Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/628a1e81-1f9a-3aa4-a9ab-b91409298406.roa
File:                     628a1e81-1f9a-3aa4-a9ab-b91409298406.roa (raw, json)
Hash identifier:          T1WjhCFiILpYtXz1lT+UMutb8uSIqbwpGvgXM0pfApA=
Subject key identifier:   37:11:7F:92:A3:19:4B:FE:C1:C2:72:5C:9B:9C:B8:AD:C2:0D:9B:E3
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E0435D78407034BB8017B30C7
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/628a1e81-1f9a-3aa4-a9ab-b91409298406.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     19905
IP address blocks:        2604:2d80:2300::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:d7:84:07:03:4b:b8:01:7b:30:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=dc2d10c4-7f8b-4c13-966f-ad2865915eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:07:48:49:e6:ff:74:e1:65:9c:71:0b:87:1a:
                    58:b4:14:7a:91:4a:7e:a8:5e:b0:b1:ef:5b:f7:92:
                    cf:d1:ed:a1:5a:fe:7b:f2:1b:f4:05:2b:f5:13:fd:
                    9e:59:11:8c:cb:c3:e9:90:35:b5:e6:c7:11:3e:7e:
                    5f:9a:cf:fa:a1:b7:99:95:0a:5c:35:8e:b4:18:f4:
                    17:ff:1a:1e:55:c8:44:72:c2:3f:de:43:4d:93:81:
                    83:b6:cd:cf:b7:1d:af:e3:23:44:62:3c:c4:5c:75:
                    79:4c:10:28:84:47:a0:ce:89:9c:73:d0:24:3d:2c:
                    cd:55:fb:e7:d4:03:81:52:ec:ba:28:57:cb:16:97:
                    dd:2e:af:8d:90:c8:2e:09:e3:0e:9f:98:e8:3f:d1:
                    f5:bb:a2:54:79:18:7c:84:1b:09:23:e6:09:38:6c:
                    5b:64:ad:0a:71:74:44:40:6b:ea:d4:b6:b6:a2:bf:
                    d4:8b:f7:10:2a:04:fc:cb:e9:27:ff:c1:81:83:66:
                    ea:66:cb:c6:c3:0e:df:c1:0e:fa:0e:3e:e3:66:59:
                    6e:d6:45:a1:83:49:c3:d9:d6:4c:95:96:c9:51:67:
                    c3:6b:65:be:71:32:47:18:f9:a9:9f:46:b0:d8:59:
                    84:2a:9b:9a:f9:e9:48:61:c6:e0:9f:6f:0f:38:78:
                    c5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:11:7F:92:A3:19:4B:FE:C1:C2:72:5C:9B:9C:B8:AD:C2:0D:9B:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/628a1e81-1f9a-3aa4-a9ab-b91409298406.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:2300::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:d1:ed:ae:93:d7:e5:4d:62:78:8d:db:c1:8b:af:ff:7e:7c:
         1b:de:a6:f2:f1:7b:e4:e3:88:7d:5c:de:49:ed:2b:c7:4a:e3:
         d9:29:fb:fd:a8:c8:c0:07:29:e0:72:75:14:53:0f:ac:df:71:
         49:d4:63:0f:44:28:a0:59:03:d1:9b:52:76:99:e3:40:a3:87:
         3c:fb:ce:b9:cb:e1:16:fe:21:08:a6:3f:c6:8a:f6:97:04:80:
         87:40:f5:c0:d2:43:bf:cb:05:a8:f8:e5:84:bb:40:3b:5e:7a:
         2a:49:85:fb:d3:6c:33:26:3f:de:4c:1c:9c:7f:e2:0d:8e:74:
         8b:c4:7f:2c:d1:f9:d7:87:92:89:c9:8e:3a:5a:4f:a9:4b:ee:
         cf:c0:0a:5d:29:48:02:f6:04:51:e7:d2:db:97:08:7c:e0:0c:
         60:8b:17:35:68:a0:4d:bf:e7:ca:25:c5:d5:0c:8e:29:f8:2c:
         c3:20:06:7f:ae:77:a2:a6:6e:b0:4c:8d:49:50:49:7d:fa:d9:
         2d:4b:29:0c:ad:6f:96:ff:6e:2d:f6:d6:a3:a5:ab:62:cf:cf:
         e5:a4:96:6e:7e:53:c4:2c:1d:a5:ea:f1:a1:04:11:23:7f:96:
         58:69:34:7b:84:8b:22:29:18:17:37:63:1f:1a:14:39:48:db:
         7b:65:72:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:55:30 2026 by rpki-client