Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/49d4f194-e8d9-36cb-bbc0-22b6ab6fbf0b.roa
File:                     49d4f194-e8d9-36cb-bbc0-22b6ab6fbf0b.roa (raw, json)
Hash identifier:          CzZJ7OlWhSsLhCmigOA4940LKFGO+b00F8nP2CmvSUU=
Subject key identifier:   AA:68:26:06:EC:86:31:67:2D:7D:65:EE:04:C9:33:AE:49:F2:95:F2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E0435FC3CA54368364077CD80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/49d4f194-e8d9-36cb-bbc0-22b6ab6fbf0b.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     30036
IP address blocks:        2604:2d80:7d80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:fc:3c:a5:43:68:36:40:77:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=e476794a-84a9-4ba8-bd48-3f9b67a251e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:95:18:3d:69:d0:3e:89:a8:af:4e:f1:39:a5:
                    40:e2:6d:e7:76:1e:ff:c8:ed:26:0f:67:22:b7:3e:
                    a7:9c:0e:cd:34:eb:35:1d:7d:f6:a0:b4:02:94:72:
                    0d:0b:b7:74:ec:a6:d4:06:fa:4a:3d:a7:86:62:0e:
                    81:77:80:c0:44:d0:2f:92:41:b4:c4:81:3d:8e:31:
                    2e:2e:90:04:35:c5:3c:c6:ee:b6:3a:3a:6a:03:9f:
                    bc:81:b3:50:09:12:77:08:6a:d7:e9:d3:08:06:65:
                    32:8f:1a:c3:b7:1b:6f:c7:86:29:a8:36:8d:31:62:
                    32:d9:b2:79:4e:e3:54:f2:41:16:ff:f7:8e:3e:e6:
                    7f:1a:13:10:71:49:e6:d1:f4:e9:ba:57:72:fe:3a:
                    3d:31:b8:e5:b2:2e:41:a6:54:46:b5:81:55:0b:bb:
                    96:27:dc:f0:db:e8:e8:72:1a:32:8c:d7:1c:64:e6:
                    9a:7b:8d:38:e2:40:4c:11:bf:07:02:75:60:f4:d1:
                    a5:7a:fd:7f:48:a4:49:d7:1e:9a:10:26:62:22:93:
                    87:7f:86:fd:61:70:f9:de:11:b1:39:c5:8d:59:e4:
                    d6:e9:42:08:59:2a:c7:76:94:6a:b5:9c:85:e0:78:
                    9f:d7:28:0c:6e:40:68:24:a4:d2:f8:ff:59:b4:fc:
                    76:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:68:26:06:EC:86:31:67:2D:7D:65:EE:04:C9:33:AE:49:F2:95:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/49d4f194-e8d9-36cb-bbc0-22b6ab6fbf0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7d80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:53:e5:1f:a2:52:a6:3c:56:27:22:c6:7d:55:27:c9:f1:c7:
         04:cf:8b:67:aa:61:a0:ae:84:8a:73:1a:fa:41:7c:8b:dd:ed:
         89:6a:8d:5f:99:67:cb:d3:34:22:d6:5b:99:b7:55:a8:5f:13:
         34:c7:34:f9:ec:96:23:55:38:5d:d2:b1:6c:a7:f2:70:12:f4:
         2f:17:57:08:f0:c9:c7:47:9d:1a:b8:87:11:c0:62:89:c7:04:
         aa:6a:54:68:e7:e8:0e:f6:48:70:57:45:95:43:a0:60:8b:78:
         9d:c2:79:0d:6d:99:15:23:fb:30:ee:78:2c:9f:2f:6f:fe:37:
         53:03:f1:59:4a:41:c7:a8:92:aa:85:6a:c3:41:0c:4e:51:41:
         cd:e8:58:3f:e9:97:81:21:45:2d:c3:18:68:c4:05:04:9d:a5:
         83:45:ae:31:c9:e1:c0:22:11:b6:5a:6f:96:02:5b:32:9b:ca:
         d1:cf:4c:d4:03:2e:0a:2f:a1:21:53:75:ce:3f:92:d5:1e:21:
         0a:e9:d2:69:ea:5b:2c:66:4b:9b:6f:f8:e2:bf:bd:09:12:dd:
         24:3b:f9:a8:a0:b5:7f:69:94:97:9d:6e:fc:0f:7c:9e:24:97:
         ac:59:c4:3b:1d:93:c2:19:ad:5b:b5:f3:e8:e0:c1:74:e3:1e:
         b3:56:61:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:34:11 2026 by rpki-client