Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d2e68dba-85ec-3ece-9b09-016f6b8a99ea.roa
File:                     d2e68dba-85ec-3ece-9b09-016f6b8a99ea.roa (raw, json)
Hash identifier:          MBKT/f/bps4FEMwW9D61LVGo6xCOw3kjZn+LAQtal1s=
Subject key identifier:   34:81:65:F1:38:35:CF:B8:38:F3:84:EA:F6:C4:88:CC:0A:A1:43:60
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F0D6CF63862C253C76DEE6980
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d2e68dba-85ec-3ece-9b09-016f6b8a99ea.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d81:2c80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:f6:38:62:c2:53:c7:6d:ee:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=3fa49834-c6ae-4e97-9b26-5b2ead82e223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f1:e5:db:69:2b:af:db:cc:2f:eb:40:05:ef:
                    1d:71:d1:c0:02:8e:b3:9c:d4:7e:55:dc:76:8b:c3:
                    f8:78:d5:2e:c4:c0:9d:aa:b2:e0:9d:24:a4:28:a4:
                    39:27:54:19:e7:ee:be:2e:d2:bb:91:6f:27:53:37:
                    da:e1:b2:4b:52:c8:75:31:d7:4f:ee:1e:80:4a:0b:
                    f7:bc:f5:e8:14:8d:39:4d:ce:83:69:5b:38:fc:8f:
                    d5:52:2a:e0:52:77:5c:28:20:b1:f5:68:e9:90:92:
                    de:46:a6:cd:73:6b:63:f6:14:6c:3e:f6:3d:0a:15:
                    61:e9:35:d0:b7:7c:a6:62:12:b1:a8:c7:ca:f6:51:
                    52:b6:69:9a:ce:33:da:a5:2a:cf:be:a0:d8:fc:c6:
                    e4:af:e8:60:90:8b:e1:a3:d3:53:27:ba:84:f6:66:
                    f4:51:1c:4f:c8:df:df:dd:89:62:a3:6d:ee:19:aa:
                    3d:16:b1:db:c9:14:ad:d7:c9:2c:08:59:82:a6:a7:
                    ff:18:d1:b5:a2:4f:80:04:69:dc:05:ac:71:b4:90:
                    63:63:7a:eb:a0:74:74:9b:09:44:eb:29:df:00:78:
                    2e:92:39:be:51:10:33:b1:e8:74:00:a8:c6:94:cf:
                    19:ea:e2:21:98:8c:da:90:aa:05:73:8e:f7:4f:ef:
                    23:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:81:65:F1:38:35:CF:B8:38:F3:84:EA:F6:C4:88:CC:0A:A1:43:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d2e68dba-85ec-3ece-9b09-016f6b8a99ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:2c80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:93:25:60:72:e4:bb:b3:f0:c3:a0:0c:59:a6:56:fe:38:c5:
         75:93:64:6d:20:41:bf:0d:d5:94:c9:79:a2:74:47:54:a7:ab:
         4c:52:90:a7:b3:05:bb:24:dc:05:c2:24:46:5c:d3:b3:14:17:
         7f:96:1f:2b:58:4e:b4:81:1e:bc:92:ea:73:52:f9:26:61:50:
         42:5b:1c:dc:e8:31:22:90:e5:cf:7d:48:d6:29:60:45:f3:bf:
         95:2b:a6:76:d2:96:c6:be:50:58:2c:ca:7f:1a:07:95:13:c9:
         23:c4:51:c3:2e:6b:af:f9:bd:db:e6:dd:a7:be:1d:e1:58:a4:
         8c:5f:89:f0:da:3b:ca:ff:31:ad:4e:6a:75:59:7b:7d:c6:9c:
         db:93:27:5e:af:69:a0:0f:37:e5:12:e7:40:03:54:62:23:70:
         a4:08:7d:3c:5e:84:24:ea:50:40:81:a8:f0:f8:08:9b:9d:1f:
         90:5b:cb:03:72:87:2d:6a:1c:53:7d:49:ca:f7:d8:de:1a:09:
         c4:e4:9a:fc:e8:dc:77:9b:10:6b:de:09:f0:cb:6b:cc:e3:e0:
         26:a2:90:71:2c:a0:0a:7c:25:b1:7f:73:35:56:0e:21:f2:e8:
         ca:16:dd:95:bd:aa:22:a3:4f:92:d2:29:ce:8c:4b:87:56:bc:
         50:ca:71:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:27:00 2026 by rpki-client