Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3638ce9d-10bc-39f7-9f25-bc8ad61707ca.roa
File:                     3638ce9d-10bc-39f7-9f25-bc8ad61707ca.roa (raw, json)
Hash identifier:          AX3av9HRkNkNUUEggUe1xs5xDUYaAuYSWuFB/FeY0dw=
Subject key identifier:   C9:98:97:13:CC:5B:D1:78:94:F8:4F:93:D5:19:D1:39:9F:DB:2C:79
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F2CD505F803612FDF02BC1F80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3638ce9d-10bc-39f7-9f25-bc8ad61707ca.roa
Signing time:             Mon 14 Sep 2026 19:00:14 +0000
ROA not before:           Mon 14 Sep 2026 19:00:14 +0000
ROA not after:            Sun 13 Dec 2026 20:00:14 +0000
asID:                     30036
IP address blocks:        2604:2d81:8a80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2c:d5:05:f8:03:61:2f:df:02:bc:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 14 19:00:14 2026 GMT
            Not After : Dec 13 20:00:14 2026 GMT
        Subject: CN=685aeae2-fc1f-4264-a88f-01f9f89e963b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:49:1d:b4:c6:f4:07:fb:f4:b2:d8:9c:9b:f7:
                    d1:71:37:d7:35:87:ed:dd:de:41:97:d0:3e:a4:d1:
                    ab:e1:9e:fb:26:9a:40:bc:e6:da:7a:d0:17:41:5b:
                    a6:c4:54:86:b1:08:9e:25:ad:3b:01:9c:ea:67:4a:
                    ef:c3:f1:4c:83:67:a4:61:b8:6e:68:32:83:b2:ef:
                    b5:ab:55:0e:64:f7:ee:20:0c:a7:4a:eb:1e:e0:f1:
                    c2:f9:76:8a:54:6e:f5:d2:35:1a:d8:f7:48:0c:0e:
                    33:2f:b4:25:78:5b:22:ae:09:5d:58:78:c8:bb:c9:
                    f3:f0:9a:13:fa:f7:f1:60:0c:df:ff:0f:4d:0f:81:
                    e4:42:e1:ad:0a:b3:27:58:a5:03:b6:98:16:db:a6:
                    1d:f5:2b:73:0f:de:2b:3f:4b:26:de:85:65:2b:e2:
                    ec:18:bf:dc:76:2d:dd:85:6f:7e:4e:ce:14:16:fd:
                    38:27:01:e1:e1:ec:dd:1b:0d:d6:e2:18:e2:20:ea:
                    34:93:a3:d3:59:08:b3:1e:c2:03:6e:45:22:3c:02:
                    9c:91:86:0c:2a:c3:cb:87:6c:6e:40:28:42:86:72:
                    5e:a4:6a:d5:42:6a:fa:86:ec:f6:0e:70:13:d8:aa:
                    d0:ad:91:43:8d:66:ee:ee:4c:65:2a:ab:ab:65:f7:
                    b1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:98:97:13:CC:5B:D1:78:94:F8:4F:93:D5:19:D1:39:9F:DB:2C:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3638ce9d-10bc-39f7-9f25-bc8ad61707ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:8a80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:38:10:f5:25:84:7b:5f:5e:38:6e:6a:87:dd:5a:8e:46:7c:
         37:03:59:a9:fc:fe:34:e6:c7:0f:ff:e4:72:63:80:76:30:b1:
         9f:11:49:c4:eb:26:96:15:c4:21:0f:9c:4d:bc:99:0e:30:26:
         a6:cf:62:4d:32:10:83:8f:d0:ea:e2:03:ec:9c:b2:9b:53:06:
         ec:c0:ff:e4:9d:12:75:54:a4:c9:02:7a:f9:90:21:af:3b:a3:
         20:79:25:60:7b:52:2d:db:6b:25:ac:87:5f:8b:d5:8e:aa:6d:
         52:09:f3:c8:a9:ed:af:b9:a5:46:03:a0:c4:b7:94:22:cf:40:
         f9:ba:96:ce:96:2c:65:23:4f:99:7f:87:df:9c:4e:63:53:63:
         68:c3:85:33:a9:39:31:3f:42:eb:5a:48:12:02:14:c8:cc:74:
         77:f4:16:18:e1:d5:a1:61:74:09:23:fd:57:0f:9e:99:44:8b:
         95:a0:26:6f:48:9a:33:4f:0e:c7:8e:bb:a8:22:8a:86:a2:19:
         1a:78:b2:54:b1:6b:da:f8:89:a0:dd:14:9f:8e:9b:8a:1b:33:
         c9:30:58:ca:c8:07:32:7a:3c:f6:f1:10:37:12:77:1d:de:26:
         04:34:7d:8c:d1:0c:29:72:70:7c:d4:11:73:70:cd:bf:55:e3:
         6d:62:33:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:28:03 2026 by rpki-client