Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1c196387-2ecc-36ba-bbc6-6d352b317e4d.roa
File:                     1c196387-2ecc-36ba-bbc6-6d352b317e4d.roa (raw, json)
Hash identifier:          2hheVTANfeDL3RWP8SrmmlC1tBW1qId45xEe4EOP1lM=
Subject key identifier:   27:CA:4C:CD:25:F8:EF:07:B7:B2:F8:00:A9:EC:3F:32:4C:31:20:78
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA795BFA24629E3365B77DF80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1c196387-2ecc-36ba-bbc6-6d352b317e4d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d80:9980::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:bf:a2:46:29:e3:36:5b:77:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d515f838-dfb0-4905-acba-9b808b7d7b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1d:b0:74:54:51:7b:32:c1:b9:66:2a:1b:0d:
                    33:5d:b7:72:82:23:80:cb:80:80:52:98:c8:82:09:
                    02:5a:02:49:78:0a:3d:ef:70:18:49:59:ce:93:86:
                    76:1a:62:84:e7:52:d4:cc:6b:a9:f6:4e:47:d1:a8:
                    03:c2:dc:cf:9a:42:92:fd:34:a8:37:79:bf:8d:bf:
                    40:32:33:26:ea:2d:9c:82:2b:45:83:ae:e8:1d:df:
                    0a:52:94:4a:42:68:c7:63:e2:e2:23:13:20:17:ed:
                    57:63:6f:06:22:99:ac:96:9c:89:8d:30:60:4b:6a:
                    25:be:60:a7:9b:85:1d:bc:e1:23:b5:1b:7f:b6:4e:
                    37:1c:87:b2:d3:56:da:b9:65:41:0f:3e:56:bf:81:
                    b3:04:52:bc:6f:fc:68:ea:51:bf:d4:1d:c5:94:38:
                    6d:00:8e:1c:04:bf:2d:db:23:30:9b:fa:2a:c6:dd:
                    06:25:1b:63:bb:bc:0e:90:b9:ff:33:33:2e:83:39:
                    62:44:34:c2:32:65:03:b3:1b:3a:59:18:46:d2:42:
                    b9:1f:1b:fb:08:17:7d:d9:dd:db:94:62:bd:da:05:
                    f1:b2:8a:be:0a:86:de:ed:f9:26:77:6e:ec:b1:fe:
                    11:90:73:db:07:9b:27:e2:db:7f:ef:e3:5c:b4:21:
                    15:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CA:4C:CD:25:F8:EF:07:B7:B2:F8:00:A9:EC:3F:32:4C:31:20:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1c196387-2ecc-36ba-bbc6-6d352b317e4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:9980::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:3f:a4:5d:3c:f7:3b:8b:9c:a6:8c:93:f3:00:28:a1:fe:36:
         d2:43:f7:8a:04:3c:a5:15:91:a1:17:f2:3c:51:6e:11:ef:a2:
         96:94:a2:49:d1:09:1f:ed:4f:5c:e1:79:b3:8d:ff:f4:0a:bc:
         0a:31:58:cc:a7:4f:f2:c8:e5:59:d9:32:87:f6:fc:01:b7:78:
         bd:64:81:6d:fb:19:ed:fd:16:2c:1f:5c:df:cb:c9:ae:d1:9a:
         5c:f5:50:68:fe:f9:80:29:9f:a1:de:7e:e3:c3:ca:10:7d:9d:
         2d:ae:e8:58:f2:2c:23:d2:da:96:f0:d9:ad:61:65:da:13:64:
         87:8b:2f:58:c6:84:f7:c7:41:f3:6a:16:e1:2b:96:22:4f:47:
         f4:4b:55:64:9c:ad:f3:be:49:6b:f7:c5:ad:b4:dc:60:43:3c:
         8b:90:bd:de:55:bc:df:38:75:45:c5:90:53:9d:de:5c:ff:fe:
         56:87:48:d7:e7:e8:80:bc:11:b3:24:39:e8:cc:9f:22:f5:f0:
         c8:bf:0f:32:40:be:79:f6:3f:9c:41:a9:cd:60:30:c8:4b:b6:
         2c:cc:d2:07:de:70:8e:3f:1f:89:2b:27:35:cf:77:30:7f:17:
         46:67:04:5a:08:7c:b9:01:d5:e4:5d:01:75:4f:31:bb:00:00:
         97:f2:fe:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:07:23 2026 by rpki-client