Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1a91b44a-03ca-31c0-bcb0-bb1a4a240eef.roa
File:                     1a91b44a-03ca-31c0-bcb0-bb1a4a240eef.roa (raw, json)
Hash identifier:          c7C9jWPmNEb1LC/BGPIr757rHi0Myo1ER+pVY2hRVks=
Subject key identifier:   DC:4D:56:70:8E:BF:98:8C:CE:24:12:23:8A:3C:57:90:EC:B9:70:28
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F497489798A08EAC0A1BFDD00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1a91b44a-03ca-31c0-bcb0-bb1a4a240eef.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:8f00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:89:79:8a:08:ea:c0:a1:bf:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=654d057f-7242-4e5a-86be-e6958bb9a779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:93:2f:d3:8f:63:9b:18:7b:25:b9:0d:39:70:
                    48:41:a9:f6:db:b9:ad:e5:b4:6f:bc:66:30:24:d9:
                    52:81:42:15:c4:c4:36:3c:85:73:fb:d8:80:80:8f:
                    a2:8f:76:a2:c8:44:55:5d:75:b3:87:c8:d7:30:78:
                    11:ce:c5:5a:41:e5:45:8a:da:e2:e2:90:f3:5a:9d:
                    79:cd:fd:ce:27:10:97:d6:57:0c:26:d8:80:9d:52:
                    46:e0:72:cd:19:4e:11:ea:22:62:5e:cb:98:df:b0:
                    7f:3a:8f:5c:11:2f:bc:13:7c:01:07:ad:cd:aa:ea:
                    03:ce:f5:0a:de:65:d6:fd:9d:9c:a1:9a:cb:37:f4:
                    3c:0d:96:99:86:e9:cf:4a:fc:f5:16:9b:44:40:1f:
                    b4:eb:5b:a6:3d:e9:ef:1c:68:53:a0:f6:6a:da:b1:
                    7a:6b:3a:ad:c0:7c:f3:75:cf:78:e4:13:1b:8d:ca:
                    a7:c7:83:68:f6:9b:69:75:57:57:d4:e4:bb:83:0a:
                    0e:af:55:bf:e6:5b:e1:a6:c6:ed:cc:fb:6a:1d:9d:
                    4f:f6:c7:30:b2:03:db:45:e9:19:94:87:61:3e:cd:
                    e8:05:b0:51:53:a6:0a:28:2b:9a:23:ff:7b:a5:2c:
                    43:84:e7:88:3c:e4:5f:2d:9f:1e:8e:1c:6a:4c:21:
                    49:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:4D:56:70:8E:BF:98:8C:CE:24:12:23:8A:3C:57:90:EC:B9:70:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1a91b44a-03ca-31c0-bcb0-bb1a4a240eef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:8f00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:9e:3c:c0:de:00:50:24:b2:80:97:ad:66:d7:a7:d5:bf:e0:
         03:2a:24:e2:07:13:6e:06:40:01:f7:c3:a5:97:ca:8c:eb:06:
         8f:0c:46:77:80:6c:a1:96:26:66:aa:96:e4:84:62:6a:96:75:
         81:ff:88:e6:4a:b7:85:94:7f:5f:d0:c8:b4:a5:88:09:d5:30:
         69:eb:85:b8:5c:66:14:e5:22:33:60:ec:2c:e1:db:15:18:9a:
         66:8a:9d:b2:ae:3a:d9:ca:7f:d3:63:bf:65:29:5e:03:26:50:
         f8:bb:b4:31:fa:79:65:6f:00:3d:c6:74:85:a1:6f:10:e6:33:
         48:7f:57:f8:09:23:c6:1c:26:db:61:20:f5:49:4d:95:75:fd:
         5b:13:8b:da:d6:d8:a7:51:32:c2:74:76:5f:7e:eb:68:47:19:
         75:93:dd:87:af:1d:8b:cd:78:62:b9:2d:51:44:8f:a4:04:7c:
         b6:27:7e:dc:8b:7a:16:43:41:3b:c4:a5:23:ea:40:f4:a1:77:
         cf:70:3c:f2:21:42:31:4d:bd:20:4b:3f:b7:7d:16:2c:fb:d2:
         40:11:4b:46:b2:bd:8d:5a:ab:f4:81:6e:87:90:5f:d1:93:5a:
         70:68:07:8d:23:39:10:8a:d0:b4:c5:c6:20:6f:c5:1e:e6:37:
         fb:47:58:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:00:31 2026 by rpki-client