Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/daccf0ed-b426-35f0-b1f0-dd46f7fca802.roa
File:                     daccf0ed-b426-35f0-b1f0-dd46f7fca802.roa (raw, json)
Hash identifier:          dM1erU5IERoBKhZEvkeRngWPzOmZ6jlfOCRMim5AaHU=
Subject key identifier:   F2:F9:B6:4C:44:0B:5C:2C:AA:EE:3A:0E:B5:EB:55:9A:2A:ED:29:D6
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DC565C9125DEA1588C8ED7600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/daccf0ed-b426-35f0-b1f0-dd46f7fca802.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     19905
IP address blocks:        2604:2d80:b900::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:c9:12:5d:ea:15:88:c8:ed:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=b5e44c46-1abc-4c99-82de-9de64a94a042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f1:68:03:e8:a6:03:91:c6:55:af:5f:14:c4:
                    19:ca:75:f8:96:a6:cb:56:7c:b8:cb:a1:4f:d8:05:
                    77:64:aa:1b:39:31:72:45:3c:d0:05:fc:4f:61:0a:
                    f3:5f:9d:7a:bd:51:4b:5f:0b:0f:33:c4:ff:79:36:
                    4d:c7:45:7c:3e:e7:bc:49:31:7b:8e:80:bf:fd:dd:
                    08:a7:77:1b:24:80:8d:ac:cd:22:a7:2b:27:db:51:
                    31:1d:cc:de:12:13:32:dd:75:61:a9:82:9d:d1:df:
                    a9:25:30:71:61:11:2d:5c:a2:55:56:cb:8a:52:d5:
                    c3:ac:df:94:89:47:00:bb:bc:24:d5:f3:92:43:d6:
                    12:89:07:7e:f6:2c:c8:50:68:1d:4c:80:ef:09:08:
                    f4:55:c3:81:54:d6:b8:60:ae:47:59:85:d8:87:f5:
                    6b:e4:35:f6:57:35:5d:b5:a4:80:18:62:52:5e:f2:
                    60:51:e1:0e:f3:cd:5a:ab:10:c5:d5:f9:df:0b:6d:
                    7e:11:3f:13:fe:b7:47:d3:a7:97:91:04:8c:20:4b:
                    19:69:43:74:c1:ce:68:3f:e1:03:7c:a4:4f:5f:9f:
                    19:86:a5:84:97:87:ec:93:79:91:12:35:88:09:1d:
                    49:d5:e3:67:61:5d:ce:f4:62:a4:93:c9:13:c4:8c:
                    5a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F9:B6:4C:44:0B:5C:2C:AA:EE:3A:0E:B5:EB:55:9A:2A:ED:29:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/daccf0ed-b426-35f0-b1f0-dd46f7fca802.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:b900::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:94:1e:1e:70:8a:02:14:97:ff:67:ca:76:61:3e:04:7e:c1:
         d7:c9:c2:0d:88:28:6e:44:b2:ea:8c:1e:4e:d7:06:c0:c0:b2:
         51:f6:45:ff:64:e5:b9:56:7e:b0:fa:79:27:e8:1a:71:9b:2f:
         39:bd:cc:a2:e4:74:e3:ab:ac:19:4f:b7:00:b3:d8:b5:80:b5:
         13:a5:eb:7f:8e:11:d6:03:64:dc:67:99:18:b4:de:af:2b:49:
         36:e3:78:d1:aa:18:36:3b:a0:c3:4a:43:ba:27:fa:2b:eb:74:
         fe:1c:c8:2b:ec:f1:0a:d4:6a:21:92:bb:bc:65:dd:27:d9:25:
         42:e5:71:c3:f7:61:c4:60:1a:52:a8:59:fe:2f:66:3d:9c:16:
         e3:51:9a:49:cb:46:92:5b:84:05:51:92:7a:9c:62:12:32:8c:
         ca:bb:d5:72:a5:1b:2a:16:3e:e0:19:7b:91:10:b4:a3:af:50:
         fd:de:c0:1c:f6:c3:95:f0:93:23:b9:21:ff:67:60:ac:c7:0c:
         d2:3b:f3:a9:79:33:08:0e:a3:f4:9d:15:66:a8:3e:a7:2e:19:
         07:cd:cb:63:f3:02:f2:8b:60:3b:e8:99:d2:58:43:3c:85:5b:
         f3:19:b3:2a:67:e3:e5:52:0c:28:9a:96:70:58:ae:4e:df:3c:
         2e:67:36:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:41:16 2026 by rpki-client