Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1d4d33cc-2a3e-39ad-ae9f-225c81af9558.roa
File:                     1d4d33cc-2a3e-39ad-ae9f-225c81af9558.roa (raw, json)
Hash identifier:          DFtPuTJ7EMVHeER5CFdDCSJ/z4VK3Xc+DVsJRvJhHfw=
Subject key identifier:   D6:5C:59:D4:54:CF:7A:D3:B9:47:66:67:FF:D6:1C:32:0D:3C:34:EF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584C9537088A248B0E6050E562A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1d4d33cc-2a3e-39ad-ae9f-225c81af9558.roa
Signing time:             Tue 20 Jan 2026 02:00:29 +0000
ROA not before:           Tue 20 Jan 2026 02:00:29 +0000
ROA not after:            Mon 20 Apr 2026 01:00:29 +0000
asID:                     30036
IP address blocks:        2604:2d80:c400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:95:37:08:8a:24:8b:0e:60:50:e5:62:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jan 20 02:00:29 2026 GMT
            Not After : Apr 20 01:00:29 2026 GMT
        Subject: CN=95e4fdf9-fe9b-4919-b48e-45733208ddf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:13:6c:98:36:8a:4a:6a:91:2f:a8:32:c3:38:
                    f5:d2:93:90:79:cf:47:5d:02:9e:57:99:28:41:35:
                    50:69:05:2b:8e:53:a3:a3:78:3c:a1:a9:92:9a:18:
                    e4:4d:e6:b0:eb:37:1a:22:ab:f5:5b:bc:ec:0d:25:
                    8b:81:e9:d1:40:a6:aa:14:aa:49:58:cd:e9:6b:fc:
                    5d:6c:3d:67:82:67:5d:1c:b2:fa:93:07:bb:4a:58:
                    11:4c:3e:28:44:71:9a:db:16:27:1d:04:38:cb:93:
                    1e:25:bc:2d:9c:9e:64:eb:c0:a1:9c:d3:b1:06:45:
                    ae:40:c4:9e:83:65:6c:8e:05:e5:88:b8:ff:11:51:
                    3d:c8:75:a5:c6:60:ed:46:96:5f:ef:b9:b0:e7:91:
                    3b:fd:c0:c6:13:bf:fb:bf:c5:ff:d6:11:98:db:53:
                    f8:a8:63:2d:e2:7c:d9:eb:39:e1:13:c2:2c:db:f3:
                    00:59:2e:ef:8a:a3:de:48:4d:46:d0:3f:98:c8:a7:
                    26:45:41:b6:34:83:04:3f:f4:a4:b4:b9:2a:9e:cf:
                    fa:4b:9c:2b:c0:aa:8a:65:7e:e3:18:be:ab:d7:fc:
                    1b:49:a7:28:b2:de:e8:fe:2d:04:d2:ec:b3:47:da:
                    35:62:6e:d4:82:6f:11:4f:97:92:13:10:b0:7a:68:
                    a6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:5C:59:D4:54:CF:7A:D3:B9:47:66:67:FF:D6:1C:32:0D:3C:34:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1d4d33cc-2a3e-39ad-ae9f-225c81af9558.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:c400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:36:61:62:c0:67:db:f1:a6:a0:52:29:37:7b:81:80:8a:39:
         24:dc:71:b7:ec:e7:03:7e:53:ae:f4:a1:f0:1c:d8:f9:42:ee:
         c8:59:ff:20:56:a7:05:81:4b:80:aa:04:37:aa:a9:4d:83:c9:
         a3:16:27:db:ad:7f:35:b8:db:61:89:98:bc:c8:68:94:46:d3:
         73:be:a2:15:62:8e:bf:c1:ae:e0:e8:fa:54:22:d6:ab:9e:8f:
         4e:a5:69:25:d2:f1:05:0c:b8:c5:2a:c3:a9:2c:18:87:a2:19:
         36:9f:de:bd:f3:fc:f5:ab:28:00:81:67:f4:a7:bd:57:58:49:
         89:14:9c:9e:7e:9e:68:ee:66:09:9d:4d:07:05:03:6c:66:96:
         d3:10:a7:50:18:6d:3d:58:28:e7:b1:59:74:c4:f1:7f:74:9b:
         fa:8c:9a:7d:4d:53:1a:9e:5a:c6:da:cc:d6:fe:1e:e3:2b:ff:
         22:68:f1:23:4a:c5:57:ef:8e:46:5e:49:ac:1d:06:79:70:3a:
         8f:1c:0c:a3:21:3b:b1:9b:64:4e:88:9d:6a:ba:e1:e7:b0:c6:
         be:bf:12:af:09:9f:78:58:0e:55:80:2c:c0:50:99:7a:05:47:
         75:fe:59:93:af:67:67:a1:e2:31:85:d4:b3:8a:8b:a7:29:29:
         f6:d1:dd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:46 2026 by rpki-client