Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/675e80aa-7892-34b7-902e-0b7012e45198.roa
File:                     675e80aa-7892-34b7-902e-0b7012e45198.roa (raw, json)
Hash identifier:          L4NOVwJzwVznoeJvGf5XlOOEPUwbQC4YbaoHFeSRTxk=
Subject key identifier:   AF:A9:26:6D:FE:AC:5E:80:27:20:AC:E9:62:EB:EF:01:ED:90:92:6E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CA5F7478E4FFD39E42E35F100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/675e80aa-7892-34b7-902e-0b7012e45198.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        2604:2d81:2500::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:47:8e:4f:fd:39:e4:2e:35:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=604522b4-58be-4ae2-8655-25161794746a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f9:d1:94:27:82:54:6a:5e:63:11:05:91:3d:
                    1e:48:9d:6c:e7:84:a8:eb:77:99:3c:64:c7:94:a1:
                    57:24:73:ca:1e:2a:80:b7:e7:4d:be:9e:01:74:4a:
                    96:a8:14:8d:2c:26:fb:8f:94:a6:ad:4e:f1:4b:79:
                    d7:5b:8e:0b:69:fc:54:c2:6b:0e:09:8d:6b:66:78:
                    44:d6:5b:f7:dd:a1:e0:6d:c5:be:b9:c7:d9:bc:dd:
                    d1:de:04:4c:95:30:78:71:fd:85:0e:6e:c8:d9:e6:
                    d5:98:25:1f:f9:31:fb:07:65:7d:0a:eb:61:54:5d:
                    87:27:9e:80:87:8b:6d:ba:50:1f:3b:42:a3:40:1a:
                    b0:d4:58:af:e7:49:d7:84:08:3d:a1:29:91:79:54:
                    19:49:56:14:ed:1b:5c:87:90:cd:e0:5c:7a:ae:4c:
                    ab:76:d0:b7:8e:fd:3b:b7:b5:72:90:a7:f1:d8:6f:
                    96:37:4e:87:05:7c:ef:c8:46:f3:47:f2:8f:dc:d4:
                    8f:c0:6b:90:c3:20:dc:33:e4:ba:7a:a9:8a:91:a7:
                    04:5c:0e:91:5f:5e:35:2c:98:31:cf:74:f5:88:76:
                    b5:84:cb:0b:de:57:9c:71:c4:ab:e3:49:7a:eb:2e:
                    87:66:43:44:8c:74:1a:37:ae:00:85:5e:e7:bb:73:
                    86:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A9:26:6D:FE:AC:5E:80:27:20:AC:E9:62:EB:EF:01:ED:90:92:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/675e80aa-7892-34b7-902e-0b7012e45198.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:2500::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:92:fa:d7:88:83:cf:1e:8c:d5:b0:b8:1f:4f:cb:c9:58:48:
         00:50:bd:8d:21:46:2b:ad:7c:87:7a:ba:a3:4b:4a:ab:f4:2c:
         cf:03:96:b7:1a:9d:c5:4c:07:a7:d0:b7:f6:27:4c:13:78:64:
         34:5f:60:e9:59:a2:c8:b3:46:de:3d:07:5a:ce:1c:10:e1:d4:
         d9:0a:f1:f2:36:56:36:96:2c:73:94:12:9a:87:83:1d:33:bb:
         9e:33:50:1c:ab:a5:75:96:ff:69:1b:bd:85:56:36:3a:ef:1a:
         cd:d4:12:e5:f5:24:e6:e4:ff:08:54:ab:86:31:7c:48:97:fb:
         38:7e:c4:e9:05:71:44:58:01:9c:53:d8:bc:f0:f0:60:99:7a:
         7f:39:a9:ea:57:62:99:8d:82:a6:84:88:2d:68:8d:77:84:c1:
         90:7f:ad:ff:c6:26:04:e9:5c:13:e8:f9:8a:a7:8c:21:b5:2a:
         02:15:d6:34:50:00:09:4b:0e:f0:8d:d5:1a:ac:f0:12:18:b3:
         dc:70:2c:e5:23:78:c9:bc:76:2d:5c:90:4b:75:35:a1:eb:71:
         e0:9b:84:76:3f:09:50:c2:b0:42:f0:30:b5:7e:4b:c5:db:d4:
         ed:cb:89:fc:5b:a3:33:73:99:67:73:35:7d:0f:e0:56:c5:97:
         99:da:a7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:52:25 2026 by rpki-client