Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7ca23138-74ff-3b07-b481-d040edc7eec3.roa
File:                     7ca23138-74ff-3b07-b481-d040edc7eec3.roa (raw, json)
Hash identifier:          wJWGY5UokBijlr2VSol9gT8yVNeIEtpR+LYE59dqjlY=
Subject key identifier:   E4:18:84:D3:BB:9A:38:14:D0:77:91:88:32:39:2F:3A:31:08:6B:77
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA7A0E1CAB32B01BCF7E8A200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7ca23138-74ff-3b07-b481-d040edc7eec3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:be80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:e1:ca:b3:2b:01:bc:f7:e8:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b608d8fe-a7ca-4318-97a7-9179748c51e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8b:ad:6d:ba:1e:0e:68:66:8e:f5:bb:88:42:
                    cf:b2:88:b0:67:9f:fb:a0:78:bd:9c:80:10:c4:d5:
                    c5:e0:30:af:09:83:e2:93:99:52:a9:c2:eb:8d:29:
                    c4:06:69:6c:2e:3b:f4:79:91:dd:f1:43:42:f9:2d:
                    cc:45:be:8a:a3:ab:db:19:a0:fd:8f:bc:45:0d:46:
                    6d:0a:89:4f:12:84:fb:8c:c8:cb:8d:c1:83:25:c9:
                    9e:f9:98:89:79:a6:b6:65:99:f6:28:8f:06:d2:9a:
                    d2:2a:f2:0f:a7:b4:41:36:b7:80:1d:b2:71:7d:4e:
                    b0:24:cf:4d:cc:40:5c:a8:a2:fa:b5:7e:89:86:9a:
                    83:b1:ec:f4:bd:5b:aa:f9:d1:96:6e:d1:0b:7b:64:
                    64:50:18:a4:5c:4a:3e:ee:65:2a:14:28:63:dc:f0:
                    c3:7b:97:ad:20:04:c4:20:25:9e:1d:a2:81:af:8e:
                    11:17:9f:c2:43:6b:00:08:bb:41:f9:17:f4:bc:98:
                    b8:49:c6:6b:da:63:eb:76:c7:3a:de:b5:b3:80:d2:
                    db:41:83:a8:dc:c3:8b:55:9d:1e:69:24:76:af:0f:
                    2c:e0:0d:83:a6:ea:bb:a7:57:cd:e0:63:54:43:1b:
                    68:f9:ba:ef:16:15:2a:81:74:d5:7f:95:1a:75:08:
                    25:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:18:84:D3:BB:9A:38:14:D0:77:91:88:32:39:2F:3A:31:08:6B:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7ca23138-74ff-3b07-b481-d040edc7eec3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:be80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:fa:ef:2a:5c:27:ff:96:fd:ee:52:75:51:b5:06:f8:76:1e:
         5e:5f:0b:92:bd:c2:2a:a6:cb:88:1f:b1:d0:91:0e:29:34:63:
         cf:1b:f7:77:b7:f0:f1:01:1d:75:e2:9b:58:d5:1e:06:0e:7d:
         b0:7f:2a:42:6b:0d:19:82:dc:4a:3f:3c:05:08:40:67:fa:be:
         28:d6:41:bc:fe:02:d3:7c:3e:bb:7a:de:38:b7:d3:e2:10:53:
         3e:ec:85:91:94:54:10:23:24:f0:91:4e:19:61:40:c3:c6:c2:
         a7:af:f2:d3:0b:bb:2f:6b:b7:c2:19:1e:ff:d1:0d:65:98:79:
         12:8a:c3:c3:79:ee:59:1a:7c:ca:5d:54:38:4d:1f:0f:b0:5f:
         39:24:74:5f:1f:dc:d9:89:78:53:55:65:3b:55:e4:99:cb:a8:
         64:4f:58:08:2b:ac:b6:cd:3a:e9:72:3c:9e:6e:f2:91:4d:60:
         ae:be:6a:14:1b:39:01:29:c3:60:89:7f:95:ef:98:fc:84:4c:
         a8:56:78:ee:19:33:e7:fe:16:fc:7d:97:51:6f:8a:19:61:3d:
         0d:9e:bf:25:05:41:40:67:93:73:51:f4:01:f5:61:2c:2d:e3:
         c3:bb:ee:82:2a:07:c7:3c:95:9f:49:cf:c3:53:29:1d:6f:ab:
         2b:9e:e0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:57:11 2026 by rpki-client