Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28b24b22-bb78-33fd-9149-0b9f56384bf3.roa
File:                     28b24b22-bb78-33fd-9149-0b9f56384bf3.roa (raw, json)
Hash identifier:          b/3jVFcgq2Ev7QfHLs0+4oCOV1bK5+lDYTvbZzYEjQ4=
Subject key identifier:   37:0D:D4:63:96:73:82:F6:55:76:1C:1B:CD:FF:3A:83:05:86:1D:5A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F497423858CEA576A6137EF80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28b24b22-bb78-33fd-9149-0b9f56384bf3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:5300::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:23:85:8c:ea:57:6a:61:37:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e3f87c3d-e785-44a9-a86e-3b9d74502d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1f:c8:32:90:60:bd:44:6b:59:ed:6c:f7:47:
                    a5:3a:a3:d9:ac:7f:d8:96:89:7d:b1:cd:c6:44:12:
                    fa:09:64:d1:0f:cd:46:a6:f6:6a:8e:0d:de:a4:2b:
                    e1:15:ec:c4:d0:37:67:a7:30:54:5d:0f:ba:15:3f:
                    3a:d4:dd:73:6a:6f:19:20:8c:22:ed:16:bc:0c:3e:
                    8b:7f:3f:5b:37:78:35:73:d4:59:de:93:42:52:62:
                    a1:d5:8b:82:50:2c:86:4b:c4:2a:32:9c:9f:22:ed:
                    c8:7f:0c:e5:f9:db:a2:7f:1b:79:93:49:12:17:d2:
                    c1:55:f2:94:bb:ff:f3:cb:c1:e9:8d:0f:a1:34:cc:
                    09:a2:2a:98:f9:22:4f:ca:5e:3e:04:3b:fc:3a:90:
                    d0:95:99:0c:91:67:0d:60:22:19:d4:a4:8b:4f:da:
                    a6:1d:85:f3:bd:09:a1:dc:67:ba:50:2b:47:d2:f6:
                    ed:9c:3a:8f:ba:ea:fa:bf:8a:7c:e0:95:3e:84:ec:
                    e9:06:b2:cc:d7:bc:54:a4:4c:ac:48:1c:8c:16:13:
                    0f:9e:d3:66:aa:52:3c:fa:6f:2e:52:e4:a3:f1:1d:
                    bf:5a:39:e0:37:b5:f7:50:1d:89:f9:cf:b1:25:f3:
                    af:9a:5b:39:f8:83:f8:0f:6c:e5:a8:6b:a3:7c:16:
                    f7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0D:D4:63:96:73:82:F6:55:76:1C:1B:CD:FF:3A:83:05:86:1D:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28b24b22-bb78-33fd-9149-0b9f56384bf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:5300::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:4e:e4:cc:7e:57:9a:fa:b0:82:a7:f7:55:f1:b2:e8:13:60:
         65:76:39:1e:6e:75:33:09:aa:1a:f8:9b:3d:94:9e:9e:fa:46:
         71:9f:3f:38:cc:c4:9d:d6:29:5f:1c:2f:59:90:05:46:5c:07:
         c8:12:72:83:5a:c4:34:1d:fe:aa:8d:62:ef:06:d3:66:bf:30:
         25:a0:51:f5:94:c2:53:72:c1:6d:bb:a3:89:a8:1b:92:0f:61:
         e7:e6:80:f7:38:fc:1a:fb:79:1a:bd:61:13:96:46:9a:ed:83:
         5b:17:f2:0d:9a:79:14:f0:2c:61:ca:d0:ce:20:f9:c8:ba:eb:
         5a:70:86:6d:8a:4e:15:d9:ee:6f:14:d9:53:ff:0a:cd:5c:6b:
         86:03:c2:ab:21:91:88:80:f0:6f:c3:2a:85:41:81:91:ba:b9:
         5b:b0:51:c7:0c:73:4d:e9:62:de:4b:83:df:0e:4b:cd:e8:33:
         80:8e:1f:b7:3f:54:b5:50:46:f6:2e:98:b2:22:9e:eb:3e:6d:
         bf:6c:77:0a:52:2d:da:dc:8b:28:f2:72:89:35:dc:48:f2:35:
         72:8c:35:13:15:49:35:9c:2d:98:ac:6c:65:2a:97:d8:cd:fd:
         1f:1f:fb:6d:cf:fb:d6:51:60:80:e5:8a:8f:aa:72:13:29:a6:
         7e:87:ac:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:39:55 2026 by rpki-client