Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d58b7e14-e119-3d33-9423-f1e1552e3b35.roa
File:                     d58b7e14-e119-3d33-9423-f1e1552e3b35.roa (raw, json)
Hash identifier:          ttNz68q3LhLNGBNMCnUPIgxJBLQ63aIa7hiu+iR5N2Y=
Subject key identifier:   73:B8:B6:3F:DA:51:3F:D4:1F:49:AF:DA:3F:3E:6B:9E:CB:7E:32:04
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D3E0012B2A19B1FEDDA86FD00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d58b7e14-e119-3d33-9423-f1e1552e3b35.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     19905
IP address blocks:        2604:2d81:2000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:12:b2:a1:9b:1f:ed:da:86:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=28e6a019-0842-4e73-9022-7560e5e884fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:73:e5:92:96:56:ff:fe:90:88:2f:4e:b6:1f:
                    94:da:98:29:4a:ea:88:80:7e:dd:dc:ac:88:df:6c:
                    3f:20:21:38:40:14:00:fc:a6:fa:e8:90:4e:6b:0c:
                    1a:44:45:56:b8:ae:df:9d:f3:ef:92:dd:e7:85:b6:
                    50:aa:cf:2b:d4:c0:29:d6:c8:7a:19:e0:9e:a9:94:
                    74:20:ff:f2:88:21:ff:89:7c:df:4f:72:33:74:e3:
                    76:00:e8:22:7b:3d:a0:f2:58:c2:3a:bd:18:7d:65:
                    fd:2b:65:25:66:2b:aa:22:fb:80:7e:c1:fa:a7:0e:
                    6c:e4:d9:53:d8:53:3d:7c:4d:d8:5f:fb:68:b1:5c:
                    bc:2a:b6:97:29:92:e7:50:56:3c:95:7c:f6:2d:81:
                    b8:31:18:0f:9a:b6:98:20:43:1d:d7:4c:d9:d4:93:
                    59:f5:c3:b7:c0:76:1d:d0:60:57:f4:ce:d0:a3:42:
                    0a:92:8e:2f:11:c0:ce:33:25:0c:81:d7:ed:4f:f0:
                    33:7d:76:91:f3:77:bd:e4:4b:b9:5a:4e:4f:9d:81:
                    7c:eb:84:75:51:37:68:ab:83:4f:85:74:51:86:4b:
                    bc:5b:0e:1a:99:fb:df:22:d1:0c:e3:65:b3:ab:8f:
                    3b:d8:80:48:84:4b:54:b5:1a:17:f2:9d:7f:7a:51:
                    fd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B8:B6:3F:DA:51:3F:D4:1F:49:AF:DA:3F:3E:6B:9E:CB:7E:32:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d58b7e14-e119-3d33-9423-f1e1552e3b35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:2000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:81:c3:0c:4b:19:47:0a:31:65:90:de:92:90:6a:57:1e:10:
         bb:31:9b:26:b0:25:ec:5a:48:50:c6:ed:0a:0f:66:6d:cb:f1:
         14:cb:2e:72:7c:79:e2:61:20:5e:0d:f8:a2:0f:88:8e:0c:58:
         55:56:93:01:37:87:ce:66:24:cb:d5:a5:cc:c5:50:6c:99:c3:
         4c:e9:8a:0b:b1:3f:21:16:8f:44:16:88:a2:a8:c5:59:ec:f6:
         c8:50:ea:a8:f2:d2:ac:4f:40:da:07:52:d9:19:f7:89:0d:55:
         64:e5:4e:42:24:2d:e6:e1:e4:41:f5:48:cf:3c:72:8b:cb:d8:
         3f:aa:ab:2f:cc:20:9f:75:d2:28:60:77:40:36:fd:cd:14:37:
         f6:0e:ef:05:86:87:86:25:51:ea:92:10:4c:70:f6:46:30:dc:
         96:08:b3:93:e6:22:a6:14:6d:21:ec:fa:43:d7:74:b6:82:28:
         fe:df:e8:78:96:9a:3f:51:8b:ec:57:02:68:a6:5d:f4:93:3c:
         cb:0a:fe:e6:d7:22:7a:a0:e1:74:66:b4:fb:53:32:83:2e:e9:
         a9:1b:dd:5e:02:3d:9e:60:34:ef:9d:33:56:f6:1a:0a:8d:0c:
         85:34:7f:a1:90:3b:d6:67:61:ab:31:73:a3:cc:77:8d:8e:fe:
         78:d3:12:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:28:53 2026 by rpki-client