Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a6f4188-7a94-36cf-94c1-8195b3ad6dcb.roa
File:                     2a6f4188-7a94-36cf-94c1-8195b3ad6dcb.roa (raw, json)
Hash identifier:          PvU6Jav5/VndDzyQhTfQoQb3anjkrVcI1QMpYpJlKAk=
Subject key identifier:   8A:D0:1D:D1:3F:33:37:99:1B:A3:37:EA:8D:1A:A9:C8:5D:C9:CB:2F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CC8DC9DAF606BA22002B74380
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a6f4188-7a94-36cf-94c1-8195b3ad6dcb.roa
Signing time:             Sat 07 Feb 2026 14:00:41 +0000
ROA not before:           Sat 07 Feb 2026 14:00:41 +0000
ROA not after:            Fri 08 May 2026 13:00:41 +0000
asID:                     30036
IP address blocks:        2604:2d81:1f00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c8:dc:9d:af:60:6b:a2:20:02:b7:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  7 14:00:41 2026 GMT
            Not After : May  8 13:00:41 2026 GMT
        Subject: CN=4ec4516b-f123-4ff7-a4bc-e93836a7adec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:db:07:1d:70:f7:15:28:71:2a:dd:37:a7:13:
                    3a:be:d3:e4:89:61:20:fd:f0:4e:71:92:6f:5e:4a:
                    fa:1a:46:c9:f4:5a:c9:94:81:61:46:77:34:40:f3:
                    62:e8:81:ec:21:7c:74:d2:18:e7:4d:33:05:3a:8c:
                    e1:f3:a0:df:24:e9:da:aa:58:48:6b:00:7f:72:03:
                    6d:7e:b9:0d:b3:09:6f:7a:05:34:75:16:5c:d7:70:
                    98:d1:b4:b9:fd:e8:d0:d4:3f:76:8b:82:5e:0d:42:
                    e6:5f:7c:cf:af:ee:2c:aa:cb:99:89:1e:ec:d7:9a:
                    3f:8d:d6:7b:af:e6:4c:56:0f:77:63:f8:20:49:68:
                    f6:f6:89:c9:21:16:d9:bf:04:1e:e4:a7:37:53:ab:
                    7c:b8:ac:fd:da:5d:38:57:a4:d0:e8:57:cc:a5:0d:
                    23:2a:0f:07:b2:f6:43:c6:5e:e2:7d:34:1b:39:45:
                    33:9d:8c:6f:52:da:bb:90:d2:3a:61:86:ea:9b:6a:
                    4f:6c:bf:82:21:04:12:5c:90:f7:bd:bd:7a:85:97:
                    1e:05:d6:6d:dc:b1:ce:b7:10:b6:84:c6:f7:65:ce:
                    d2:eb:0b:c3:61:95:62:01:33:ef:dc:ee:65:bc:f1:
                    31:6f:2b:96:ae:41:09:33:44:b6:46:95:82:05:66:
                    14:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D0:1D:D1:3F:33:37:99:1B:A3:37:EA:8D:1A:A9:C8:5D:C9:CB:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a6f4188-7a94-36cf-94c1-8195b3ad6dcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1f00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:76:4e:de:4e:e2:48:c7:35:51:27:a8:77:ea:ba:97:ff:23:
         72:52:13:7e:d9:d1:18:b9:2f:8c:c0:f3:37:56:01:3a:c6:2b:
         fd:24:44:5f:43:ea:fc:3e:47:b0:1d:30:44:08:ad:3c:99:68:
         17:5d:9d:9d:3c:c8:a3:28:28:17:57:7f:73:7d:ac:df:fa:d1:
         4b:b0:b6:d5:b0:62:61:0c:fa:13:56:86:7b:6d:cc:35:92:c4:
         39:c1:a9:d0:70:87:6a:de:71:c0:a2:92:ac:f5:ac:d4:6d:e7:
         24:64:8a:f2:52:c5:9d:a8:28:a4:cd:9c:96:19:21:ba:d5:b9:
         2e:fa:ea:8c:27:b6:19:2f:5f:d3:52:02:44:e4:52:3e:67:3e:
         75:a1:a4:7e:ab:b4:14:35:80:9d:dd:05:c0:e9:f8:40:70:23:
         9c:53:3b:a6:9c:c6:df:9c:bd:6b:96:37:ed:0e:51:5d:96:2c:
         21:fd:09:94:5e:3f:fb:48:06:13:42:d2:ab:d1:5c:2f:cc:d0:
         3f:c1:0c:b7:65:89:57:94:dc:e2:0f:16:3d:02:c8:62:ea:85:
         48:11:c0:f2:e2:b3:0a:02:29:ad:d1:dc:fe:db:46:8b:f0:be:
         0f:c2:94:28:1f:27:4e:3c:09:14:60:a1:7d:5c:ac:dc:de:ed:
         c1:14:fd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:48:02 2026 by rpki-client