Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/816811cb-688a-3614-99af-60ae508b37c3.roa
File:                     816811cb-688a-3614-99af-60ae508b37c3.roa (raw, json)
Hash identifier:          Cl0ZtLknjxNJZ10uBORJHl4Ux/Va5eBL8XlSf5uM6BA=
Subject key identifier:   25:1D:96:F2:F1:A2:9A:9B:79:E7:FE:64:C4:B9:A4:34:74:E7:56:83
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DF4DB5945ABD6DB73619C9D40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/816811cb-688a-3614-99af-60ae508b37c3.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     19905
IP address blocks:        2604:2d81:1080::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:59:45:ab:d6:db:73:61:9c:9d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=6ec6f6b6-ab32-424b-9133-6745b0ab8c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:89:ac:2c:25:ac:99:6c:36:f5:0c:41:7a:36:
                    65:29:3f:f2:e0:b5:e4:5d:84:cb:62:69:db:8b:22:
                    d6:dd:f5:4c:a0:87:d7:e3:72:56:a5:f3:31:26:7b:
                    b9:df:f3:fd:03:f3:47:ea:a5:70:83:bf:88:49:7c:
                    df:f3:2d:16:5f:14:6d:f9:54:9d:d4:77:05:54:76:
                    38:85:2f:7d:32:1f:78:c1:33:77:da:26:2c:93:80:
                    46:29:e3:dd:32:5e:66:cb:92:23:f3:cc:27:0e:e9:
                    37:c8:d7:a4:f6:b7:10:b9:6b:31:de:b4:14:76:a1:
                    37:21:87:9d:35:42:b0:7b:2f:fd:65:f3:ff:31:09:
                    e9:87:c1:cf:22:52:79:d5:b6:38:56:d1:c3:ba:2e:
                    8a:62:75:63:c7:b1:e3:3e:c7:04:99:32:03:da:51:
                    80:b2:4d:79:d3:63:8a:0a:39:81:30:18:61:9a:43:
                    9b:2b:75:bd:57:d3:5f:02:2c:9f:e9:63:7e:d9:49:
                    d6:99:25:cb:42:62:56:f6:c7:8c:76:f1:98:ac:58:
                    bf:67:ba:12:21:cb:ac:e4:0d:bd:1e:99:07:04:c9:
                    a9:10:95:b7:27:60:b7:97:5c:cd:05:ff:c8:ef:4f:
                    eb:9e:52:eb:82:0b:20:4e:18:66:ee:e4:09:4d:14:
                    12:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1D:96:F2:F1:A2:9A:9B:79:E7:FE:64:C4:B9:A4:34:74:E7:56:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/816811cb-688a-3614-99af-60ae508b37c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1080::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:2f:cf:ca:84:66:3d:02:c3:9e:61:71:39:42:54:1b:28:37:
         8f:a8:90:7a:72:6e:ed:c5:87:07:bd:73:da:39:89:d3:3e:37:
         40:6a:b1:cb:5a:95:72:ca:54:c3:4e:2a:c1:5d:47:63:33:46:
         e4:ac:8c:a8:b4:18:d1:78:fa:6b:31:21:5d:1c:2a:aa:c2:d4:
         d2:47:03:ce:68:81:cf:9c:7e:b7:b7:e8:e1:b0:0a:38:31:13:
         c7:b7:92:18:c4:65:43:c4:93:63:91:1e:05:cf:c8:71:82:1a:
         93:9e:15:a7:20:fc:39:95:ea:68:7c:0b:0f:86:68:65:e5:b9:
         34:16:96:a6:04:ad:6d:8f:8f:86:cb:11:27:8e:06:19:1e:7b:
         c5:c7:4f:ee:d4:be:fd:96:0e:9a:db:7d:01:ae:c1:b8:b6:91:
         1f:dd:b9:43:a4:48:05:83:1e:72:99:22:82:6d:2a:86:2e:66:
         68:0d:06:b0:7f:5c:f9:22:31:4d:f9:58:cc:35:0d:b9:c9:82:
         5c:57:63:95:7f:34:50:52:1f:08:83:c0:b6:96:01:8d:3f:d0:
         36:48:1a:38:59:cb:4d:c1:85:77:eb:8e:1d:ed:d3:53:4b:87:
         77:0e:ea:82:bb:89:3c:7d:17:87:89:a4:87:d2:b3:be:4e:02:
         9a:a1:27:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:01:05 2026 by rpki-client