Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70bd9e95-db11-36db-abf7-aa9967ee530d.roa
File:                     70bd9e95-db11-36db-abf7-aa9967ee530d.roa (raw, json)
Hash identifier:          zzYmlQdH77JO3AxPPfRkP5RfAOO14BzdHjZlGH7RUv8=
Subject key identifier:   B9:CE:84:CF:79:9B:D7:81:E4:18:6D:17:2B:28:DE:C7:88:47:42:22
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E043603A68902DF92D078EA00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70bd9e95-db11-36db-abf7-aa9967ee530d.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     19905
IP address blocks:        2604:2d80:bd80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:03:a6:89:02:df:92:d0:78:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=b9394fce-451d-4def-8b1a-634824a85142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:72:60:67:4f:8c:71:a8:bb:3d:e9:e7:4d:3c:
                    8c:44:e7:18:32:dd:ca:b9:5a:d6:4a:42:fc:5b:1c:
                    57:2c:14:c1:f4:0a:80:56:cb:59:f5:73:0e:9e:b5:
                    30:15:58:c3:66:73:08:3c:87:61:13:10:aa:74:b0:
                    39:6a:40:d4:1a:e6:fd:d0:9c:c1:70:18:61:5c:4a:
                    40:de:15:6b:1a:6d:e0:71:85:35:d2:04:d1:e8:08:
                    7b:57:c1:34:fd:ca:63:10:c9:40:18:b4:84:3f:48:
                    d7:a0:f8:98:d1:c0:58:c8:50:28:e6:14:33:22:36:
                    19:70:27:33:27:33:f9:de:45:cc:18:8e:63:70:53:
                    44:37:42:ca:42:80:54:4c:81:f5:1e:4d:87:23:72:
                    1d:d6:ca:24:ef:ba:64:f2:2c:3b:7c:41:3a:12:84:
                    31:90:3b:79:83:34:ea:17:bd:0f:e0:6a:df:e2:b5:
                    8f:46:4b:2a:a3:69:29:6c:ae:a8:2f:11:ed:22:43:
                    5b:e5:5b:82:2f:0c:51:e0:01:a1:4d:d2:1e:79:30:
                    86:2c:a5:0a:45:7e:89:0e:5e:83:94:5d:59:2b:a5:
                    9c:d5:24:5a:d6:07:6c:31:ee:f4:22:a8:f0:cc:7f:
                    a8:e2:33:21:13:df:3b:d0:b3:cf:bb:e0:12:12:b1:
                    d4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:CE:84:CF:79:9B:D7:81:E4:18:6D:17:2B:28:DE:C7:88:47:42:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70bd9e95-db11-36db-abf7-aa9967ee530d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:bd80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:07:89:db:08:1c:9d:68:0f:91:e4:8a:78:e7:86:7d:3c:0c:
         02:1d:83:87:4f:89:d3:04:a6:b0:85:9f:84:cb:09:1e:c8:23:
         da:18:ed:99:4a:1e:2c:b7:31:66:16:06:d2:82:a9:be:b6:cd:
         ad:8a:8d:c7:a3:ea:2b:fc:38:81:d0:a3:8c:54:f1:cc:32:9e:
         84:ba:88:05:b3:ad:e1:f6:0b:f1:f5:76:7a:03:92:2f:c0:49:
         4f:71:29:ee:b9:21:c4:87:84:d6:56:78:37:bc:1e:13:d7:fc:
         12:4e:53:cf:17:94:cb:15:ec:65:7f:05:11:84:fb:15:df:7b:
         81:2c:60:03:41:42:3b:ad:d4:e5:f5:21:10:bf:2d:b3:c8:1d:
         11:b1:34:4b:9f:a9:52:0f:39:6a:ce:96:b4:2c:c8:23:e5:2f:
         14:76:31:f6:c1:d2:4f:e9:08:00:cc:2a:b6:61:3b:ea:3e:3c:
         5a:79:b5:0b:e9:cf:1b:e3:23:55:42:4a:18:dc:d0:27:91:a2:
         00:3b:0a:eb:fa:28:2d:72:d3:a2:ec:a6:30:65:a3:3b:40:28:
         8f:58:11:b9:a9:9f:9f:4a:43:17:de:37:97:48:af:4e:88:4a:
         b7:9e:9f:e5:e1:a0:e6:b5:df:b9:c8:cf:5f:43:f7:43:f9:7f:
         12:0c:39:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:08:28 2026 by rpki-client