Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de85971a-87a1-3b07-b544-678dfca73daf.roa
File:                     de85971a-87a1-3b07-b544-678dfca73daf.roa (raw, json)
Hash identifier:          mfAO7h27keWIoYq26E/3n9uXC0rB6tlbl3s/zt+Cxoo=
Subject key identifier:   93:22:BF:56:DA:DF:6B:54:0D:88:AD:7D:05:8A:57:B1:63:B0:51:87
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24DF9515D45BC816CDE57A40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de85971a-87a1-3b07-b544-678dfca73daf.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2d80:af80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:95:15:d4:5b:c8:16:cd:e5:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=d6f1787c-a97c-43fd-b54a-06b275b19345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ea:85:a7:30:41:0b:b6:a3:f4:ad:6c:c9:2e:
                    e3:9b:ae:01:d0:f6:00:61:d8:fb:1b:3b:7b:0e:0d:
                    6c:19:2e:d9:19:92:b5:97:0d:e9:6b:59:fb:a7:32:
                    65:14:d2:79:31:3b:2a:24:9a:a2:d0:97:66:2f:d8:
                    2b:9d:d9:b1:4b:7b:43:ac:4f:40:f8:66:41:df:a4:
                    a7:57:e4:25:a5:7c:59:f4:73:79:9b:94:4c:0a:cf:
                    db:77:03:12:d3:36:18:56:29:b7:fc:54:2d:e6:67:
                    18:b9:99:59:fe:79:6a:b9:8a:2b:b7:e7:ae:2c:35:
                    64:e2:f6:2f:48:dc:c5:c8:b4:59:21:7b:cc:38:3c:
                    3b:98:f6:11:94:c3:f3:f7:44:82:4c:cc:2a:19:04:
                    c6:a5:ad:85:19:35:fd:e2:80:1f:e9:31:56:c4:b2:
                    10:3e:10:bc:91:62:df:5d:5c:f6:de:dd:3f:de:84:
                    46:26:de:b5:3d:dd:a3:ad:ce:2a:ca:48:55:39:80:
                    09:49:36:a3:c3:24:26:d4:e8:ff:c9:75:fc:3b:bf:
                    ea:9e:8e:bd:75:79:c5:68:5a:93:61:c0:e6:9f:6f:
                    37:fc:ca:7c:61:2a:40:e5:2b:41:31:26:51:5d:4c:
                    d5:aa:6b:54:78:b7:66:ca:95:83:af:00:63:2d:f7:
                    21:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:22:BF:56:DA:DF:6B:54:0D:88:AD:7D:05:8A:57:B1:63:B0:51:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de85971a-87a1-3b07-b544-678dfca73daf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:af80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ad:bf:d0:05:ef:5f:4b:e1:88:e0:80:68:72:93:53:63:c2:
         d2:3d:3e:0b:d0:99:a1:0f:7d:7c:bf:1f:2c:16:1b:04:15:66:
         eb:5e:cc:87:1d:53:90:3e:83:97:68:b2:95:1a:2d:66:6f:c7:
         b0:e4:32:75:bf:ab:4a:21:52:5c:f3:03:a5:a8:17:cc:c3:f5:
         f7:46:4d:54:62:ad:3f:16:9f:71:05:c1:c7:13:3d:5b:22:03:
         f8:ff:b8:62:34:2e:51:6b:00:de:ae:69:4f:68:cd:23:ef:dc:
         99:cb:1e:78:0e:a3:0e:f9:bd:98:a1:de:d7:b1:6d:78:b6:8b:
         e8:c6:d8:3d:87:3c:8b:2f:31:4a:62:7b:be:63:d0:fe:ea:97:
         bd:7b:2e:e0:dc:31:47:cc:f1:e9:cb:d7:78:c8:bf:a6:74:9f:
         ff:92:9a:ed:d0:32:ab:53:91:0c:96:c6:da:d3:b3:cc:35:80:
         6a:37:9c:c4:c5:73:54:d5:bb:49:ba:76:03:50:20:ff:ee:77:
         2c:25:a4:49:9f:3f:79:06:63:56:f7:fb:32:27:9f:0e:57:18:
         93:5b:9b:ef:91:f8:fd:52:ff:47:d6:a7:43:63:c1:48:93:c8:
         48:1b:b4:b4:7e:80:15:51:3d:28:e0:79:71:43:e2:e7:89:24:
         69:4b:29:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:14:55 2026 by rpki-client