Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/370c0de8-7139-3e21-b760-88b7edb52698.roa
File:                     370c0de8-7139-3e21-b760-88b7edb52698.roa (raw, json)
Hash identifier:          nXauiRmBqPI/LJH1U+IJJX5jg738N1GQqSWFSFyc+h4=
Subject key identifier:   95:CE:FF:50:95:99:B4:6D:DB:81:1F:9C:00:94:BD:21:BA:8F:8D:2A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D75D54B50CC8A37165C0AFF80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/370c0de8-7139-3e21-b760-88b7edb52698.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     30036
IP address blocks:        2604:2d80:c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:4b:50:cc:8a:37:16:5c:0a:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=944ea55a-4ec5-4296-9f8f-985813a7777a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:86:bf:61:fd:d5:84:92:64:d4:d2:56:23:4d:
                    8b:73:0f:95:ed:48:2a:3a:0b:b8:ec:6e:07:eb:f0:
                    ec:c8:b2:c8:b8:4a:53:70:9d:46:e8:c7:62:81:a9:
                    f2:14:9e:18:e8:40:d7:ce:4c:e2:69:70:bc:3d:e7:
                    c4:48:07:b2:fa:7a:26:23:9d:15:43:54:14:22:52:
                    f0:e3:e0:37:61:75:46:5e:22:47:cd:4a:86:43:be:
                    a1:a1:08:80:44:e5:c7:5e:ef:9f:d5:fe:45:2b:c8:
                    2e:28:93:70:8d:b8:30:e3:57:87:d6:5a:39:41:53:
                    0c:5a:22:11:b7:2e:ec:80:60:32:6c:57:4f:2d:2c:
                    2f:19:b6:a3:db:c6:81:5e:0a:f9:ca:fe:ca:cd:56:
                    0f:10:ea:6b:01:0d:4f:54:5f:ba:f4:4d:2f:d8:a7:
                    b2:51:44:a4:32:b8:79:c3:38:ab:75:dc:2f:9a:23:
                    e6:e9:36:73:3f:40:e0:0a:29:e6:93:f6:93:ca:f2:
                    d4:23:a6:72:93:7d:ff:27:3a:b8:e4:28:39:db:ff:
                    eb:7a:75:18:0d:ca:0b:72:78:19:a3:c0:9a:f2:25:
                    8b:0c:f5:e6:46:8d:a0:38:96:6b:7b:d2:80:c1:77:
                    a8:a4:ef:76:c1:f5:95:19:d1:2c:88:f5:5f:6a:84:
                    16:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CE:FF:50:95:99:B4:6D:DB:81:1F:9C:00:94:BD:21:BA:8F:8D:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/370c0de8-7139-3e21-b760-88b7edb52698.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:2b:9d:e8:9c:8c:22:d2:7d:4d:d3:e1:8e:d3:46:67:6c:42:
         9a:50:6e:06:06:89:eb:36:dd:cb:e1:1f:ba:36:2d:b5:e9:a8:
         3e:36:5f:53:b3:d1:76:72:8f:ef:31:07:fb:ca:17:05:85:ab:
         e1:36:17:68:bc:0c:11:4d:14:e3:10:22:14:72:df:be:8e:3e:
         98:42:8e:95:cd:c2:bf:59:34:72:72:d1:b0:3e:bf:cb:e1:20:
         59:04:dd:56:58:af:4c:91:ab:7d:f7:57:98:8a:10:dc:63:94:
         72:7f:d3:95:40:e6:0c:0c:92:47:88:54:5a:6f:8b:a7:ad:46:
         f1:38:3b:8d:73:5d:5e:23:0f:0d:91:02:11:9f:1b:10:44:c4:
         18:fa:1d:fa:e8:36:ee:3b:d6:f7:1b:26:0a:f3:1e:51:12:ae:
         66:95:21:c1:1a:6e:74:7e:0d:9e:29:81:43:61:9e:b4:29:aa:
         47:f2:43:fa:0e:b4:d4:de:2d:56:fb:f4:59:6e:60:27:6a:73:
         83:64:27:89:2e:0e:96:24:9d:0c:5f:6a:f3:48:90:93:42:da:
         ce:6c:53:0c:b6:12:3f:96:30:2b:1c:f3:61:44:3f:dc:81:37:
         9c:f9:85:74:ee:26:aa:7b:5f:fe:31:91:ef:6e:37:35:f5:1a:
         e2:9f:06:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:58:54 2026 by rpki-client