Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09389193-f319-3921-a9c4-fedc3679e8db.roa
File:                     09389193-f319-3921-a9c4-fedc3679e8db.roa (raw, json)
Hash identifier:          dp3vNt2SRr8Kj4u5woPV1cbVqLRfv54QsXi6MflYYTY=
Subject key identifier:   AD:9E:EF:FF:02:B7:84:A9:7C:20:03:FF:BC:19:2B:93:B8:7D:99:4D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D71A525618D82A10B96D1E980
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09389193-f319-3921-a9c4-fedc3679e8db.roa
Signing time:             Thu 09 Apr 2026 01:00:23 +0000
ROA not before:           Thu 09 Apr 2026 01:00:23 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     30036
IP address blocks:        2604:2d80:6e00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:a5:25:61:8d:82:a1:0b:96:d1:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr  9 01:00:23 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=1b66df3e-06ca-4df6-85b1-6fe652796045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:be:d3:f5:7d:a2:25:fa:b3:00:c9:0d:1e:f3:
                    91:b5:84:a7:e1:bc:8a:f2:fc:9f:78:ff:32:43:ad:
                    7e:38:79:5e:65:b3:b6:df:7c:23:35:8d:ee:d8:ec:
                    6c:0c:21:16:3c:cc:16:0a:f5:f3:48:56:8d:b4:1c:
                    7a:0c:b8:7e:b8:1a:3c:00:20:6e:15:98:e8:62:ab:
                    1b:b9:5a:74:d3:83:16:6d:47:50:21:da:2a:85:dc:
                    62:69:cf:b7:01:c7:9e:31:ce:99:f1:35:c8:8d:10:
                    b7:4f:dd:c6:10:3d:6a:ef:b8:10:c1:7a:4e:ea:71:
                    e4:19:cb:df:7b:c4:68:da:41:65:c9:47:c3:43:3b:
                    f6:52:7b:1f:9b:b1:ea:00:ae:54:f3:63:26:43:40:
                    99:3a:57:41:dd:42:d9:67:99:c8:81:ff:fd:9b:ad:
                    f3:d2:43:1f:34:0b:e5:54:ec:d2:a5:43:07:73:da:
                    b8:91:35:66:b8:28:08:b9:00:b2:ae:54:e8:21:c2:
                    c4:5f:82:98:43:ff:66:0b:f6:05:6b:65:de:cc:a1:
                    3f:df:cc:8f:2c:13:90:d3:c6:0e:e9:90:13:0a:38:
                    88:95:a3:2f:24:23:b5:7f:07:44:48:47:a0:04:1d:
                    6d:59:32:9c:6a:ce:59:8d:4e:bd:9b:ed:e8:99:f7:
                    60:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9E:EF:FF:02:B7:84:A9:7C:20:03:FF:BC:19:2B:93:B8:7D:99:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09389193-f319-3921-a9c4-fedc3679e8db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:6e00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:37:84:44:a6:ec:5a:ea:50:50:5a:63:79:86:a4:da:e1:3c:
         0c:d0:b0:63:4d:b2:8e:bf:85:ee:62:ad:e2:c6:f3:2d:c8:ad:
         bf:51:30:74:50:b8:b8:e3:62:ec:04:42:fc:0f:2d:9c:8b:83:
         b7:b6:b9:c1:4e:e6:04:59:68:da:fa:d6:6d:f2:a1:9c:36:d6:
         c3:40:38:11:76:f0:1d:19:db:be:79:d7:d1:c3:00:e8:db:dc:
         36:d2:fd:05:64:9a:05:c3:3d:17:e4:5f:3c:31:c3:2f:89:10:
         3e:2d:69:9f:49:d0:93:5a:81:a1:a7:73:d1:38:c3:1b:e4:38:
         5a:67:cd:ef:88:d0:6c:f5:f5:87:25:06:9b:72:5b:12:8f:62:
         af:9a:63:a2:00:a4:78:aa:c3:fd:97:81:8c:f0:96:41:4e:46:
         5d:fc:ca:eb:74:8a:35:b5:f3:cb:83:1c:82:a6:80:90:ba:01:
         8c:c0:02:cf:64:d0:b0:b4:7b:95:77:0e:72:50:0c:2a:e8:34:
         23:74:0f:c6:8f:a2:37:f3:9a:24:19:3f:ce:a4:6a:b2:c9:d2:
         59:2e:e1:ba:06:19:58:c5:24:94:62:75:ca:16:83:6b:85:29:
         ef:8e:5a:e0:e1:6b:0a:b0:d8:a0:93:75:74:f9:45:4e:9c:bf:
         a8:59:a6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:45:14 2026 by rpki-client