Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/45d9621f-4e1d-31af-8893-68712fec79cd.roa
File:                     45d9621f-4e1d-31af-8893-68712fec79cd.roa (raw, json)
Hash identifier:          NkPD4Ucpytm7E4ktbXgeynf8Dy0PE4Zfp4gF/PTJ9ng=
Subject key identifier:   F6:5B:C2:53:2F:D1:0D:4A:39:7A:E7:E5:36:32:73:B0:0C:57:E7:E2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D75D54DA03AC2E8A88686F300
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/45d9621f-4e1d-31af-8893-68712fec79cd.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     30036
IP address blocks:        2604:2d80:c000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:4d:a0:3a:c2:e8:a8:86:86:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=4cafb5b7-9410-48cd-8ce1-bff37fbb662a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:23:31:1e:3b:a1:fd:f2:30:55:53:a4:6e:da:
                    96:2b:88:eb:2d:c6:94:47:bc:69:55:e6:e0:6f:34:
                    6b:b0:17:b3:dc:99:d3:36:30:9a:97:b7:d7:18:a8:
                    8e:97:6e:0d:3d:14:a7:99:d7:f7:10:c1:6f:8a:d2:
                    a2:3b:70:01:2e:ef:55:aa:54:58:de:1e:59:5b:d9:
                    25:a8:c0:78:be:06:e7:63:d7:d5:2a:d9:08:de:d6:
                    88:fa:62:c9:67:d0:18:5c:d6:14:aa:14:8b:c2:34:
                    09:50:c6:f2:15:52:f8:23:12:18:ab:19:ad:ce:79:
                    da:dc:54:52:cc:67:3d:2b:88:8e:46:21:e5:a7:b3:
                    72:37:66:05:72:20:fa:2e:ca:29:eb:61:5d:4e:d8:
                    2e:29:c4:02:bd:47:b8:b3:d0:40:af:a2:5c:0d:66:
                    d8:56:f9:12:9a:3b:23:c2:81:f3:f0:c8:db:a1:89:
                    51:e6:09:e9:0a:36:60:9d:6d:a0:11:1f:cb:fa:68:
                    b8:21:ea:3e:90:49:c0:36:bd:75:01:1e:d0:87:2e:
                    73:6b:5d:41:2e:b0:4a:d6:11:ec:97:fd:e4:48:c4:
                    07:fd:fd:1e:02:2a:f1:57:c3:d8:4e:b8:dc:aa:39:
                    7c:1f:c0:97:0c:0d:49:39:f3:26:59:a7:7e:53:9b:
                    a3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5B:C2:53:2F:D1:0D:4A:39:7A:E7:E5:36:32:73:B0:0C:57:E7:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/45d9621f-4e1d-31af-8893-68712fec79cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:c000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:4f:3f:d5:87:67:f2:83:aa:c9:44:93:a4:80:c3:dd:fa:b7:
         a5:7f:4e:de:ad:1e:3b:a0:39:1b:1a:76:3b:2c:5c:48:e1:c9:
         ce:09:2d:f0:4a:2d:48:6e:6c:cc:bf:17:33:fb:6a:9a:9c:5b:
         ae:b5:74:c6:3e:cd:8b:0a:da:53:17:b8:58:3b:1c:46:81:00:
         b7:d3:14:e8:7a:b8:14:99:04:6f:1d:41:0b:89:66:c6:46:de:
         6f:32:29:70:65:b4:ec:59:9a:95:93:6b:0d:59:43:57:1f:20:
         8e:21:0d:e4:e8:5a:c0:ff:eb:cf:f4:1f:47:a6:f8:93:ab:4d:
         3d:0c:78:c6:0e:2e:8a:4e:da:e6:e9:0c:b6:70:b0:57:b6:84:
         02:38:21:b9:e6:ea:13:ff:e4:29:99:3b:46:c0:90:5e:2b:8e:
         f9:19:85:ee:25:8c:48:ba:f4:e4:4d:5f:ae:0b:5b:a4:ce:ff:
         b5:de:07:f7:d1:d7:7b:45:df:9a:73:71:89:b6:eb:47:69:d4:
         43:d5:ca:89:f6:da:0b:e6:3d:17:9a:0b:3a:f6:d1:3f:ad:2f:
         50:53:47:2d:94:c5:ab:bb:fa:d6:38:0e:53:12:88:a0:3c:be:
         f9:ab:d9:53:41:1a:3f:47:7a:02:bd:c6:1c:64:f6:04:39:2c:
         27:7b:d1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:35:15 2026 by rpki-client