Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f7953bc2-ee8e-3815-a77d-b8f425e46c10.roa
File:                     f7953bc2-ee8e-3815-a77d-b8f425e46c10.roa (raw, json)
Hash identifier:          jVpOR7Zvm2WOXTjysDwrvhlLQHftwc8n4LmKf9Wxrd4=
Subject key identifier:   10:9E:5A:67:E0:92:AA:BF:7E:B2:DE:89:C8:4E:B3:6F:35:61:60:20
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DCF2AFFA1DC8DA8E140CE0DC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f7953bc2-ee8e-3815-a77d-b8f425e46c10.roa
Signing time:             Tue 12 May 2026 13:00:30 +0000
ROA not before:           Tue 12 May 2026 13:00:30 +0000
ROA not after:            Mon 10 Aug 2026 13:00:30 +0000
asID:                     30036
IP address blocks:        2604:2d81:1400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2a:ff:a1:dc:8d:a8:e1:40:ce:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 12 13:00:30 2026 GMT
            Not After : Aug 10 13:00:30 2026 GMT
        Subject: CN=c016c2ef-f8c7-4c6c-b673-8a3bb4256dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:55:55:a6:c9:36:de:08:d4:ea:95:3d:80:9a:
                    c1:41:2f:7f:a0:c5:4d:65:05:dc:b0:c8:bc:74:c9:
                    50:df:a7:6a:df:e2:8d:26:86:db:c0:e8:52:9e:9f:
                    09:1e:89:6d:95:75:d8:21:2b:2f:62:f9:4a:fb:70:
                    ab:9d:49:6f:e8:d6:71:98:d6:5b:eb:9d:69:c6:66:
                    33:e3:4c:ec:79:03:17:1f:4e:76:94:8a:90:ee:f2:
                    60:ee:13:7a:b9:15:c2:8f:3a:09:5f:75:03:37:3c:
                    cd:98:e2:c5:7e:33:58:e7:1a:73:3a:a9:a1:d3:7a:
                    eb:69:cf:25:19:d8:11:ec:bb:f2:7a:83:b0:60:ba:
                    ec:d8:99:f0:b5:72:76:1e:1d:87:3c:85:3f:46:d6:
                    2f:9e:56:2c:2e:dc:ba:2a:48:95:72:cf:f0:aa:a0:
                    9a:6b:d7:68:ab:dd:9a:01:71:73:73:02:11:3a:3d:
                    2e:9e:72:48:36:a3:c5:af:ed:73:72:cf:ab:be:2b:
                    6c:c5:6f:dc:32:97:55:dd:9c:6c:bd:f8:7f:08:47:
                    ad:28:13:3f:48:19:6e:d9:30:ba:4f:4d:1d:2f:a5:
                    a6:73:2b:e7:e7:0b:38:51:ca:ef:ab:b0:f1:2d:da:
                    56:a1:4e:ef:4b:1d:45:b5:e9:e1:c4:cd:0d:69:ce:
                    00:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9E:5A:67:E0:92:AA:BF:7E:B2:DE:89:C8:4E:B3:6F:35:61:60:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f7953bc2-ee8e-3815-a77d-b8f425e46c10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:da:35:f5:91:91:22:f0:80:aa:ab:3c:81:c6:aa:65:51:f5:
         6d:a3:cb:f0:d5:bf:b5:6e:3f:1d:e6:7a:30:ca:07:59:30:bd:
         27:7d:f9:fd:08:00:5c:d8:a8:11:d7:27:6c:a8:ff:be:3c:8f:
         1a:ac:6b:3a:c1:44:f4:83:ef:2e:cc:2e:f6:bc:9f:27:25:e1:
         9e:92:b7:a3:ac:4c:cb:32:b4:85:12:a2:de:d9:f4:54:cd:66:
         93:60:d6:31:71:d5:cf:2d:77:19:c7:00:e3:8d:be:b6:27:70:
         91:12:b4:b8:c0:58:dd:fe:20:c1:d3:29:00:dc:e5:84:fb:40:
         17:34:00:52:fc:96:86:18:10:c2:c8:f0:f9:8c:de:e2:b6:bd:
         04:e3:66:50:d8:57:60:e0:b2:2b:68:2d:75:41:0d:a3:27:d8:
         69:53:58:12:17:46:4a:5e:f7:1e:15:1a:2b:d5:04:97:35:8a:
         d0:48:98:ac:dd:d4:21:f5:a3:2b:45:48:f6:d3:ff:7a:cf:e6:
         fe:5b:74:de:b0:69:0c:b5:6e:25:e3:a2:d2:76:5a:21:87:c4:
         c7:fe:1e:cd:8c:59:47:3e:0b:e4:92:63:73:1f:c5:3f:ba:65:
         bf:3c:75:ce:64:cf:bf:f9:53:3b:25:70:46:89:4d:09:d9:9c:
         bf:f7:79:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:23:42 2026 by rpki-client