Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1d4d33cc-2a3e-39ad-ae9f-225c81af9558.roa
File:                     1d4d33cc-2a3e-39ad-ae9f-225c81af9558.roa (raw, json)
Hash identifier:          VW+wCpbom1l9w9Uny0Oe61m39wLikHVn25FjduDXVGs=
Subject key identifier:   BB:13:FE:2A:DC:99:65:59:48:37:9C:F1:C2:66:DB:FD:E7:19:22:21
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D75D54B139129224F5CD50900
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1d4d33cc-2a3e-39ad-ae9f-225c81af9558.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     30036
IP address blocks:        2604:2d80:c400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:4b:13:91:29:22:4f:5c:d5:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=e318eff0-97b2-49e1-9683-3c000b62ca45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:6d:cc:de:ff:7d:17:5c:5d:1e:06:79:db:d7:
                    85:98:0d:e2:df:02:3f:c8:ad:b5:24:43:da:1d:00:
                    98:9e:78:c0:dd:d9:5a:4a:d0:bb:28:28:4d:a5:dd:
                    53:db:2e:ed:dd:55:84:13:03:6b:df:ac:33:18:47:
                    e2:fa:e3:c9:26:2f:5e:00:86:98:49:10:1c:29:3d:
                    f1:fc:d7:e8:2a:59:88:40:42:ca:bc:dc:25:1a:34:
                    98:0c:d6:29:ac:1f:3e:99:80:3b:8b:8a:5d:4e:38:
                    e3:64:14:e8:39:43:79:54:9f:d6:aa:00:d2:46:40:
                    0c:06:53:bf:80:8e:7b:c9:83:9a:42:6d:a5:b0:a7:
                    97:3c:fc:37:82:b0:bc:9d:3d:2f:d3:65:e5:ff:33:
                    2b:9a:cd:20:54:c3:f3:0f:57:0c:67:30:b1:90:64:
                    7b:5b:aa:13:da:aa:99:68:6e:3c:88:5a:59:50:e2:
                    e6:a2:68:37:dc:65:21:37:9d:6f:3f:5a:46:51:e8:
                    6e:06:8c:05:39:e6:8a:49:b9:6a:ba:18:4d:6d:8b:
                    94:02:7e:ed:8a:be:41:e4:87:ee:d6:a4:3b:72:c8:
                    d2:bf:cd:25:c0:81:0f:0d:7a:cb:fd:06:30:bc:dd:
                    64:be:55:ab:a0:52:4d:15:4a:24:27:02:58:92:d7:
                    8d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:13:FE:2A:DC:99:65:59:48:37:9C:F1:C2:66:DB:FD:E7:19:22:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1d4d33cc-2a3e-39ad-ae9f-225c81af9558.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:c400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:97:dd:db:f6:09:e7:fd:dd:a3:1d:69:cb:0e:f5:c5:68:17:
         e5:df:06:6b:87:65:49:e5:e0:b4:dc:38:ba:b4:05:b6:1c:31:
         26:45:8c:e0:4c:00:40:71:17:dc:f6:23:19:a6:f9:1c:78:60:
         6e:c0:e3:29:39:ff:c4:55:09:38:f5:c7:4f:7a:3e:6d:59:87:
         83:cf:04:a3:02:dc:3f:1a:99:fa:4c:a1:28:64:b9:71:cc:a7:
         32:11:35:fc:f5:4e:44:cd:96:14:7b:da:d7:18:37:4f:54:d8:
         d3:bf:26:f3:f9:55:7f:f2:5c:d1:01:f2:3e:a7:93:2c:6b:92:
         81:c7:41:dd:bd:b7:86:11:bd:30:72:0e:9d:2d:1e:79:97:7d:
         b4:ae:8a:d0:cf:b4:20:a5:0f:be:9b:41:2b:b8:19:27:f5:2c:
         c3:3c:c7:26:e4:43:12:6b:45:52:7f:cd:54:b6:24:71:fe:bf:
         ca:34:8a:a8:ab:d3:86:22:fb:15:a1:30:4d:13:60:b6:7f:11:
         95:f6:fe:71:18:47:f9:8b:ca:ee:21:ff:b3:bb:e8:e0:00:b1:
         cb:17:2a:0b:a3:14:75:9a:97:53:d0:f7:7c:9b:68:6e:26:c3:
         a1:8a:a8:ab:cf:b0:cf:b0:64:04:93:a3:8e:1f:1e:56:7b:68:
         e3:34:2e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:08:55 2026 by rpki-client