Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1714f720-5cdd-3504-8b7c-77122c3a6c78.roa
File:                     1714f720-5cdd-3504-8b7c-77122c3a6c78.roa (raw, json)
Hash identifier:          VsefKoe4o5OWKIo2ajesWKhRE/CnTYyoVQjDWEZuFQs=
Subject key identifier:   74:8C:37:36:C3:50:CF:65:46:C4:2C:DF:2E:4D:B5:7F:CD:7A:35:EE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F49748B6395F4C9E806F77C20
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1714f720-5cdd-3504-8b7c-77122c3a6c78.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d81:380::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:8b:63:95:f4:c9:e8:06:f7:7c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=22ae34a4-615c-44b9-8663-658b2fa4f2b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1e:8f:b5:d5:ef:58:05:c8:13:47:5f:b8:dd:
                    07:49:bd:ac:cc:13:3e:4f:b0:cf:78:38:1e:b9:8b:
                    54:13:4a:c9:60:fc:e1:b7:58:3d:7d:5f:26:ad:b4:
                    07:0f:84:e5:b9:f1:34:e5:2f:74:25:ae:0a:99:0c:
                    b0:3d:df:1c:2c:49:ee:6a:d0:e0:66:b9:52:f4:d3:
                    d2:bb:5f:1d:26:cc:44:59:0e:9c:63:ef:43:1d:76:
                    b5:c1:72:e1:11:2b:b6:34:08:02:3b:6d:12:f2:02:
                    c6:8b:a0:12:99:3c:bf:17:2f:69:b4:e6:16:a2:f5:
                    db:04:0d:9c:b6:e9:1e:a6:f3:d3:b7:65:f9:bd:f2:
                    89:28:10:98:3c:b7:0d:be:00:32:23:ea:fc:17:ee:
                    be:24:9d:40:cb:64:a4:36:36:cf:1a:0b:fb:26:d1:
                    db:62:54:93:49:48:21:58:db:e9:dc:22:38:25:04:
                    49:7f:9c:6a:08:89:4f:b4:bf:39:41:20:59:eb:5f:
                    fb:2c:bd:81:77:8e:1f:82:de:a6:9d:49:62:f0:63:
                    a0:c5:4d:e6:da:c0:08:8c:7a:b0:5c:3e:c0:aa:8c:
                    fd:20:c2:bf:e1:4f:bf:71:96:05:7f:8f:77:0c:d4:
                    56:d4:9a:a8:1c:5b:03:17:86:3c:c5:58:ac:5b:3f:
                    34:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8C:37:36:C3:50:CF:65:46:C4:2C:DF:2E:4D:B5:7F:CD:7A:35:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1714f720-5cdd-3504-8b7c-77122c3a6c78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:380::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:47:d8:67:53:44:09:8a:bb:3c:65:95:f2:3a:11:53:e4:0a:
         67:9b:d5:b4:79:af:b3:ef:a7:bc:70:9a:26:34:c2:c6:a6:de:
         ea:56:94:89:8f:09:8d:84:2e:8d:aa:a9:03:0b:72:b5:06:b1:
         74:65:17:97:8d:a6:13:b0:c6:12:72:bf:94:cb:be:c7:1d:8f:
         f2:95:6b:28:0f:01:e9:66:9f:b0:44:4d:85:0d:c8:88:f8:3a:
         93:42:78:43:be:df:b5:a7:ab:7d:60:f7:73:23:da:1d:d1:e9:
         75:e2:7e:b7:a4:d1:62:ca:f0:ea:dc:b8:0b:3c:9d:79:fc:cf:
         b8:93:3b:35:5c:c2:63:9e:e3:3f:32:82:03:ed:f4:ca:be:8a:
         3e:56:f2:fc:17:90:a7:bd:f0:33:57:1f:2c:5c:c9:6a:01:49:
         56:77:76:dc:cc:eb:e8:30:7f:3b:38:5b:cd:ee:c4:f3:2b:5d:
         5a:e1:6a:2a:8e:ad:6c:d1:92:5d:16:59:05:f7:e5:c6:65:bc:
         94:06:13:4c:62:6d:53:ec:0f:46:4a:0b:b0:d5:42:74:33:e1:
         f7:c6:54:64:f1:77:14:22:10:6b:d1:90:c4:04:a5:5c:e0:06:
         58:ef:53:5f:08:20:84:1c:43:56:56:9e:1f:6b:84:cf:9e:87:
         08:62:12:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:54:35 2026 by rpki-client