Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/68b049eb-2f90-32da-9fd9-613b14eb1dbf.roa
File:                     68b049eb-2f90-32da-9fd9-613b14eb1dbf.roa (raw, json)
Hash identifier:          UCM5Z16210FAijcWCabcathy1UCJyqjj0xKVEGaj+MU=
Subject key identifier:   61:77:5D:6F:7F:91:6E:2F:BF:04:E1:6E:FB:9D:2E:5D:D1:76:87:9E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E04362818132F44B8A1FB4780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/68b049eb-2f90-32da-9fd9-613b14eb1dbf.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     19905
IP address blocks:        2604:2d80:d00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:28:18:13:2f:44:b8:a1:fb:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=9c42d193-6287-40ab-a35e-c9c7411e345f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:56:cc:8b:c8:e2:33:1f:17:85:c0:11:4d:35:
                    34:50:92:87:1c:98:52:02:3d:ce:3e:b3:d5:37:fe:
                    44:e2:bf:36:bb:3e:b2:00:86:af:de:87:7c:90:d1:
                    bb:94:8e:1e:73:63:9a:28:7a:29:c5:da:44:ed:6e:
                    d8:d0:ec:04:a5:d5:b7:78:db:d3:6c:ff:aa:28:b9:
                    ef:0e:f9:e8:e6:f6:6c:56:9c:29:e3:cd:3c:6b:6c:
                    3e:4a:c6:e6:fc:3c:ff:d3:de:92:2d:80:36:35:c1:
                    76:82:90:b2:1c:1a:cf:7c:03:f3:a1:98:bf:c6:1a:
                    b6:7a:f6:98:7e:6d:d5:a4:fd:10:ea:4e:7a:cf:3d:
                    cb:80:99:6f:bf:9f:aa:d1:a2:7d:1c:dc:49:9e:fb:
                    64:0b:3e:e6:82:b1:15:69:4b:f1:cf:f1:5f:d9:81:
                    6b:45:dd:ce:aa:fc:8c:7d:68:8a:a5:83:d5:80:00:
                    32:e1:da:94:ab:20:52:07:1c:92:b5:d5:3c:2a:40:
                    7c:0a:a5:3c:2d:10:6b:63:24:75:e2:b4:ae:7d:d3:
                    c2:63:7c:0f:e8:12:a2:f1:d2:da:9f:cb:47:d3:11:
                    43:d8:a3:26:d6:c2:df:5e:7f:07:1d:24:b3:97:9e:
                    e4:de:d7:f8:77:34:26:8a:c6:1c:9c:3b:97:27:c0:
                    a6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:77:5D:6F:7F:91:6E:2F:BF:04:E1:6E:FB:9D:2E:5D:D1:76:87:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/68b049eb-2f90-32da-9fd9-613b14eb1dbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:d00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:42:b3:3a:7f:9c:cc:61:1f:ed:80:5a:d3:1e:df:aa:de:06:
         06:28:57:b3:e3:86:6b:a8:eb:81:ab:64:93:a7:dd:d3:10:e5:
         82:73:46:ac:99:c0:c5:46:d4:9b:db:f2:d0:a6:e7:86:9f:cf:
         1f:f4:c7:8f:a0:5c:49:f0:03:ab:3a:f8:e5:87:ec:43:32:da:
         fb:52:db:17:c3:d7:14:16:92:f6:bf:3f:77:35:f8:b9:03:42:
         43:f7:0c:0c:5c:25:36:ce:03:0d:9a:71:d7:88:d8:0a:ef:47:
         c0:9e:7c:df:09:4e:9b:4d:f9:17:b3:2d:d1:49:40:ca:23:e5:
         d9:9d:a1:ff:32:9c:fe:d1:ab:06:97:a9:29:f0:27:5e:81:b4:
         b0:d1:01:8d:e8:35:e4:c7:a3:89:40:ed:fe:c1:72:33:90:2a:
         bc:e0:fe:98:04:e6:95:2f:49:ea:03:a4:f6:5b:f7:d3:e2:cc:
         c9:aa:f1:e9:82:2c:08:31:0c:f4:a8:f9:43:9d:ae:08:6c:07:
         0f:ec:38:57:1f:92:ba:ca:d7:2b:7d:7a:42:94:64:4a:b1:23:
         26:49:f7:0a:f8:45:1d:46:8e:9a:2c:3f:2a:e2:9f:7e:7a:d0:
         9d:4d:d5:0e:7b:54:f2:b7:a6:d7:3c:00:82:b9:5b:bf:9b:81:
         dc:b8:1b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:43:54 2026 by rpki-client