Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3063268c-b6b6-3373-9325-4d4fb721d038.roa
File:                     3063268c-b6b6-3373-9325-4d4fb721d038.roa (raw, json)
Hash identifier:          J/f02waZJ8lqjkbF1Ic3WV+wpFhXCV0wl9cmhMiDpC4=
Subject key identifier:   65:7B:F7:0D:00:8A:C5:62:BE:7C:70:A0:2B:88:A6:9E:F3:47:FE:70
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059C7188801F1B2666EC6180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3063268c-b6b6-3373-9325-4d4fb721d038.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        2604:2d80:b100::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:71:88:80:1f:1b:26:66:ec:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=e27c3231-1986-4bbb-9ec6-0488ad640f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d0:80:d5:b9:70:23:22:08:c9:a0:90:d0:56:
                    c1:52:84:7c:d3:5a:9a:51:56:03:a6:57:bf:9f:75:
                    c0:fa:8c:b5:94:6f:f9:2a:47:b0:23:db:20:90:46:
                    81:65:4b:12:a0:25:53:e9:4f:2d:37:2e:e7:df:e9:
                    d8:8c:e6:ff:ea:8b:92:5c:bf:95:7e:8a:43:88:95:
                    ca:72:1d:c7:ba:e0:ab:d6:51:6b:92:2b:91:27:97:
                    62:f7:97:56:d0:ae:c0:38:a9:c1:b9:be:71:8a:d9:
                    37:18:8b:d1:6c:97:61:bb:10:90:5c:f3:83:34:3b:
                    8e:c5:60:9b:d0:c9:e7:2c:7c:3c:ab:18:3b:7a:39:
                    75:8e:3f:37:35:6d:e7:44:d1:fb:f2:a3:53:14:0f:
                    1a:6c:d4:04:4c:80:2e:22:2e:e6:9f:7e:7c:87:0d:
                    c7:60:d6:07:9d:53:c0:6a:d9:35:26:70:73:28:42:
                    90:80:d9:e2:21:4f:08:0c:ed:31:95:22:c1:4e:c9:
                    1f:ed:1a:df:bc:09:91:fe:6d:51:68:c2:e7:d6:f3:
                    ab:b7:f8:5d:41:4b:21:bb:14:4d:e2:30:8f:59:e2:
                    f8:4c:a2:78:ae:2e:0d:d5:e3:ef:4d:51:f2:9e:76:
                    9f:4d:d2:da:74:26:da:c7:94:68:02:88:5a:aa:06:
                    c9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7B:F7:0D:00:8A:C5:62:BE:7C:70:A0:2B:88:A6:9E:F3:47:FE:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3063268c-b6b6-3373-9325-4d4fb721d038.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:b100::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:5d:d8:af:d4:e7:a2:aa:4a:49:aa:34:ad:d0:a9:9c:c8:54:
         5e:59:9a:8a:8a:a3:4c:d0:8a:16:86:52:64:de:19:74:01:be:
         99:34:76:f1:06:5f:a9:53:90:6c:64:68:79:e2:9b:14:96:1e:
         70:a7:ad:54:22:7f:b7:7f:83:93:80:d8:83:d6:f5:62:e8:1a:
         ba:5f:32:63:da:03:34:0f:9b:37:26:ff:ce:a2:b3:45:d9:1e:
         65:3a:56:a3:80:9f:87:c2:1a:b3:b1:1d:17:e9:87:3b:9e:9c:
         3e:32:62:fd:7b:fa:e0:ee:15:0b:95:0f:bc:19:29:2e:74:e7:
         de:24:af:20:f6:1f:01:50:28:14:94:cd:e0:c7:1d:3d:e2:87:
         8b:b7:a8:3f:ac:38:4e:ff:35:45:e2:15:73:56:54:0c:c7:32:
         bf:f2:66:75:f7:e7:8e:c7:e3:0e:28:96:32:39:12:e7:b5:44:
         c7:60:df:2f:35:56:22:be:9f:aa:2a:50:82:be:ae:46:c9:53:
         40:84:d5:13:50:8c:e8:ec:9e:cd:44:2a:ef:b4:a2:7a:6e:b3:
         2d:3b:30:81:6c:4a:19:f9:c2:e6:b3:41:b3:2f:75:07:fb:26:
         06:5c:82:cf:18:06:43:cd:22:34:08:cd:38:09:59:c4:10:2c:
         4e:e7:ea:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:05:07 2026 by rpki-client