Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/03da3e86-f9f1-3a03-a10d-be9bd82bdc4f.roa
File:                     03da3e86-f9f1-3a03-a10d-be9bd82bdc4f.roa (raw, json)
Hash identifier:          oBlkmb2B9UyPuRx1mTpkHK8/hgmI0J0xdXXXxx9o1vY=
Subject key identifier:   01:9A:31:F7:8B:6B:3C:68:6A:53:D8:3A:B0:74:31:99:34:67:A8:98
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79BEFC1413F4C7A7BA1DD00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/03da3e86-f9f1-3a03-a10d-be9bd82bdc4f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d80:b500::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:ef:c1:41:3f:4c:7a:7b:a1:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6cc87bf4-c524-45fe-9ce4-e8b1a99c1865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0f:9b:f9:bd:be:e7:ff:99:07:d2:f0:09:16:
                    46:6c:9c:48:ed:0a:77:a4:ed:60:c5:66:6d:91:58:
                    a7:be:6a:74:9f:f5:22:c2:4f:db:62:87:b1:a7:e1:
                    d0:ed:9c:0f:8b:8f:0f:f3:b5:f8:b0:00:45:96:58:
                    39:62:12:af:28:57:99:8a:e5:cc:b7:10:66:13:a5:
                    8d:0b:0f:6b:c5:ee:69:36:8f:72:27:43:fd:58:26:
                    8b:96:d1:1a:1d:07:7a:3c:c0:2e:5e:87:e8:cb:ef:
                    77:f0:6d:96:af:22:96:b8:0e:4a:0f:d0:3f:ae:08:
                    53:e1:1a:94:fe:c5:35:14:c6:4b:38:85:dc:66:01:
                    57:84:66:db:f5:09:42:7d:1c:60:cb:cb:62:d0:94:
                    fe:20:2a:06:ab:45:08:54:58:59:09:b7:b7:14:7e:
                    a8:c9:0b:ad:af:5a:a9:d1:ed:68:23:35:99:0b:27:
                    ee:48:c7:13:0a:36:e6:0f:13:bc:8a:8c:4b:bd:6f:
                    59:06:7f:62:ff:e8:6e:c5:8f:f7:23:a1:78:49:96:
                    96:41:2a:8c:8b:e5:ef:7d:76:e8:b0:ec:6e:74:a5:
                    75:4e:af:b2:b4:45:99:c1:0a:e3:71:2a:0a:ee:95:
                    38:e5:c0:9a:5d:4e:6a:42:53:e5:14:9d:f5:59:bf:
                    34:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:9A:31:F7:8B:6B:3C:68:6A:53:D8:3A:B0:74:31:99:34:67:A8:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/03da3e86-f9f1-3a03-a10d-be9bd82bdc4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:b500::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:7e:21:38:c2:4e:f7:8f:50:47:a5:1e:e4:47:5f:bd:67:2f:
         67:bb:df:de:da:54:89:d8:34:48:40:d2:50:55:b4:ea:47:b9:
         23:99:4e:87:a4:bd:3c:44:4f:1d:00:a5:de:eb:89:5d:81:22:
         04:60:4f:78:2f:16:8d:a5:03:29:fe:ea:d0:91:cf:4e:09:53:
         4d:7a:50:f4:2a:5c:b0:4f:a2:f3:cb:b4:15:e3:f5:57:9f:ca:
         79:e3:75:f4:44:81:20:c3:15:ca:d2:c4:1d:e0:af:e9:ca:dc:
         59:d9:87:c1:1f:06:5e:51:c9:da:00:14:29:d4:a1:f4:ca:96:
         53:9d:8a:2e:7f:f2:9c:61:87:7b:e6:fb:6a:90:27:a7:f1:d8:
         8e:46:76:ae:a3:e8:0a:cd:20:3d:c5:1c:73:9c:a3:1a:eb:90:
         8f:b8:11:8c:5c:42:9e:aa:e3:ee:1a:01:4e:cd:8f:7d:2f:c2:
         04:62:56:fa:df:d8:08:99:83:f2:b7:60:cd:4c:9a:56:cd:92:
         12:f3:59:d4:f2:3f:4a:ca:43:5b:a2:87:0b:59:d4:da:c9:a7:
         6e:b0:24:c2:3b:0e:bc:72:4c:44:25:a5:3c:2e:89:f2:c0:42:
         db:7a:76:36:c0:a3:fb:49:2a:6a:f4:27:e7:77:eb:a8:8e:91:
         a3:b0:90:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:11:21 2026 by rpki-client