Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4001f6d4-7963-3c71-b147-4ccfdee0bc21.roa
File:                     4001f6d4-7963-3c71-b147-4ccfdee0bc21.roa (raw, json)
Hash identifier:          eRDAACwKrqVBqKglV794FOalLnpuf1fJQWYh8Y67kLo=
Subject key identifier:   C8:99:EE:8E:B0:98:55:60:D4:A9:A4:C3:8C:65:27:5A:D3:BF:DD:B5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CC7772CC06CE9B9943089F960
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4001f6d4-7963-3c71-b147-4ccfdee0bc21.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     30036
IP address blocks:        2604:2d81:3880::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:2c:c0:6c:e9:b9:94:30:89:f9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=4ee6d58a-32fd-45cc-a9a2-c7994f45f7a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:47:20:03:20:6e:a4:86:8f:b8:4d:d1:d0:b6:
                    f0:b8:6a:ab:b6:7a:4e:5a:dd:15:db:17:5a:b2:9a:
                    27:0b:4f:17:cc:50:9e:37:db:00:f4:a3:52:e9:2b:
                    a3:d3:81:44:92:55:83:51:79:42:a0:d8:ea:63:11:
                    7e:f9:bd:f3:a2:58:dd:c4:a3:04:e7:a6:54:7e:1a:
                    22:19:c3:4b:dd:ee:42:db:46:85:6b:e3:45:fe:7e:
                    46:8c:10:71:73:9a:75:bd:81:86:9c:89:0a:9c:b6:
                    95:a1:73:65:01:92:7c:92:42:3b:0c:c3:95:6b:9f:
                    af:7a:93:97:26:0e:bd:67:4b:24:e3:1d:77:61:b3:
                    d2:25:99:ce:40:fc:82:1f:ca:3c:4f:10:c8:a8:82:
                    fd:57:60:43:74:fc:7f:3c:a1:83:e3:72:49:aa:74:
                    3f:57:51:9e:c9:a3:4d:cf:13:3b:ad:ef:51:51:6d:
                    aa:07:81:66:77:b7:98:41:f8:d7:c3:d4:a0:6a:0e:
                    5a:b8:38:8e:67:0d:16:59:04:b2:a2:63:cc:08:fc:
                    68:96:db:3c:7f:bf:92:50:70:b4:1d:a0:1f:73:e0:
                    b8:1d:d7:c7:3b:ac:1f:7f:79:52:f5:c3:49:b8:1f:
                    9d:2d:92:b5:93:da:04:e0:02:e0:35:de:79:34:a6:
                    c7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:99:EE:8E:B0:98:55:60:D4:A9:A4:C3:8C:65:27:5A:D3:BF:DD:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4001f6d4-7963-3c71-b147-4ccfdee0bc21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:3880::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:74:09:7c:7c:bf:24:f1:05:af:a1:ff:ef:3a:48:78:a4:0b:
         ac:17:cd:ac:d4:80:7e:da:5c:95:99:02:fd:89:10:a1:b1:88:
         ac:9a:fe:b4:90:cc:ce:7a:de:e9:6e:2b:1f:9d:69:73:a2:54:
         64:37:4b:03:ec:7c:f1:10:4e:d1:a6:6b:69:d0:55:0b:e2:f4:
         61:dd:f6:bb:81:80:86:8e:d8:67:e1:c1:5b:55:06:71:73:8b:
         0f:f0:68:4d:12:7d:22:aa:f7:cf:35:5e:b4:c7:e8:e9:a8:de:
         19:90:7c:1d:7a:34:c2:c4:d7:66:ac:1f:2e:7f:53:24:b1:58:
         ff:b9:39:a8:b7:f9:c8:6f:6a:d2:a7:5e:21:49:6f:4c:35:d8:
         b5:92:aa:e4:d1:18:a2:de:0c:12:0f:6f:12:3d:8d:59:59:3f:
         4f:19:a2:2c:09:42:0f:af:2a:a9:49:fd:4e:70:9c:8d:65:6a:
         e0:af:c4:5a:5d:cc:9a:63:c4:e7:93:69:73:de:73:e4:d2:0a:
         a2:dc:a9:db:e0:23:0d:09:33:bf:99:1f:8a:0f:e3:98:45:4a:
         56:61:ee:54:82:78:0d:cc:68:05:14:0f:8c:55:ff:ec:a0:e7:
         59:f5:29:c8:69:2b:77:0e:b0:10:d7:2a:34:31:f0:0a:89:b6:
         59:03:29:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:51:31 2026 by rpki-client