Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca80d26e-29bc-3dea-a610-c2f6c460b1b5.roa
File:                     ca80d26e-29bc-3dea-a610-c2f6c460b1b5.roa (raw, json)
Hash identifier:          aP8VKCLXfYQKqbYH3edIr3kZGjE2kDnLl87IpIlcgMI=
Subject key identifier:   0D:06:5A:A4:E3:40:5B:5D:9F:84:D9:AC:88:29:D9:EE:05:65:A0:B1
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F49884D853D6D737D546E5F00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca80d26e-29bc-3dea-a610-c2f6c460b1b5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:e480::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:4d:85:3d:6d:73:7d:54:6e:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=078e2d3b-6e27-4804-b47d-4b659fec1b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:df:01:12:8e:e2:3d:9e:08:0e:fa:b6:1d:4e:
                    f8:7f:84:a2:d1:42:c7:98:ed:5e:77:c2:0b:31:40:
                    c5:05:76:b1:fd:b9:ee:d3:49:b7:55:a3:65:d9:62:
                    a4:f6:40:02:0c:67:f4:e0:ee:87:98:e7:6d:6f:85:
                    d7:bd:ff:50:27:8e:b6:36:73:ec:cb:57:c6:f7:ea:
                    65:5f:de:15:7e:48:c4:fb:eb:18:87:9b:4b:33:a4:
                    42:63:55:be:8c:d4:8e:40:77:0d:96:49:dc:8e:d5:
                    ee:aa:a3:4a:73:66:4b:e2:f0:b0:da:9b:3a:0e:ba:
                    62:63:46:23:f5:fe:c4:57:a7:2d:64:de:8c:f1:58:
                    4a:a4:0e:ac:43:4d:67:14:17:6c:81:00:57:a7:6f:
                    d0:ce:e3:b3:43:63:bf:42:7b:72:33:8c:c0:d7:fb:
                    f4:fd:0f:72:74:e2:4c:e9:53:54:a8:9b:3b:53:ac:
                    93:23:1a:7f:15:09:09:1b:22:8d:1b:1d:22:f6:c8:
                    e5:61:63:cc:cf:3e:10:26:f3:c4:e9:ab:40:06:23:
                    f3:1b:13:c7:04:4b:8c:a2:82:83:70:9a:21:a6:72:
                    8e:68:7f:17:dc:5d:09:26:04:c2:47:5b:35:bf:61:
                    f0:17:7a:71:f9:04:d1:f8:5e:ad:d5:53:06:52:f0:
                    0c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:06:5A:A4:E3:40:5B:5D:9F:84:D9:AC:88:29:D9:EE:05:65:A0:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca80d26e-29bc-3dea-a610-c2f6c460b1b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:e480::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:06:26:a9:36:15:2d:3e:54:51:6b:fe:3b:07:cd:e8:70:48:
         77:50:39:f8:13:36:b7:87:2b:d7:7e:ae:66:38:7d:df:0b:44:
         e0:68:09:18:71:24:48:a1:66:c4:65:b0:c2:e5:81:8c:4e:89:
         10:c7:0a:75:ae:7c:98:dd:4e:00:13:52:c0:75:01:fe:bb:f3:
         8a:1e:0c:7d:de:4e:6d:31:1e:fc:47:ec:d6:6f:57:dc:a5:ef:
         8d:0b:e6:f1:f2:d3:03:b2:90:bf:68:2d:76:3e:fd:0f:73:3e:
         89:df:e2:75:d7:88:20:25:00:9b:0d:ac:ad:c6:b6:40:ce:a9:
         d3:73:91:0b:45:7e:db:37:2a:ab:9b:63:cd:45:7a:af:a0:f9:
         4f:80:be:4d:a1:7b:a2:00:78:d3:dd:0f:d4:5f:0e:d4:7b:3f:
         8e:53:8a:21:19:19:3d:3a:57:89:6a:bb:ea:4e:ce:80:69:00:
         dc:27:e7:41:78:0f:25:e2:12:f6:2b:41:a8:73:ef:2e:66:eb:
         5d:dc:20:20:6a:a3:df:98:83:58:b6:5f:43:00:ec:25:e8:bc:
         d9:92:61:83:2f:df:a5:f7:2b:0f:92:27:df:b7:ab:aa:ce:86:
         4c:8c:d5:cd:68:4b:02:67:7b:f4:24:6f:e7:54:80:94:e9:04:
         ec:84:1b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:14:42 2026 by rpki-client