Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f5c12d51-458a-3f38-aed6-e9a12a4cfadd.roa
File:                     f5c12d51-458a-3f38-aed6-e9a12a4cfadd.roa (raw, json)
Hash identifier:          ZCHDH9jJP6ge5QdTW0KmuLV/5L1Ev6AKxCemTJpPQEw=
Subject key identifier:   FA:FB:5A:23:0E:B5:72:B6:F8:D7:6C:10:B5:A7:20:43:AA:AE:7D:5A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24E12049A37D7FE523D37600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f5c12d51-458a-3f38-aed6-e9a12a4cfadd.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2d80:1800::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:20:49:a3:7d:7f:e5:23:d3:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=4ffb94f0-db46-4a73-9b51-55215a950fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:63:41:32:35:13:ca:af:6f:9a:31:1c:9f:ba:
                    89:bc:c8:db:72:73:81:7f:b3:eb:9c:ad:85:37:e7:
                    1f:98:54:91:b5:00:aa:19:b6:75:9a:4f:56:33:1f:
                    a1:45:fb:6b:8b:1e:f9:2d:11:85:49:a1:62:8e:ff:
                    61:58:3f:49:00:b0:23:e5:0e:3d:5f:3a:d4:dc:eb:
                    b4:b8:fd:62:8b:bd:9b:00:a7:e9:6b:aa:c5:0a:67:
                    e3:e1:34:81:ad:43:2d:77:aa:e0:28:28:20:12:67:
                    df:e9:92:ee:3c:29:89:af:ee:da:78:98:51:c1:dd:
                    d8:22:01:b3:2f:a6:20:a7:55:cf:2e:b4:d2:aa:5c:
                    01:65:4e:d0:95:19:d7:5e:6a:4c:da:b7:69:fe:f5:
                    ef:61:47:96:e4:04:75:b2:b0:ca:4c:14:3c:de:9a:
                    73:3c:fe:51:40:52:6f:40:47:29:1b:90:e6:e2:88:
                    fe:0c:a6:bf:ea:e1:ae:1d:e3:85:0c:b0:77:59:cc:
                    84:03:6c:38:cd:d7:b4:42:ab:a0:b5:a3:de:33:0d:
                    20:1d:3e:92:88:7f:b0:f2:ea:ea:ea:c7:e7:6f:4e:
                    3a:42:46:82:92:f2:56:18:f3:b7:a9:96:9f:b9:a7:
                    78:e3:88:81:6f:14:25:cc:fc:5d:a3:d9:af:7b:eb:
                    a8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FB:5A:23:0E:B5:72:B6:F8:D7:6C:10:B5:A7:20:43:AA:AE:7D:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f5c12d51-458a-3f38-aed6-e9a12a4cfadd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:1800::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:f7:69:de:30:c5:0d:1b:d7:ce:6f:43:34:1d:d9:f4:f1:ab:
         0d:9c:b7:24:f8:ee:50:7b:ba:7a:55:37:14:36:4b:cb:b9:71:
         60:bc:9e:76:ec:3d:09:2d:ad:bb:3b:0e:7c:49:6f:17:de:11:
         aa:c3:06:27:68:a1:79:7c:2f:fb:d7:6f:05:61:23:0e:35:31:
         f5:92:0c:ea:04:26:a9:4a:f5:98:5c:43:8d:cb:78:3d:b9:62:
         65:52:7c:a7:5b:d6:5b:03:1f:07:b7:9c:13:19:f5:85:01:8f:
         17:ac:af:e6:08:83:58:8b:40:40:25:ea:57:4f:38:52:b8:a3:
         96:74:c9:16:18:3b:a6:11:02:09:77:52:fb:77:06:17:6c:c3:
         41:58:59:f2:b5:1a:35:08:3e:8b:99:9d:07:0e:78:f4:73:12:
         9d:ab:dc:4a:ed:11:1d:68:21:4a:ba:f7:98:94:7a:77:35:7e:
         80:04:ed:ee:83:f5:2c:85:16:83:d6:ce:0c:a5:f3:6a:52:a9:
         f1:6e:c0:3b:bf:19:15:20:85:d6:16:dc:31:75:29:5c:74:e6:
         7b:5f:08:ec:99:1d:83:bb:75:0e:f6:96:4c:99:1f:85:49:71:
         ae:49:5f:c7:f0:d2:ad:29:9f:30:61:65:85:75:28:1d:ca:eb:
         eb:76:d6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:26:53 2026 by rpki-client