Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0e0a2f76-1da2-35fa-9f19-265d1e102094.roa
File:                     0e0a2f76-1da2-35fa-9f19-265d1e102094.roa (raw, json)
Hash identifier:          g+ulHWr8QtQTRRUeiY1GDjeGS/0HDUeo3hRjOXy8pgY=
Subject key identifier:   43:4A:9B:F9:E5:52:F4:1B:DA:A5:1A:2F:7D:B2:0E:93:8B:5A:E1:8E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059B46EC1E2AA20FF175F1C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0e0a2f76-1da2-35fa-9f19-265d1e102094.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        2604:2d80:9000::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:46:ec:1e:2a:a2:0f:f1:75:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=50300ffc-4fac-46b1-88f7-66449b9535d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:86:b6:45:82:19:01:bc:8b:c0:e3:6b:dd:bc:
                    f5:be:a4:aa:21:9a:42:64:50:86:fa:34:df:13:ae:
                    92:67:93:d5:90:a1:3a:2a:90:b7:54:9d:40:31:b5:
                    73:73:c3:72:b7:7f:a6:25:7d:64:f9:c5:8a:3b:f5:
                    8a:6e:d7:e4:39:54:cb:db:6a:51:de:5e:fe:42:9e:
                    32:4c:c8:4b:97:0f:25:53:c1:03:79:0b:d0:61:01:
                    dd:a4:62:0c:bf:6a:33:8f:44:58:96:c8:71:68:b8:
                    79:3c:e1:9f:18:ca:55:e4:97:0d:a0:70:0a:14:dc:
                    bb:d2:c4:ec:d0:cf:aa:c6:86:66:97:33:af:90:24:
                    23:c1:04:63:cf:81:20:9e:71:76:4e:87:37:6c:cc:
                    29:3c:d6:0d:f1:00:d3:9d:fe:fb:bb:ee:55:2c:7c:
                    39:a7:7a:cc:04:77:1c:40:e0:a8:ea:18:07:3e:5c:
                    91:aa:ab:d4:55:34:56:3e:65:42:2d:59:e6:ef:64:
                    0a:ae:88:26:a8:b0:94:9a:09:ea:ed:d0:84:37:66:
                    ee:74:7d:fc:fa:e4:bf:03:2c:37:81:f5:3a:08:bf:
                    00:5f:8d:2e:67:2e:70:7a:7b:f3:55:74:f8:7c:cc:
                    d5:71:ed:df:6e:3d:94:39:4e:43:ec:6c:da:9f:ff:
                    d7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:4A:9B:F9:E5:52:F4:1B:DA:A5:1A:2F:7D:B2:0E:93:8B:5A:E1:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0e0a2f76-1da2-35fa-9f19-265d1e102094.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:9000::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:2d:10:56:d5:08:5c:8e:75:0b:7a:d3:6e:b2:f3:11:d4:9d:
         57:b1:74:f3:36:99:0c:94:97:79:4a:5b:62:e5:f0:40:5f:c4:
         f0:5f:ac:f3:99:63:f2:77:a2:bd:5c:09:5b:47:44:e0:50:c7:
         5c:6b:09:17:9c:2b:c6:eb:e8:09:aa:55:b7:cb:81:6e:96:50:
         b3:8c:d6:b7:34:1e:4c:57:f5:0c:9e:42:2c:2e:46:63:76:fc:
         d7:6b:db:93:73:43:fc:cd:ff:c4:c4:4f:f2:4a:54:ba:0b:59:
         8f:03:26:aa:0a:66:e1:e4:e4:c5:6c:56:48:c3:7a:85:1b:55:
         4e:b6:b4:86:a1:7b:a6:c0:90:fd:e9:34:0d:e2:20:fa:33:a1:
         b9:d1:09:2e:76:4a:17:b0:0f:08:b8:9c:ef:ea:7e:6e:0a:47:
         bb:85:9d:b2:db:1b:d6:31:cb:49:37:bc:6d:2b:f2:c4:92:96:
         2c:d5:cc:ef:49:16:48:2c:2a:bd:7e:db:b3:a6:4c:71:6d:a3:
         39:6f:de:25:c2:71:aa:30:72:c7:c3:1d:6f:c6:ff:f9:f7:9c:
         84:3a:28:a0:35:55:c0:8d:3b:0f:1d:44:4d:4a:90:3f:e7:b1:
         e4:e4:51:0b:a3:61:fe:85:5e:2f:a6:fa:4b:93:78:6a:f0:51:
         c8:4f:f7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:11:13 2026 by rpki-client