Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04e2b946-eb4f-3d87-9d92-f002e135b9b0.roa
File:                     04e2b946-eb4f-3d87-9d92-f002e135b9b0.roa (raw, json)
Hash identifier:          Dbiby3EGzRGePWeEzisP4g4Jp76L7GZC5x43vdSeN+c=
Subject key identifier:   94:55:83:0A:91:7D:0C:AF:60:A6:37:A8:A2:F4:CE:59:12:9E:01:1F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA7917AB25AEF79A8A5856E00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04e2b946-eb4f-3d87-9d92-f002e135b9b0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d80:3580::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:7a:b2:5a:ef:79:a8:a5:85:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3d28a864-009e-41f8-9a3f-3496db6ccb3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:03:6d:32:c5:e9:05:96:b9:63:a9:2b:a9:d8:
                    28:dc:91:47:e9:d4:11:dd:fc:96:f4:29:c1:02:c6:
                    49:f3:e7:8c:46:1c:9f:10:7e:61:f5:86:02:2e:8c:
                    7e:4c:56:39:a5:f5:0a:7f:f5:2b:46:69:f2:bf:b8:
                    f1:5a:b1:f8:0a:37:43:ae:51:19:e5:62:c4:ed:a5:
                    46:97:f9:89:12:4a:92:32:83:58:56:a3:e9:29:df:
                    45:5b:07:6e:40:cf:30:1a:c0:3e:73:a2:4a:8b:2b:
                    e1:54:91:41:48:11:6d:ab:ac:67:f5:bf:9a:c9:d4:
                    63:c5:d7:52:d1:79:44:5a:20:be:02:c5:84:e0:2f:
                    7a:0c:6e:d6:95:1f:f5:0f:f6:8f:8a:86:c8:95:b7:
                    4d:d1:e0:25:cf:12:5d:4c:94:bf:ab:8e:b4:ef:25:
                    36:7b:cb:a6:18:85:a4:0d:29:7a:a6:d2:86:ba:49:
                    d2:80:50:b7:a1:f6:cb:7d:6e:73:20:9d:0e:2e:2d:
                    f8:86:43:65:12:b7:19:20:80:77:da:96:a0:70:42:
                    20:e5:03:75:8b:77:66:c8:06:15:07:77:c4:ce:37:
                    0f:df:03:0f:f6:1e:bd:06:26:f8:a9:66:69:55:e9:
                    f2:97:8a:ee:47:f0:7f:03:a4:f2:de:5f:23:83:f1:
                    ee:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:55:83:0A:91:7D:0C:AF:60:A6:37:A8:A2:F4:CE:59:12:9E:01:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04e2b946-eb4f-3d87-9d92-f002e135b9b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:3580::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:32:e8:bd:f6:74:d7:2c:a5:1a:bf:b9:31:49:6b:8a:6d:79:
         81:be:16:a0:19:24:e8:0d:1b:bd:17:cb:35:c8:5f:08:6e:ae:
         cd:ab:d8:1d:15:76:e6:eb:a6:f1:06:ce:13:06:2c:57:79:d8:
         31:2b:b1:34:22:8d:f1:df:38:ac:10:26:5f:34:b7:c9:d2:f8:
         14:26:2c:53:74:60:65:c3:2c:43:ff:22:17:e7:dd:58:02:3e:
         b7:cc:bb:0e:03:74:40:06:84:1a:67:e9:62:33:24:d0:3d:46:
         04:c1:e7:28:bf:78:88:5f:c0:4a:0c:a0:92:99:f0:c7:76:94:
         be:7e:e3:f7:2f:41:dc:89:46:7f:b3:d5:06:34:f6:92:07:ec:
         43:68:47:63:ee:3b:3d:ac:4e:2a:11:e0:9a:14:09:43:70:08:
         81:66:da:38:30:1a:51:c0:9a:37:7c:23:d3:38:9c:e6:13:4e:
         e1:ef:2a:00:fa:a8:91:42:22:92:c3:8f:2c:3c:99:6e:e5:ea:
         c6:21:2a:af:74:9b:54:ec:ad:0b:80:55:4b:70:3a:76:2c:87:
         c2:b1:34:ec:b0:d7:aa:b9:09:68:d7:66:d5:89:af:52:21:39:
         ae:e4:2b:43:a9:a8:bc:25:d9:b1:18:35:ff:9c:b3:10:5c:53:
         1b:cf:8c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:11:36 2026 by rpki-client