Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d5f0c99d-801b-3d92-bfe7-43bff0cc9f91.roa
File:                     d5f0c99d-801b-3d92-bfe7-43bff0cc9f91.roa (raw, json)
Hash identifier:          Oq8Z6WsxKXOtMNYJgqdW3VSFG4jG3Eg69PC5VhFx+iM=
Subject key identifier:   66:DE:43:1F:67:24:9F:E8:F3:B9:31:0D:96:B1:88:14:EF:25:BA:60
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E51E9FC9920A9AC71F5CB6440
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d5f0c99d-801b-3d92-bfe7-43bff0cc9f91.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     30036
IP address blocks:        2604:2d80:2c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:fc:99:20:a9:ac:71:f5:cb:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=effbcead-0be7-4536-b2c1-c1b781443b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0f:f5:84:84:7f:6a:cd:1d:f5:e9:cf:98:45:
                    54:ca:88:7c:4d:ff:f1:f1:b3:c0:1f:25:64:60:2e:
                    32:c3:4f:20:40:0f:13:d3:32:72:46:f8:f7:f2:0b:
                    74:e0:42:2e:89:8d:1d:6e:37:d3:09:07:b3:d7:89:
                    66:76:3d:49:d2:f0:33:c2:eb:4f:c0:46:1b:bf:69:
                    12:2f:d5:17:d1:8b:78:33:d1:b4:e9:93:e9:1f:91:
                    e4:0f:73:89:bc:b1:6f:4c:1f:8e:cc:6f:c3:43:3f:
                    f2:8c:c1:44:0d:67:99:03:d6:40:7f:2b:2c:7c:6b:
                    5e:83:28:0e:82:63:1e:ed:7d:c3:d9:53:53:15:ce:
                    45:9a:43:d2:89:89:11:bf:6a:75:62:44:76:ba:56:
                    b4:9c:7a:b5:a9:65:bd:33:fb:f2:e9:94:e8:ee:fe:
                    18:e6:4d:2e:5c:2c:6d:a0:b6:69:28:bd:6a:05:84:
                    8a:28:20:8f:7f:cb:7c:b0:6f:e2:cd:3e:e7:fb:03:
                    36:05:99:8d:9c:7f:b8:19:24:0b:d0:24:ab:8d:db:
                    81:c5:72:67:96:89:5e:fe:3c:5e:9f:3d:91:43:fe:
                    c1:e3:3b:d6:d7:6b:e2:ce:0a:ff:3e:c8:27:b5:b1:
                    28:18:9f:50:fb:a2:f1:15:83:75:96:0f:51:bf:7e:
                    ed:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DE:43:1F:67:24:9F:E8:F3:B9:31:0D:96:B1:88:14:EF:25:BA:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d5f0c99d-801b-3d92-bfe7-43bff0cc9f91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:2c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:d5:e4:19:d6:e9:7a:a6:a7:da:84:62:73:c5:13:8a:c4:29:
         2a:b0:1e:50:10:41:dc:e7:f2:c1:e3:82:28:d1:43:ae:47:4e:
         05:0e:c4:f7:e3:50:8c:92:54:ac:ed:be:29:e6:1e:9d:27:a6:
         15:56:42:07:41:df:c1:ac:91:c6:23:d7:76:25:3b:e7:9c:63:
         eb:6e:a0:d7:b8:23:a3:d0:72:3d:cf:2d:46:75:60:39:31:44:
         92:09:dc:c5:cf:a2:67:1a:b2:71:fe:e0:61:c9:6a:3c:79:5d:
         70:d1:90:dd:80:a1:eb:01:27:ca:d9:02:4c:b6:87:c1:11:31:
         49:7f:ff:49:ba:9c:56:b7:00:ac:d7:6d:9a:14:a7:25:f6:be:
         42:6d:6f:e2:80:71:87:64:c8:e3:97:31:d1:fc:58:16:7a:73:
         ad:56:73:28:2b:ef:b4:ea:b9:78:db:85:9b:66:79:e6:6d:9c:
         13:8a:be:36:ea:b7:ea:17:33:4b:42:e4:da:5b:b8:5a:23:b5:
         b1:85:bd:31:1b:ce:c1:40:9a:9f:25:d9:39:e7:55:a7:7a:36:
         25:32:8f:6c:5c:a9:05:ee:c3:6c:89:c6:e5:1c:42:ee:6a:ea:
         2e:60:d5:d2:f7:20:1e:11:37:39:6a:b8:f4:a4:64:ca:a7:c5:
         71:cc:35:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:32:56 2026 by rpki-client