Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/73b43347-6fb9-3488-a979-4768613d4993.roa
File:                     73b43347-6fb9-3488-a979-4768613d4993.roa (raw, json)
Hash identifier:          lP85YdEktNyrboZaSy81Sm9SmG3tW4OU3R/rz3UFNgg=
Subject key identifier:   AF:29:BE:16:51:C3:10:91:7A:31:99:DD:A0:50:42:DB:72:75:F1:59
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA787A650F580AD0D4F35A9D0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/73b43347-6fb9-3488-a979-4768613d4993.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d81:1400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:a6:50:f5:80:ad:0d:4f:35:a9:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=abfccb0e-00c4-4bf6-8440-d9922e79f5df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cc:28:26:7e:a3:f9:f4:64:dc:84:7d:f6:1b:
                    97:22:92:82:f0:12:ed:58:bc:77:83:0f:a0:74:37:
                    2a:67:27:27:54:98:99:ee:2a:30:32:2f:80:de:cc:
                    02:17:df:51:e4:92:51:17:f3:4d:5d:dd:bd:87:38:
                    ad:77:7c:cf:9b:13:69:ad:45:18:f9:c3:ab:da:30:
                    7d:24:0b:f7:51:bc:15:f0:a3:e2:1b:a2:5b:1c:73:
                    32:1b:bf:fc:22:a6:d3:e1:1e:71:e5:85:57:e7:e2:
                    63:d5:d5:42:4d:d3:a2:dd:cf:1f:84:ee:4c:78:77:
                    bd:9c:a9:4f:c5:39:5a:fe:dc:c5:30:89:70:c9:86:
                    b2:4e:5c:52:74:ec:df:e2:d6:de:47:17:16:a7:08:
                    ab:b3:70:6a:54:9e:4a:0b:f5:55:3a:10:b5:8c:42:
                    e6:de:5e:25:53:c8:1d:b7:d4:99:a1:0e:ad:73:57:
                    db:9d:90:5e:1e:db:88:43:94:6f:e5:0b:39:07:54:
                    a0:a2:70:3e:01:b4:35:db:5d:25:ce:4d:f3:bc:1a:
                    c6:8b:a5:e8:d6:81:19:90:e7:ee:e5:0e:1e:4f:cf:
                    8e:44:b2:8a:e3:a9:6f:ad:e1:f2:78:1a:af:51:1c:
                    78:d7:9b:f2:a8:6e:14:5c:af:1f:83:c1:04:64:e0:
                    16:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:29:BE:16:51:C3:10:91:7A:31:99:DD:A0:50:42:DB:72:75:F1:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/73b43347-6fb9-3488-a979-4768613d4993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:ea:f2:00:23:76:7f:2b:74:1f:b3:03:03:9c:fd:75:d5:98:
         bc:bb:38:7b:0c:38:7f:78:22:a9:98:08:8a:3a:53:5d:e1:41:
         91:cb:90:a8:91:85:4a:61:97:2b:a7:cf:8d:67:fd:54:29:50:
         74:18:fc:7d:05:26:a6:df:79:96:92:c9:c3:f8:8f:38:d2:55:
         f9:22:ad:fe:cf:73:c2:23:7c:41:e8:70:65:19:cb:63:ee:63:
         ff:d2:9e:3e:4e:bd:99:a9:23:34:18:f7:38:e2:26:38:5d:7a:
         ae:21:ea:82:1f:bc:f9:15:77:e2:a3:1b:28:95:69:bd:91:f5:
         c4:e9:f1:c1:3d:f5:f3:de:5b:db:40:3f:0c:c3:09:60:64:95:
         9f:e0:67:c3:4c:ef:9f:22:17:56:cc:31:74:2a:e5:46:5b:99:
         a4:91:75:a0:9b:66:3b:df:bb:4b:e2:be:ff:65:03:04:d8:a1:
         d3:a9:0e:a4:2a:08:4f:a6:e7:c5:ed:91:ba:ce:d7:e6:29:0a:
         5e:49:5d:47:40:2a:39:f2:80:75:67:ba:ec:fd:88:cc:26:3c:
         c9:fe:24:1c:df:18:83:61:32:c9:79:12:46:04:b1:f5:02:29:
         0f:85:28:4a:3e:f3:c8:a5:12:6c:f1:0f:0e:b2:77:c2:42:d9:
         41:18:3f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:34:07 2026 by rpki-client