Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0748c29-6f93-32ac-95c2-f189c02fde38.roa
File:                     b0748c29-6f93-32ac-95c2-f189c02fde38.roa (raw, json)
Hash identifier:          GPZAVk81SEmi4HaW2OmSbXoXRO5XP38pTQRH+7fDiAg=
Subject key identifier:   88:3C:96:BF:42:0F:D9:22:BB:E8:A2:1B:A5:8C:79:CE:67:63:5B:80
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DC565C9FFC4F7C29D0C5C4590
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0748c29-6f93-32ac-95c2-f189c02fde38.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     19905
IP address blocks:        2604:2d81:9080::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:c9:ff:c4:f7:c2:9d:0c:5c:45:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=7f531716-61be-40d9-9f94-76265c819ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0b:ab:10:f9:aa:3b:5a:c4:19:f3:9c:4a:3c:
                    39:06:8a:2f:62:02:de:fe:09:72:7c:cf:5c:71:46:
                    5f:42:83:08:67:d4:2c:ac:1e:db:6f:a7:12:3c:52:
                    21:99:d5:be:35:02:04:6a:e5:9d:b4:56:9b:67:ef:
                    34:d5:0c:2a:34:c6:7c:e3:9c:d1:35:c5:ce:06:1e:
                    66:2e:99:79:1d:74:98:bb:4e:fd:12:a3:d3:19:98:
                    56:fa:02:0d:c5:ed:c0:ab:77:3b:62:a8:cd:b4:68:
                    b4:96:c7:8b:1b:43:12:47:e3:b3:38:49:df:ea:82:
                    58:21:98:47:5a:92:b3:51:e6:f8:e7:28:07:a2:5d:
                    bf:a5:e2:c0:a3:81:c6:67:61:ea:42:c5:26:bd:77:
                    73:97:02:13:8a:0b:4b:27:d5:f7:5f:39:93:8b:a0:
                    60:ce:c7:4e:af:61:72:18:e9:89:e5:61:86:6c:5c:
                    21:f8:0c:ff:ae:d0:17:df:0b:86:fb:b3:7a:5b:ab:
                    56:23:07:2a:5f:ae:ae:2f:a4:e0:bb:d7:48:fd:76:
                    80:2c:32:fa:4f:87:a0:78:44:e2:29:90:29:a6:47:
                    e2:b3:3a:fa:f4:66:0c:8f:79:e1:b4:6f:6d:77:7a:
                    d9:1c:ee:1e:07:83:e9:43:7a:83:2b:30:2d:49:8d:
                    a0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3C:96:BF:42:0F:D9:22:BB:E8:A2:1B:A5:8C:79:CE:67:63:5B:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0748c29-6f93-32ac-95c2-f189c02fde38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:9080::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:b8:d8:b2:9a:7c:9f:21:6d:4e:a3:b3:ad:66:31:23:5c:d3:
         e6:58:d7:42:2c:41:a1:71:b5:b9:c9:5e:fb:35:78:7a:a4:b7:
         5a:de:1d:e3:cf:fd:a4:d4:2c:89:1d:17:67:14:d2:57:a7:04:
         84:11:b6:a3:71:b8:27:0f:d3:1d:9d:81:11:d3:11:61:e5:35:
         f2:8e:90:41:1a:e2:1c:60:3a:98:53:e6:85:26:04:95:b9:a5:
         16:73:38:12:61:24:66:38:fa:9a:dd:9e:8d:fe:cf:6e:a9:12:
         9a:2d:b5:5e:af:c1:73:c0:99:4b:62:35:be:2c:3f:63:5b:61:
         4b:ab:29:f1:60:2c:45:a1:03:0b:41:fa:fa:e2:ed:23:b2:47:
         3d:16:a7:fd:42:af:7c:b9:e2:7e:81:20:42:19:a7:14:60:1b:
         10:71:9e:3c:6f:6d:51:e3:d7:c1:35:be:a4:e9:16:0e:65:ff:
         84:d9:73:e3:7d:89:a6:28:23:b2:35:81:b5:70:60:b5:5d:3f:
         01:cc:52:1d:1c:83:70:26:5b:69:2d:c5:93:23:c3:31:82:d7:
         17:24:63:e2:24:21:46:7b:d8:f2:26:cb:28:05:01:6e:d4:8c:
         87:32:91:f7:85:74:7d:57:bb:e7:2a:b1:33:45:3c:cd:0f:9e:
         6c:32:1f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:57:12 2026 by rpki-client