Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fd03e5d-20a5-323d-b728-35e13e94e78d.roa
File:                     3fd03e5d-20a5-323d-b728-35e13e94e78d.roa (raw, json)
Hash identifier:          gvull3O46QXOwoXCUN20W76P3GQYI/nAnwml59tFX+s=
Subject key identifier:   D2:A0:A3:A6:3F:5C:15:59:29:93:B3:AF:08:73:EF:0E:B6:73:C4:9C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79A4157EC6148F34852BD30
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fd03e5d-20a5-323d-b728-35e13e94e78d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d81:2580::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:41:57:ec:61:48:f3:48:52:bd:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8cfd2c34-8b4c-41e5-a3d4-bf5990804681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:16:16:af:07:b7:3a:54:6b:f0:52:aa:73:18:
                    13:88:2e:f2:f6:88:e3:e5:8d:8f:44:7a:6e:60:cc:
                    de:fb:1c:96:ec:f9:a8:d6:16:7b:9f:55:d5:3f:ea:
                    33:b8:0f:06:0d:57:d6:d2:b5:58:95:98:39:25:78:
                    05:dd:f8:12:c2:32:be:4e:cd:68:d2:fe:31:ed:f8:
                    0c:65:7b:06:0b:0b:98:14:d5:17:c6:ef:d5:e7:d7:
                    91:ec:a5:f9:b0:51:1e:5e:29:f0:b2:25:d7:46:19:
                    8b:a8:c2:59:09:61:3f:1b:93:08:df:52:8d:03:a9:
                    54:0a:1b:ad:1a:52:94:05:78:e2:ca:09:9d:73:6e:
                    2d:a1:88:e7:af:51:67:b0:d9:6b:37:1b:fb:a7:1a:
                    95:92:c7:83:8d:ec:1e:2f:a9:36:78:30:c2:7b:1d:
                    6e:3e:a3:7e:ea:04:ab:20:f8:99:92:e2:e6:ff:00:
                    26:fa:1f:cb:2c:11:cc:4c:c9:f6:a4:cf:9a:64:8f:
                    a6:f8:3a:80:47:07:7c:6a:28:17:a0:11:be:d2:ed:
                    20:8b:23:17:a1:7b:82:a6:53:ea:64:b8:0b:c0:d6:
                    cd:6f:ae:e6:10:79:9e:02:06:1e:8b:20:a1:10:3b:
                    83:cb:f1:1a:f7:17:aa:71:66:73:4f:25:ce:d5:67:
                    a5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A0:A3:A6:3F:5C:15:59:29:93:B3:AF:08:73:EF:0E:B6:73:C4:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fd03e5d-20a5-323d-b728-35e13e94e78d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:2580::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:1a:20:ce:e7:7d:21:c7:e9:f9:ed:8b:74:da:a1:3f:af:a3:
         d5:48:80:3d:ad:a3:61:da:83:5b:3a:36:54:b5:b3:52:90:8f:
         11:fa:bc:a0:1d:f7:9a:56:9f:37:92:09:90:62:00:21:3c:3d:
         b5:39:db:dd:02:be:b4:ca:20:12:d4:55:87:34:0e:f3:7d:92:
         a0:fa:35:f6:ac:cf:b3:e9:10:0a:f1:53:65:96:41:d9:56:84:
         7f:89:0a:19:2b:4f:a2:25:b5:0f:a3:24:35:50:32:4c:67:0e:
         d9:2a:94:b3:fd:38:10:7d:2d:88:f1:66:9a:88:26:d1:58:2c:
         40:0f:d0:06:99:fd:b9:f4:1d:56:95:a9:7d:5f:ce:0f:b2:04:
         43:a6:18:06:f7:e1:01:22:d3:a8:e6:28:7e:cd:c1:09:f5:89:
         bc:a4:6e:ae:85:ca:18:9d:3b:8c:d4:04:39:83:c1:79:b6:04:
         b7:b7:c4:d8:57:eb:1b:f1:bf:e9:34:2c:a8:be:b5:ef:80:f2:
         20:7d:65:3b:bf:3a:5c:07:86:45:8b:2e:d1:28:98:e1:c2:63:
         70:f8:7f:03:14:fd:f8:e2:bb:50:66:83:a6:68:9a:c7:15:db:
         12:ed:85:bf:19:c5:ab:3f:5c:3e:38:92:12:98:6d:df:9f:f8:
         40:ba:9c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:31:07 2026 by rpki-client