Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f1a117d-56d6-30b4-a844-0fd5e18b401d.roa
File:                     4f1a117d-56d6-30b4-a844-0fd5e18b401d.roa (raw, json)
Hash identifier:          NKB4e6CNHEUwJyOwzujTWcqXWiVcWU1azZ6kAGDZkyI=
Subject key identifier:   B1:57:11:68:26:B5:2E:59:13:1A:D5:BE:70:9E:BE:77:41:6C:BC:A4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4987135525639DE5F0398A80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f1a117d-56d6-30b4-a844-0fd5e18b401d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:1d80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:13:55:25:63:9d:e5:f0:39:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=80590139-e154-4311-899e-c03cb28cdb62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1c:cd:cb:e2:ef:41:e7:b9:f6:b3:f8:76:44:
                    47:38:6d:7f:fe:91:bf:d8:29:12:d0:06:80:47:36:
                    9a:bf:48:f1:08:81:20:a9:ca:d0:c3:8b:68:62:ea:
                    dd:4b:99:c1:d3:35:2d:fd:85:db:45:7d:24:49:d7:
                    36:15:b5:65:d9:57:18:c7:0d:e5:a1:f2:26:07:2e:
                    0e:40:e8:a1:d3:1a:43:dd:0d:c8:f1:d1:2f:23:3b:
                    e8:66:4e:33:e3:7e:40:6e:8c:2a:18:fc:ba:57:40:
                    77:9a:ed:8b:02:e8:da:0a:6c:fb:bc:2f:70:15:2d:
                    d1:85:67:55:3a:7c:e8:f8:e9:08:b1:5d:a4:87:15:
                    e8:8e:3b:88:8d:4e:1a:71:6b:09:7e:5b:81:1b:d4:
                    a3:23:98:70:24:98:04:e1:5f:54:af:27:e6:1a:9f:
                    90:6b:42:6c:10:96:4e:4a:84:b0:0b:6d:35:6c:78:
                    e5:0f:94:44:48:7e:de:94:e8:74:4f:fa:0c:4e:d6:
                    31:d7:94:6d:5c:21:d0:27:7f:f2:e7:9e:fd:96:44:
                    66:63:1d:a9:60:af:64:6b:c7:21:32:b6:43:7c:a9:
                    98:d6:60:8f:a6:18:fc:12:30:9e:b5:70:df:f4:56:
                    df:7a:93:33:57:11:c3:e9:f5:7c:9f:3b:b9:ee:f1:
                    7c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:57:11:68:26:B5:2E:59:13:1A:D5:BE:70:9E:BE:77:41:6C:BC:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f1a117d-56d6-30b4-a844-0fd5e18b401d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:1d80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:a8:2a:a0:63:8b:1f:a4:07:0f:34:2b:28:53:67:8a:3a:65:
         cd:b3:15:f2:3c:53:5d:92:21:d0:05:fd:24:fb:85:18:07:82:
         76:43:92:27:06:bb:cf:7c:a7:ec:4b:63:56:9f:89:cd:3e:28:
         9e:0a:d2:72:80:16:54:32:e8:cc:0d:52:b9:94:60:8a:fa:59:
         9a:9c:7f:96:66:47:e2:90:14:26:f7:e2:6e:d5:e3:2a:fa:32:
         ba:50:e1:fa:1a:61:d8:98:ec:fc:a9:56:96:1e:67:84:e2:66:
         be:62:d0:d7:6f:59:e7:99:81:d7:15:93:b3:23:cf:c4:60:74:
         c2:94:b5:35:80:08:2d:99:46:3e:64:97:2a:3b:d4:ae:fb:1e:
         d8:ee:b5:21:ef:b1:be:dd:8e:a0:b3:0f:72:eb:4f:51:09:96:
         2c:2e:fa:02:e6:ff:aa:cb:0f:aa:e7:bb:87:af:a3:bb:15:0c:
         f7:30:be:97:b8:81:a1:f2:e6:bb:b4:44:b8:8d:b5:30:14:a1:
         9b:e8:dd:99:1e:f5:ce:d3:aa:d3:9a:b1:6e:7a:8a:f8:f7:24:
         be:0a:d3:35:dd:a8:62:8e:30:f6:76:9d:9e:18:6f:87:8c:49:
         35:b3:e8:6b:8c:22:04:7c:2c:74:42:55:8e:07:2b:7f:8d:f6:
         04:b4:33:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:53:07 2026 by rpki-client