Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6963d6ca-8fd1-3fe7-b615-d9786487f0ee.roa
File:                     6963d6ca-8fd1-3fe7-b615-d9786487f0ee.roa (raw, json)
Hash identifier:          3GAmd0f5mOoB4bjxkrF1UmaTqZbjbeP0qbqSDorGHUk=
Subject key identifier:   B7:6B:E1:29:25:B0:0F:86:29:A8:34:82:92:19:0C:37:7E:7C:3A:3C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CC666F9CF424E1D582AFD4B00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6963d6ca-8fd1-3fe7-b615-d9786487f0ee.roa
Signing time:             Fri 06 Feb 2026 16:52:10 +0000
ROA not before:           Fri 06 Feb 2026 16:52:10 +0000
ROA not after:            Thu 07 May 2026 15:52:10 +0000
asID:                     30036
IP address blocks:        2604:2d80:e400::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:66:f9:cf:42:4e:1d:58:2a:fd:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  6 16:52:10 2026 GMT
            Not After : May  7 15:52:10 2026 GMT
        Subject: CN=9e588ad6-73f8-4821-b0a6-bfc1b995776a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4e:85:e4:10:0c:e2:62:2e:01:05:0b:c6:14:
                    44:10:c3:a6:ca:1e:8b:fa:6c:4d:43:08:73:18:40:
                    0a:05:da:87:dd:4f:e1:95:69:02:9d:94:ee:f3:01:
                    f8:70:54:2d:03:ad:b1:13:59:eb:35:80:49:16:5b:
                    01:2f:23:ef:e3:2a:b3:4e:0a:e9:cf:d3:10:28:c3:
                    df:42:cd:40:ea:7b:4f:a0:9d:67:05:39:65:24:d8:
                    ed:a6:45:e9:5f:b2:04:90:7b:35:2f:ec:66:dc:14:
                    da:39:95:80:ab:f2:32:6a:ca:18:9e:af:ba:85:aa:
                    d5:f3:60:d8:01:1d:21:6b:4a:0a:14:43:cd:0e:93:
                    44:d6:bb:df:18:76:ac:4f:56:2e:47:02:05:47:94:
                    da:32:a4:54:b3:e1:4d:30:93:5a:fd:83:83:89:30:
                    bd:15:95:23:c7:3d:17:07:c9:34:fa:53:1a:25:be:
                    44:87:a2:b6:d3:21:54:a1:bd:d1:8b:41:30:2a:d3:
                    27:9e:f3:11:25:2b:3a:ac:5f:e7:9e:4b:b4:f4:f6:
                    46:ac:a7:ca:aa:76:ef:2b:51:45:9c:9b:cc:f0:5d:
                    92:5d:5a:d4:20:22:54:20:d8:b4:19:37:c3:77:b2:
                    c2:77:4c:06:3c:69:40:91:df:07:82:9c:8a:a3:fe:
                    b3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:6B:E1:29:25:B0:0F:86:29:A8:34:82:92:19:0C:37:7E:7C:3A:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6963d6ca-8fd1-3fe7-b615-d9786487f0ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:e400::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:99:05:62:76:d9:d8:41:07:1f:43:7b:21:4e:29:70:a3:7e:
         39:c6:f8:63:01:47:c3:f6:76:05:c6:4e:68:8d:da:97:f4:9a:
         5b:f3:41:52:c1:5e:ff:e4:47:73:8f:8d:94:d8:0d:38:77:c9:
         1c:43:6a:0c:24:62:8e:f4:0a:4e:ca:73:10:62:1d:5e:d9:c6:
         93:fc:6d:4a:91:81:7d:6c:2d:b9:43:ad:68:4f:5c:e1:ca:b9:
         dc:24:6e:e1:3a:e9:e3:3d:d8:48:9f:e1:33:c9:1c:61:76:c0:
         db:8e:30:4a:43:5b:d3:9c:1a:dc:ea:e2:16:93:1d:90:37:1d:
         eb:8c:a3:42:12:aa:e6:18:8e:93:f9:27:aa:39:d2:4d:64:2f:
         f0:80:86:c9:53:35:5b:c3:ff:5c:c2:4b:be:19:28:5d:60:34:
         f3:e2:37:1e:1b:da:c5:81:f5:d8:3a:55:f0:8a:1e:98:e9:73:
         fb:b4:d1:a4:b8:91:68:b4:ea:da:04:02:32:1e:df:af:b1:d6:
         84:61:a8:e7:0d:e6:71:74:fd:61:70:99:30:a0:a6:9a:35:2a:
         7b:ef:5e:b8:7c:d9:d4:c0:03:dd:6d:56:a3:f1:9b:79:e3:2a:
         b1:1d:be:1e:13:3a:53:b8:c8:16:4a:24:9c:6b:38:25:d5:27:
         77:9c:d5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:54:17 2026 by rpki-client