Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e80f6b55-9a47-32f7-a2c6-bae1925bb7bf.roa
File:                     e80f6b55-9a47-32f7-a2c6-bae1925bb7bf.roa (raw, json)
Hash identifier:          obsIRlMYkBLFaPcBRiK/gscvaNc8nKvHlyCrvjndLDI=
Subject key identifier:   8D:22:20:A9:33:6C:6F:4F:DD:D4:4C:2B:3E:38:80:93:97:B1:A8:2D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E4DB9D8FD1394A9031CE37180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e80f6b55-9a47-32f7-a2c6-bae1925bb7bf.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     30036
IP address blocks:        2604:2d81:3800::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:d8:fd:13:94:a9:03:1c:e3:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=30fd9a7f-773c-4e54-809e-4e69caeffc42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:15:6b:01:86:ea:f6:51:b9:e4:f5:24:0a:4a:
                    0a:28:3e:de:54:5e:ed:40:c7:31:79:41:68:01:fc:
                    b4:fd:45:27:54:ae:50:25:a4:d1:da:8d:f2:a6:c3:
                    01:50:13:b0:28:64:0e:0e:f5:84:32:bd:cd:fc:75:
                    7f:b8:6c:19:91:08:d3:5f:e6:d1:4c:75:3b:e1:c5:
                    60:50:81:e0:bd:aa:fd:82:b7:57:24:2e:45:d1:5b:
                    ab:03:99:39:15:dc:28:8b:cd:16:a7:5a:57:82:87:
                    9b:6e:d9:72:0b:51:21:5a:56:bc:5f:79:d6:a2:e7:
                    12:aa:34:73:fc:c1:f7:4c:25:91:1d:e7:e3:b8:99:
                    f6:5b:6a:63:08:c6:45:0d:09:21:ac:64:9b:03:f9:
                    74:7f:ed:bf:84:42:87:5d:8e:f4:10:21:e2:aa:e9:
                    1a:34:e2:a6:d1:05:c8:ee:09:78:5b:a6:17:24:98:
                    9c:80:dc:48:bb:d2:34:d0:31:10:16:b5:99:db:ea:
                    3a:b5:06:1d:32:25:5c:a2:67:cd:6a:e2:2b:47:c5:
                    67:5a:1c:93:24:57:4b:f7:5d:12:a2:37:93:99:03:
                    63:41:47:dc:4a:37:af:a1:96:36:9b:e0:89:cb:74:
                    ca:24:86:ed:7d:44:bf:3e:c8:2f:65:ef:46:34:ce:
                    f4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:22:20:A9:33:6C:6F:4F:DD:D4:4C:2B:3E:38:80:93:97:B1:A8:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e80f6b55-9a47-32f7-a2c6-bae1925bb7bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:3800::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:2f:23:c3:38:0a:8d:46:e1:b6:6b:1e:aa:fa:b2:e1:3d:c9:
         ba:f6:b3:0f:8a:ae:fb:97:e1:5f:4f:33:27:50:ad:2e:54:e6:
         0a:58:79:f3:52:9e:02:54:aa:a3:75:41:03:eb:ae:97:42:d7:
         49:96:72:9e:09:5e:17:66:bc:85:a6:dd:0b:23:58:26:04:b2:
         0a:06:e5:1a:91:44:a9:4e:d5:86:9f:04:24:df:d8:95:b2:ca:
         1b:be:49:e1:67:27:79:f0:d3:72:8f:ad:3f:3c:ad:de:7a:24:
         d2:33:9d:10:68:14:ef:77:6d:14:3d:60:7e:62:7e:1a:05:2f:
         89:1c:8a:fe:b2:6b:46:52:87:00:e0:2f:cc:a1:d0:92:09:dc:
         1c:a6:87:fd:b9:31:d1:ed:f7:a4:30:e0:54:4f:f0:9d:d9:f8:
         79:96:0f:d4:b1:94:2f:7b:11:8e:05:f2:c2:59:f5:32:22:eb:
         26:79:99:af:99:17:e5:10:ba:0b:b4:76:de:b8:2e:9a:a1:82:
         16:7f:a5:9a:57:0d:cb:72:89:03:6b:1f:a2:e6:95:c3:ee:52:
         a2:8a:92:00:2a:80:1a:0d:94:0f:56:00:52:f8:06:4e:35:dc:
         7e:77:1e:62:22:66:0f:e5:85:3f:0f:0e:97:c4:31:cd:e1:22:
         53:77:60:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:49:04 2026 by rpki-client