Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7386bb74-9487-3be0-90d7-6f39ba1218c3.roa
File:                     7386bb74-9487-3be0-90d7-6f39ba1218c3.roa (raw, json)
Hash identifier:          YhGy3TTJRvvr55OjtyfBUnouS4OzF3QjLqT58tDCbvs=
Subject key identifier:   C5:6A:BC:D6:EA:BD:76:42:CD:8D:36:E4:9B:14:40:DB:07:C9:8D:1E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059B3CCBCF0B287D9D516980
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7386bb74-9487-3be0-90d7-6f39ba1218c3.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        2604:2d80:dc80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:3c:cb:cf:0b:28:7d:9d:51:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=77558f98-cf7c-4403-afb2-9b3c66ca690c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:25:f2:ba:84:b3:e8:e5:8c:0c:15:81:e0:8e:
                    b7:45:c8:e0:da:29:b3:38:cb:fd:45:63:d2:a1:72:
                    16:3f:f7:ad:f6:5b:ec:88:46:44:27:d0:bf:2b:27:
                    26:6c:93:68:d2:db:53:ad:d9:36:0a:0a:22:ce:e9:
                    a5:5d:c8:20:be:64:bf:c4:62:c0:35:56:97:76:3f:
                    f2:d5:e8:79:c2:18:de:71:b7:43:62:78:ca:f6:f1:
                    80:d8:5e:98:5a:9d:1b:65:ad:8a:d0:d7:a1:77:c5:
                    61:5b:59:c4:f4:72:4a:62:66:b6:a0:2e:7e:08:93:
                    51:37:d9:ac:55:48:75:52:f2:83:5f:95:79:e2:ab:
                    23:31:49:03:86:fe:0a:c6:c7:29:38:a0:98:f2:c1:
                    23:40:5f:7c:cf:91:0f:be:35:84:b2:aa:a0:12:41:
                    73:40:88:a2:80:e1:29:9b:69:19:eb:0e:6b:fc:95:
                    7b:06:4b:71:60:6f:41:28:3b:6f:cc:80:98:4e:b6:
                    a0:7d:55:c6:42:0b:d5:76:19:63:de:0a:13:11:22:
                    da:a1:87:ba:17:25:2e:ce:e8:27:e4:75:59:73:a4:
                    57:06:62:6f:d1:8d:79:79:a7:c0:3f:8b:85:cc:4e:
                    54:e6:0d:6f:a5:a5:2f:4d:7c:99:65:1d:43:0f:d4:
                    b0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6A:BC:D6:EA:BD:76:42:CD:8D:36:E4:9B:14:40:DB:07:C9:8D:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7386bb74-9487-3be0-90d7-6f39ba1218c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:dc80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:68:16:03:77:b8:c1:78:db:7d:0a:41:6d:04:7b:f3:d8:07:
         ad:b7:3f:ab:32:2d:04:d4:b2:ec:d8:ec:23:f5:73:e4:35:36:
         66:ce:29:0d:f2:ff:5a:58:79:20:bf:da:c9:7f:76:1a:57:a3:
         5f:70:ff:c2:5f:23:09:7e:bd:ab:57:97:0c:28:e9:a2:7e:ce:
         32:21:ad:70:3c:2c:66:d2:96:5f:37:65:99:62:38:56:ea:d7:
         b3:55:13:b1:9f:21:60:bd:e7:a0:41:b4:ad:8d:c6:db:60:5f:
         df:4d:ff:d0:42:fc:3d:6b:2c:d3:2c:33:94:df:b7:e2:8e:6a:
         05:97:8d:ed:6d:48:34:34:32:d7:a0:42:fa:43:10:dc:0b:1e:
         9f:f3:a6:a1:11:30:3e:ab:17:bb:30:65:9a:12:32:f1:12:95:
         0f:46:1c:2a:f8:3d:fa:6e:12:26:4f:cc:62:97:af:00:bd:03:
         a0:01:82:3a:46:79:a0:7e:c1:58:68:fe:12:e0:14:f7:40:9e:
         fb:6b:7a:18:3f:f0:32:c9:1c:f1:04:95:14:76:3e:86:ad:a5:
         90:8c:f0:7f:2b:1e:95:95:65:82:94:df:c8:ca:82:bb:7a:1d:
         93:c8:6a:ac:9f:23:90:e8:5a:eb:7e:7a:0e:7f:1a:5d:e1:b4:
         58:7c:02:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:04:08 2026 by rpki-client