Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6883127f-0872-3867-8a21-aa72dab56851.roa
File:                     6883127f-0872-3867-8a21-aa72dab56851.roa (raw, json)
Hash identifier:          VZtowOGdFJccsdZDqzEoyHwDCjTalPxGWK53A41Hl94=
Subject key identifier:   13:BE:0B:41:29:DD:2C:14:1D:3C:B9:EB:95:6A:AB:54:76:66:7F:F3
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4C3D6442AE0263502B595340
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6883127f-0872-3867-8a21-aa72dab56851.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     19905
IP address blocks:        2604:2d81:9380::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:64:42:ae:02:63:50:2b:59:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=40bb2940-2d2c-4b6b-9d72-4f477edce9c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ba:70:b7:20:42:22:86:9a:ac:79:77:99:dc:
                    48:5e:ed:c0:11:2f:24:40:74:15:98:58:c4:6a:7f:
                    44:a3:fa:b0:46:a6:da:5a:38:ab:79:fa:33:cd:7d:
                    c9:a1:27:6e:ff:2a:29:58:60:dd:e5:6f:16:bf:e0:
                    5c:a5:c1:c1:69:67:7d:76:f2:ad:81:e2:d0:9f:7c:
                    a7:69:a8:e3:ae:d1:93:0f:bb:8e:71:a9:70:55:3c:
                    6e:1b:fb:af:da:6b:ef:41:8f:03:fb:61:85:97:46:
                    b5:e9:e7:85:6d:b7:04:b1:c9:fb:42:cf:a2:c9:d1:
                    6d:5e:9b:dd:5b:e0:10:e5:b6:e4:d3:db:f0:aa:de:
                    f6:32:21:72:2d:7a:8a:ef:c7:ab:90:5d:a6:a8:b3:
                    be:05:a3:7a:65:da:30:74:cb:94:e9:20:4a:9c:72:
                    da:bb:80:ba:d7:95:88:fb:1a:1e:7d:5f:b9:ad:28:
                    a6:9f:a1:3f:e7:ce:3b:28:2b:4e:ed:84:ab:b6:a9:
                    8d:55:fb:4f:98:36:ea:61:05:1e:bc:6e:3e:b5:12:
                    49:5d:b9:54:e4:e3:fc:c8:25:7f:af:d0:46:96:19:
                    76:90:6e:e1:20:5c:10:fc:c3:a9:43:71:21:74:f9:
                    31:c8:50:78:61:07:d6:8b:0f:eb:fe:79:e3:ba:d3:
                    c4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BE:0B:41:29:DD:2C:14:1D:3C:B9:EB:95:6A:AB:54:76:66:7F:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6883127f-0872-3867-8a21-aa72dab56851.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:9380::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:13:6c:ba:56:4f:27:08:bc:99:51:f1:6b:12:ac:27:33:7c:
         c3:94:62:e1:5d:a5:8b:61:e5:70:0c:a3:cc:27:bf:a6:7d:0b:
         64:5e:9e:43:10:3e:a9:e7:6a:0d:9c:91:6d:7b:84:9e:f8:4e:
         dc:ee:e2:91:94:d5:cd:03:02:eb:aa:dd:4a:83:91:70:ae:63:
         13:98:72:e8:2e:db:0d:ee:ac:65:85:69:28:c6:27:2a:25:d4:
         0e:e6:17:91:38:77:03:a6:d7:08:ba:aa:b2:64:a8:9f:cd:12:
         10:1f:b6:fb:1f:63:91:a1:60:b7:54:17:e5:0f:f9:96:33:90:
         91:05:0a:c3:0d:c5:6a:29:1f:f3:ae:26:f8:e0:f6:61:2b:87:
         4f:a2:3e:c3:b4:b1:05:cd:51:9d:2b:69:5e:35:95:0b:95:76:
         b8:41:71:45:15:f7:08:2e:fa:8f:5b:31:86:91:41:74:37:84:
         13:d1:6e:0c:da:7c:df:34:53:45:6c:b1:28:7a:64:1a:56:ff:
         ed:79:6c:97:a9:6f:f4:33:af:29:27:4e:9f:f6:19:59:0f:2c:
         a2:de:f0:0e:80:8f:13:1f:89:ec:9e:94:9c:65:b1:b0:49:ae:
         05:0b:77:c0:17:53:ae:3c:62:63:2f:73:e0:b7:93:da:e2:c8:
         4d:84:fb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:32:15 2026 by rpki-client