Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/29acacd4-bbd7-356f-8359-cc040961842a.roa
File:                     29acacd4-bbd7-356f-8359-cc040961842a.roa (raw, json)
Hash identifier:          QRJnW8b9q2lFROZyQHBBYef7avT6nOIfsNstpown3xo=
Subject key identifier:   D9:BB:03:12:D7:D3:39:BD:53:47:EE:75:B4:71:97:4B:5D:99:1B:D3
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DE6E5D30CCE49B8BB7DBFB980
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/29acacd4-bbd7-356f-8359-cc040961842a.roa
Signing time:             Thu 21 May 2026 01:00:25 +0000
ROA not before:           Thu 21 May 2026 01:00:25 +0000
ROA not after:            Wed 19 Aug 2026 01:00:25 +0000
asID:                     19905
IP address blocks:        2604:2d80:4a00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e6:e5:d3:0c:ce:49:b8:bb:7d:bf:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 21 01:00:25 2026 GMT
            Not After : Aug 19 01:00:25 2026 GMT
        Subject: CN=4989b6b3-1a8d-4ea3-b9e6-8f3af43a478d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c3:e2:79:1f:b4:ae:e3:5f:65:22:27:0e:b2:
                    8d:c6:e2:e6:5f:88:ec:28:e0:bf:38:81:23:44:27:
                    b9:df:df:13:d1:ff:c3:21:55:51:58:2f:05:36:1b:
                    75:fb:e9:55:1f:44:fc:9b:72:44:b7:5f:dd:9d:e8:
                    9a:62:42:4d:24:5b:f2:01:d3:b8:9a:ec:7e:87:9c:
                    2b:89:e8:c0:e6:a2:63:cb:7d:dd:8e:d4:ae:91:99:
                    51:d3:e3:ec:1a:d4:40:38:0e:65:9a:05:8f:6b:eb:
                    3b:82:95:b6:49:4a:a8:72:b5:91:9f:a2:36:54:56:
                    40:d8:6d:7d:36:b8:52:0c:17:fc:a6:84:94:83:64:
                    cd:d6:ee:a7:4d:62:11:e0:71:b9:bf:da:26:bb:c8:
                    7d:5b:d6:eb:a2:1a:bd:2c:f0:de:27:ef:b7:ba:97:
                    a9:d2:93:fc:00:a7:db:70:29:24:86:67:35:f0:6b:
                    47:8b:85:3c:01:28:58:65:bc:0f:5b:71:91:84:80:
                    6a:40:ee:33:a1:63:fb:84:ca:03:d0:b1:10:b6:2c:
                    15:f9:84:b6:82:02:2b:b3:80:d0:ea:f3:63:83:da:
                    93:e3:6d:58:ff:a5:ac:41:bd:d2:ab:72:c3:9d:99:
                    2d:54:c2:1e:6d:69:f9:e5:58:0c:65:46:d4:cf:67:
                    51:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BB:03:12:D7:D3:39:BD:53:47:EE:75:B4:71:97:4B:5D:99:1B:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/29acacd4-bbd7-356f-8359-cc040961842a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:4a00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:17:02:00:99:1c:24:fa:8b:04:ad:9e:d7:91:7a:d4:0a:3c:
         23:48:a3:ea:b3:12:2e:dd:30:53:6a:d3:c2:c4:01:77:0e:36:
         d9:e5:f2:ab:60:42:87:18:7a:e0:9c:60:41:26:03:2e:b6:c5:
         b4:f4:e6:a6:ec:c0:24:dc:2e:19:07:15:6f:66:e4:4f:08:ab:
         eb:8a:df:04:b9:33:94:b5:4a:76:28:7f:ef:0c:a9:3e:c8:96:
         e3:4b:27:84:cf:6c:e1:a5:09:a4:ec:d5:8c:3f:3e:da:e4:ee:
         aa:7f:d5:b3:7a:ed:d8:27:25:0e:2b:68:43:48:d7:ee:b1:05:
         81:bd:3c:85:e6:47:33:cd:6b:1c:18:8a:28:fb:8e:af:ca:b4:
         07:69:93:9b:23:af:76:8f:7c:6a:a6:58:d7:a8:42:ee:e8:1e:
         e1:10:2f:69:39:27:b4:85:74:4c:cc:60:ce:39:99:d3:5d:a6:
         3c:90:0e:6b:5c:86:09:72:7f:3c:58:75:18:9f:30:ed:2e:5e:
         98:87:60:be:fd:d7:cd:bd:11:dc:2a:79:02:0c:e0:5a:d3:71:
         a8:c2:54:74:e3:f6:a1:61:67:64:e3:62:ed:f7:41:95:6b:7d:
         a9:24:62:35:78:d7:e1:a3:33:c7:42:d4:df:2f:05:7a:f1:77:
         62:25:eb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:55:53 2026 by rpki-client