Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ef4a130-5004-3af8-ae4b-60307a05203c.roa
File:                     5ef4a130-5004-3af8-ae4b-60307a05203c.roa (raw, json)
Hash identifier:          SSQ/uCYJ9wKc9jyh7QQmKpjEOcCiJr9+3QSbQOlFd3o=
Subject key identifier:   24:7A:68:F7:A6:0D:50:13:1E:86:D0:06:78:80:FC:89:5E:9E:98:A2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79D213868587D8119F1E900
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ef4a130-5004-3af8-ae4b-60307a05203c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:c80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:21:38:68:58:7d:81:19:f1:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=001f881f-71d4-45b1-8f71-845efd980acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:05:fa:2c:d9:ea:b2:7d:51:58:15:62:66:ec:
                    99:b4:2c:e3:37:05:27:e5:2d:2a:8c:4d:0f:9d:b6:
                    82:dd:87:f1:12:b8:65:d7:4e:93:2f:3a:90:07:42:
                    5f:1f:42:23:4e:66:30:40:b8:d0:d5:5e:25:3d:3c:
                    23:73:51:ce:61:91:eb:96:e0:e5:7d:60:cb:e1:cd:
                    1a:fe:e9:75:5e:27:ba:4e:b7:e0:6f:fc:ec:40:1a:
                    60:d5:5b:b4:d3:d5:8c:92:c1:d6:fa:25:31:17:26:
                    1e:57:e6:d4:10:0a:f9:f9:af:fb:15:85:e7:a6:c3:
                    35:9b:d0:6e:32:d6:02:38:91:1b:bf:1a:9e:bc:95:
                    16:c1:91:bf:e9:6e:c1:cd:c8:f9:e1:11:2e:4c:b5:
                    08:6e:dc:4c:fd:8d:69:53:05:57:a7:91:6a:09:a1:
                    02:1c:18:b7:08:2c:b9:4d:65:9c:a7:9a:1b:6a:df:
                    e0:f7:2d:7c:0b:10:73:7e:73:98:ff:2d:be:12:61:
                    1c:b0:58:3e:bf:8f:5d:14:73:2d:b2:06:61:a9:cd:
                    fc:64:a8:8c:75:05:79:b1:e3:7d:f9:34:3e:f8:74:
                    78:da:a7:e9:11:61:1a:7a:d1:95:37:88:ac:f6:32:
                    13:87:c8:59:2c:bc:23:b4:b8:43:d9:17:4e:8e:6f:
                    5f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:7A:68:F7:A6:0D:50:13:1E:86:D0:06:78:80:FC:89:5E:9E:98:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ef4a130-5004-3af8-ae4b-60307a05203c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:c80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ad:32:d7:76:25:dd:28:8b:0f:ea:9e:0c:ac:19:78:64:7e:
         db:ae:5d:db:fb:1c:0b:ab:45:0c:47:7c:9a:1f:c0:02:23:c7:
         53:d1:d3:b7:01:f5:f4:e8:f3:66:25:fc:b4:57:b0:a8:da:21:
         92:c0:b4:9b:e3:1d:b4:f7:ed:33:65:77:2d:14:25:ee:19:d5:
         e4:fc:02:41:58:0a:2d:eb:39:a6:15:10:9e:65:b6:d5:34:98:
         00:50:c6:1c:e0:40:5a:55:ba:66:ab:aa:d6:be:ec:4e:49:99:
         7f:7b:55:a3:2e:55:3e:c1:c1:9c:a4:8c:97:63:ca:d6:06:ff:
         df:ff:43:dd:f4:e6:62:02:cc:ac:f1:1e:8e:37:56:a7:4f:e2:
         9b:85:59:a5:09:92:a1:31:5c:b8:bd:57:33:ed:b5:8c:13:3b:
         aa:44:51:59:79:09:ce:65:9a:d3:dc:d2:c7:7f:37:43:99:16:
         63:58:00:73:d5:8c:2b:fd:fa:f5:79:77:65:34:8c:f6:d2:96:
         be:b4:d0:7d:b7:2d:45:6c:a6:68:5e:db:cc:03:1e:c4:a8:f3:
         bc:a2:49:fd:ae:6b:1a:14:0e:52:9f:8f:3c:6d:88:c8:6e:1a:
         3c:8c:62:c7:a5:27:42:9d:de:8a:b9:1f:35:38:65:2d:f7:5a:
         46:ac:26:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:41:30 2026 by rpki-client