Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e72bff0-0832-39e7-8e8b-f28d2a52db36.roa
File:                     3e72bff0-0832-39e7-8e8b-f28d2a52db36.roa (raw, json)
Hash identifier:          IpEb+UZgyKfFE6yzVmawIDq78agQACU+5I504jaebtE=
Subject key identifier:   52:09:56:35:6E:58:69:E8:49:5A:E9:98:A9:49:0E:CB:54:E4:40:E3
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DE84B3F7B389AAC4C5E438180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e72bff0-0832-39e7-8e8b-f28d2a52db36.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     19905
IP address blocks:        2604:2d81:400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:3f:7b:38:9a:ac:4c:5e:43:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=b1d6a3a6-60bd-4a52-b979-31484619052a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:77:18:9e:ad:84:0a:41:f7:fd:2a:61:f1:e5:
                    cd:75:11:ab:e3:db:6a:e1:9a:e4:43:14:00:14:4f:
                    59:de:0e:9c:45:0f:b6:48:11:c9:3a:fa:0f:1d:e8:
                    53:ab:27:04:7f:02:d5:63:d9:35:e9:1a:d0:09:12:
                    8b:85:fb:e7:85:b7:02:2c:49:31:2f:99:b9:13:33:
                    ca:90:98:2a:a1:60:63:e8:f2:51:c1:6c:13:db:c5:
                    9c:14:33:b2:b5:bf:74:10:ea:a1:bd:be:da:4d:4e:
                    d7:a2:b9:4f:a4:93:ce:ac:50:b1:d0:bd:ba:c5:5f:
                    3f:49:49:6c:88:37:44:7b:8b:8c:4f:a2:a1:1b:0b:
                    38:28:89:65:66:93:f1:49:ca:12:65:cf:20:2c:f0:
                    29:9f:a9:3d:60:97:5a:a9:0a:47:bf:a5:4f:ce:54:
                    e0:f8:c6:97:c4:10:57:a5:9f:b1:93:15:0b:d2:5c:
                    e7:5b:ea:94:26:95:82:2e:86:8b:1d:62:49:9d:ac:
                    b8:e3:d2:47:88:f0:3f:b9:97:78:a5:ea:5f:95:f0:
                    92:f1:a9:af:68:30:e6:23:49:36:0c:4f:72:49:c6:
                    78:c8:69:c7:31:65:a2:28:fa:c7:70:c7:37:de:23:
                    c8:aa:8c:65:26:c7:95:21:a3:df:c1:35:cd:99:55:
                    18:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:09:56:35:6E:58:69:E8:49:5A:E9:98:A9:49:0E:CB:54:E4:40:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e72bff0-0832-39e7-8e8b-f28d2a52db36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:84:db:16:f6:56:0b:41:e1:24:bd:f4:5a:21:c3:07:ad:b8:
         ae:b5:ec:a4:11:39:50:8d:29:17:45:2d:70:96:a8:6b:99:8a:
         a1:fd:20:5c:05:16:83:54:78:b0:c5:fa:c5:58:16:87:e1:99:
         c6:45:0b:7e:b2:0c:06:53:c3:eb:b5:a2:7f:9e:32:53:b6:98:
         1f:c8:33:f1:14:5c:a9:96:f4:d4:95:6d:a3:02:bb:c5:43:5c:
         ca:00:a1:29:6d:79:96:10:98:e0:b6:24:4b:65:01:eb:5b:24:
         e1:89:df:c9:fe:e6:36:94:e0:ee:1c:94:79:03:56:89:1c:91:
         bb:d0:6e:80:c9:ba:2a:c0:1c:26:c9:be:34:79:d0:a2:75:30:
         4c:2f:de:72:c3:0e:0f:7c:d2:e2:58:7e:1e:b6:1e:41:ac:1a:
         12:06:b4:af:59:ae:2f:17:1f:ab:b1:f8:7f:8a:de:8c:7b:9a:
         db:9a:c0:3b:26:f8:f5:33:9b:20:0d:9e:b2:6f:98:52:8a:9a:
         80:5e:f4:01:26:30:52:54:09:ad:83:f4:c8:80:f2:0c:01:e4:
         02:b3:7d:10:fe:52:56:2d:7c:3a:c5:f2:6f:c7:48:69:a8:70:
         df:31:60:74:f0:55:2c:a4:23:fe:ea:bc:5c:87:37:69:18:d1:
         5c:c0:3e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:44:12 2026 by rpki-client