7b:19:b8:81:e9:f7:10:ff:bb:
         eb:2d:ac:97:16:15:f7:47:6e:c3:53:94:29:da:20:e6:33:c4:
         42:e9:90:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:23:01 2026 by rpki-client