Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/707e026a-2d25-3e2a-937f-e186939e35fc.roa
File:                     707e026a-2d25-3e2a-937f-e186939e35fc.roa (raw, json)
Hash identifier:          JD5T0RKSw8GA26968DP86oB4dRbXqx/JfAe9PBFbsdY=
Subject key identifier:   DB:D0:2F:51:F0:6D:F8:BF:C5:8B:B1:7D:20:DF:E1:DD:9A:F0:89:A0
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E0700A7043EEF90E5891202C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/707e026a-2d25-3e2a-937f-e186939e35fc.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     30036
IP address blocks:        2604:2d80:ef80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:a7:04:3e:ef:90:e5:89:12:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=f31bb9dc-a0f9-4805-8192-1e8d91aa8304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c6:70:47:9a:1d:84:37:ed:5b:c3:29:d8:27:
                    98:31:69:9a:64:ee:30:63:09:ae:46:3c:94:4b:1a:
                    f5:a3:13:f3:3f:14:de:ce:22:3d:52:98:d8:33:d4:
                    95:27:c5:7c:11:17:e1:4f:60:02:ef:19:bf:a4:e7:
                    29:26:e5:d4:56:d3:8e:a7:d5:8c:2b:71:7c:a3:65:
                    38:11:42:69:04:9a:21:7d:4c:eb:f1:69:7e:17:2b:
                    8a:f9:33:61:df:88:8f:33:b5:ce:44:d2:4e:dd:71:
                    df:c2:37:7e:ac:d7:5c:31:1e:68:ee:c0:da:3a:71:
                    ba:26:24:08:e9:03:76:ec:85:00:7e:cb:3b:f5:33:
                    a7:73:f4:8d:55:02:b3:78:2e:f4:81:7f:d0:15:00:
                    22:85:7b:e3:ae:b2:d2:60:2d:61:8a:b2:d9:73:87:
                    d5:f3:1a:ed:89:4b:58:7f:3e:64:42:1d:ae:35:40:
                    a7:57:7d:a1:c0:b5:18:c4:7a:05:4c:f5:68:72:bd:
                    5f:98:8c:55:0c:27:8c:d1:e0:81:2f:7b:0d:a1:83:
                    fc:7f:fd:0e:8c:83:c4:cf:18:e4:64:8b:88:05:97:
                    1e:f2:fe:3e:dd:48:7c:d7:27:cc:10:fb:57:1c:7a:
                    93:b6:3a:2b:3e:d9:80:cc:c1:7b:96:55:2b:72:d7:
                    55:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D0:2F:51:F0:6D:F8:BF:C5:8B:B1:7D:20:DF:E1:DD:9A:F0:89:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/707e026a-2d25-3e2a-937f-e186939e35fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:ef80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:85:09:b5:ee:21:0b:a8:e8:84:d7:b9:61:08:87:16:07:b5:
         ce:8a:6e:c1:33:ce:4c:ca:5e:2b:f7:6a:a0:a4:94:76:bd:f2:
         3d:f8:36:4f:0d:48:0c:fc:8b:20:11:93:2f:12:46:22:f7:c5:
         4d:d2:22:38:86:74:c8:fc:ab:85:57:a9:1f:5d:a4:6d:73:ca:
         a0:f8:d5:75:ab:b8:6e:90:05:ba:fd:88:06:ac:5b:e5:fd:cf:
         aa:b6:36:b5:df:19:ab:27:3c:53:97:49:f1:7f:2b:93:c6:c6:
         27:7e:9e:e6:05:4e:98:0c:0b:7e:7d:4a:57:8a:ed:f2:6a:30:
         30:26:92:7c:c7:62:ed:82:1b:36:2a:0f:04:0e:af:31:0f:f4:
         5b:77:b0:ff:db:e7:dd:15:91:b8:e3:8b:90:cb:50:ff:aa:69:
         e5:15:0e:84:f2:6a:7c:42:ef:c3:d7:a7:31:17:1a:05:f9:f5:
         52:c9:f3:91:7f:51:7f:63:b5:bf:f1:fb:b5:f1:55:cb:94:53:
         6c:20:c8:45:72:30:42:e2:b6:a1:f5:ba:c2:1a:b5:56:4c:a3:
         67:2c:69:28:ab:35:80:c7:07:7c:c2:31:84:b6:e4:4f:f7:f8:
         25:d8:e1:f3:1c:47:65:e3:94:57:74:07:2b:bf:4d:22:ba:46:
         ef:0c:f3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:59:53 2026 by rpki-client