Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/691963c2-6887-39ce-91ac-70418b881151.roa
File:                     691963c2-6887-39ce-91ac-70418b881151.roa (raw, json)
Hash identifier:          xsRxSiTgh0CtTWFr+uEzq5cU0s0hWiOkx/VVFgB04qg=
Subject key identifier:   88:82:9F:C5:64:91:70:39:4C:26:47:92:B9:3D:1F:05:F2:98:66:C0
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F3E4808AC718267F3054C57A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/691963c2-6887-39ce-91ac-70418b881151.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     19905
IP address blocks:        2604:2d81:2680::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:48:08:ac:71:82:67:f3:05:4c:57:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=2bf3c0cc-0506-41db-8955-130473e44ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:51:a3:f3:2d:5d:84:73:de:91:f7:84:c2:c8:
                    49:ec:ed:eb:88:26:5a:46:96:4c:35:f7:b7:b0:cb:
                    1b:e9:16:7f:e8:c6:3c:88:9f:98:f7:00:33:fb:2f:
                    0d:5e:57:60:6d:19:7a:07:2a:e6:12:c1:41:6b:1c:
                    5c:28:fd:84:32:81:68:f9:7a:99:23:e8:71:c8:b0:
                    bb:33:ea:42:9f:bc:71:72:9b:fb:a8:16:4a:8f:36:
                    45:b4:57:01:c9:61:79:df:58:d3:60:6d:7d:00:a4:
                    2b:ca:48:92:65:63:d0:fe:9e:bf:da:3b:fb:d1:46:
                    65:96:53:1a:f6:d9:25:10:58:56:6b:23:6b:8c:e9:
                    88:53:71:e1:db:e7:3d:fc:af:26:bd:63:e1:a8:8b:
                    b9:0f:4b:93:8c:92:6b:3a:b1:49:01:9f:1f:f9:d8:
                    98:e4:6c:af:ce:02:ec:64:5d:80:b2:a4:65:85:2d:
                    13:5f:5c:f2:1a:4b:c8:31:89:cc:3c:8e:27:35:c8:
                    db:af:80:5d:50:e9:4d:d3:1d:f2:95:56:18:c0:a6:
                    36:b4:36:59:8e:8b:56:e1:50:ec:84:39:49:2e:a9:
                    85:91:ae:ce:3e:7a:d8:62:60:b6:ec:89:b6:67:ce:
                    ef:aa:58:98:74:4e:43:0d:27:4e:ae:09:e6:bd:38:
                    99:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:82:9F:C5:64:91:70:39:4C:26:47:92:B9:3D:1F:05:F2:98:66:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/691963c2-6887-39ce-91ac-70418b881151.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:2680::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:e4:00:d0:2e:8b:ea:1e:a0:3d:75:5e:2d:84:06:4e:05:b0:
         6a:e3:8f:80:35:26:86:14:a0:cc:37:3d:ea:9e:77:82:17:60:
         15:35:1e:74:68:60:70:3d:b4:6d:b5:7d:bf:16:88:31:46:b3:
         27:4c:99:2f:68:f4:1d:32:24:c4:48:d5:3b:ba:ab:9f:ef:44:
         e1:76:10:9c:4d:90:66:e4:36:4c:e5:91:35:f5:cf:53:dc:3b:
         f0:85:27:0e:54:3b:75:42:17:01:39:a9:d1:87:95:45:e8:a9:
         d6:e7:01:80:8a:9f:c8:bd:fe:9b:3f:a3:02:66:9b:80:e3:ea:
         70:83:11:fb:fd:1d:eb:e6:f7:b4:ea:1b:fd:8b:04:7c:41:f6:
         00:2c:9c:8d:4c:17:35:d0:a9:f8:d8:35:2d:36:a4:d6:d0:66:
         9c:79:bf:eb:1f:68:d1:2c:d4:b2:f0:47:72:23:17:f1:9c:c6:
         c8:ae:20:3e:31:91:b1:85:2f:7a:d4:3a:d2:be:3c:09:4b:cd:
         88:92:be:12:e9:74:a1:b9:c6:d5:65:c0:b4:5a:89:53:5b:61:
         0a:ae:ab:86:99:0e:f8:64:87:05:10:ff:2b:2f:32:ee:d0:2a:
         e4:ad:7c:e7:c5:33:6c:48:98:6b:e5:af:b1:5c:88:3d:34:10:
         c3:23:36:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:41:35 2026 by rpki-client