Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e125deca-71dc-3c9f-9a54-ffbf0a785086.roa
File:                     e125deca-71dc-3c9f-9a54-ffbf0a785086.roa (raw, json)
Hash identifier:          Gy8nPNY2mXvzE9vASDxJx7Q3dXpn+BXIfbUJklITYh4=
Subject key identifier:   93:CE:42:56:8E:1E:B4:7A:A7:39:28:0A:13:C2:FC:A4:E4:36:EC:B4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F49741851D2E96AB0CDEC1440
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e125deca-71dc-3c9f-9a54-ffbf0a785086.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:7480::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:18:51:d2:e9:6a:b0:cd:ec:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=75c7acde-de01-4989-be99-0797f1fc6b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2c:ad:e6:1c:97:86:b4:9b:58:67:25:85:c3:
                    54:2e:3e:b4:35:fd:ed:76:86:13:08:3e:fb:6f:67:
                    3a:57:e3:d1:84:a5:4b:7b:fc:b6:c9:1a:e8:9b:e8:
                    93:13:03:08:8f:4c:29:ab:dc:43:90:49:12:a3:ce:
                    38:4c:87:04:25:c6:01:88:d9:e2:af:53:a9:4e:f1:
                    19:d9:c2:68:2f:93:54:99:62:96:46:f6:5c:cf:83:
                    cd:b2:3f:2a:63:d2:42:81:19:5d:56:58:f3:12:14:
                    97:d7:3c:c6:18:7c:c3:76:00:15:7d:03:83:34:8c:
                    1a:29:09:3f:3d:09:57:4a:92:5f:4e:94:1a:53:22:
                    15:9c:26:18:45:42:f5:6d:5a:32:b2:ee:a1:d7:8d:
                    5b:52:27:41:fd:07:ec:64:4a:1d:62:21:71:f0:f5:
                    48:c2:62:d4:80:82:85:bc:eb:8a:79:0d:cf:90:6e:
                    b1:3e:aa:99:bc:c5:fd:74:23:1c:01:aa:8e:a3:00:
                    a0:5d:af:b4:81:3a:de:c6:bb:1e:41:51:f5:80:79:
                    17:a8:05:c0:d8:cf:d3:3f:10:52:b6:5f:02:50:50:
                    08:1d:f5:4a:79:4b:8b:e1:a7:5b:80:08:7b:8e:15:
                    40:ee:e9:50:92:06:5f:98:8e:21:2f:02:4b:0b:e6:
                    d8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CE:42:56:8E:1E:B4:7A:A7:39:28:0A:13:C2:FC:A4:E4:36:EC:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e125deca-71dc-3c9f-9a54-ffbf0a785086.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7480::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:56:ac:ff:f3:3a:96:e3:2b:de:7b:44:7b:00:78:59:1c:3c:
         9f:fe:be:b6:35:93:37:6e:2e:58:5b:0d:6e:8d:cc:02:ce:51:
         32:79:89:89:b8:1f:fc:a1:38:e7:42:62:7f:6f:16:3b:52:f2:
         97:5d:1f:b5:36:d1:69:97:43:9a:d7:d5:e7:d1:5e:89:04:61:
         44:32:c1:90:f1:76:18:76:07:b0:75:24:62:17:72:6b:1a:06:
         58:8d:d8:11:9c:fb:9f:e9:6a:01:54:f4:aa:7d:98:de:b2:fb:
         36:ca:d5:0f:57:a7:d9:9d:38:d0:4e:88:3b:ee:f5:3c:69:87:
         8f:72:f5:5d:b6:ea:f7:70:e9:1e:07:7c:32:77:9c:b8:be:24:
         f0:fd:f6:97:15:c6:89:9c:c1:b0:c6:d9:16:02:cf:55:29:17:
         dc:a6:21:ae:85:91:5d:23:7b:03:ad:54:5a:3d:f7:41:71:d3:
         1b:3b:f9:00:7b:b6:df:e1:39:b9:a3:ca:5d:73:99:8b:54:c2:
         15:b5:93:f1:8d:35:0b:ec:e8:1f:3c:6a:60:18:74:43:ec:5e:
         e2:7b:37:cd:6f:ce:9c:02:b4:49:0e:67:72:86:c5:35:8a:ea:
         a3:17:03:78:75:2b:b5:48:fd:7e:9f:0c:5f:bb:03:0d:fa:56:
         42:14:30:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:14:14 2026 by rpki-client