Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/844e3e07-672b-3fb9-9d9a-4d371b0fa180.roa
File:                     844e3e07-672b-3fb9-9d9a-4d371b0fa180.roa (raw, json)
Hash identifier:          QKIR+45nxzTMiNgUOdTAyWV+ZhH6dK1Mh3IyHIPSE5k=
Subject key identifier:   63:23:13:6B:BA:AA:FD:6C:B0:1F:28:2B:06:7E:BD:D4:45:B4:19:1F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DDA55BF5028F2B4DFEBBA5D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/844e3e07-672b-3fb9-9d9a-4d371b0fa180.roa
Signing time:             Sat 16 May 2026 13:00:31 +0000
ROA not before:           Sat 16 May 2026 13:00:31 +0000
ROA not after:            Fri 14 Aug 2026 13:00:31 +0000
asID:                     30036
IP address blocks:        2604:2d81:8000::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:da:55:bf:50:28:f2:b4:df:eb:ba:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 16 13:00:31 2026 GMT
            Not After : Aug 14 13:00:31 2026 GMT
        Subject: CN=a453c392-fee8-4359-9e30-7a378d8215ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:47:03:dc:01:b0:58:3a:70:90:f9:62:2c:4f:
                    27:68:16:6a:bb:72:44:e7:cc:96:a4:af:6a:66:e7:
                    ff:3d:d0:de:44:fe:bf:62:77:8f:ef:fa:e6:2b:67:
                    ce:38:33:d9:70:7a:61:f2:2e:0a:de:54:5c:33:df:
                    b8:0e:67:e2:53:13:80:94:bb:bd:f5:7d:cc:66:87:
                    88:0f:a3:61:37:6e:7c:7a:db:ef:75:8f:21:51:ce:
                    46:15:7c:7b:8b:cc:61:c1:44:ee:ff:c4:d5:ab:9a:
                    30:9f:25:47:b0:57:89:3d:78:10:56:e0:77:39:14:
                    aa:de:b3:55:90:03:72:01:f5:80:a4:f1:92:c2:25:
                    7e:dc:2a:28:2c:d3:50:23:95:7e:66:0e:a1:82:e4:
                    60:3d:f3:67:04:18:84:b3:e0:62:75:bc:53:d2:dc:
                    be:79:1c:b7:17:43:12:1b:11:55:7c:00:e2:9e:2a:
                    ff:5b:a4:25:59:22:bd:09:0f:1e:a2:d1:38:51:7e:
                    f5:bc:9d:e7:74:3f:6b:fc:30:2f:c3:64:40:77:4e:
                    56:78:4a:cb:b6:ef:dc:50:1c:3c:2a:72:d8:9a:8c:
                    62:cb:b3:70:df:19:c1:fb:c7:91:88:a4:92:69:63:
                    22:1e:fb:e0:aa:d8:f7:ac:f2:c7:10:0a:71:51:ea:
                    d8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:23:13:6B:BA:AA:FD:6C:B0:1F:28:2B:06:7E:BD:D4:45:B4:19:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/844e3e07-672b-3fb9-9d9a-4d371b0fa180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:8000::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:c3:36:03:4a:d5:01:07:9f:57:d9:78:72:89:2f:7c:cc:c4:
         ca:d7:6d:11:dc:25:09:7f:ef:9e:b0:07:fa:08:98:2b:84:a6:
         b5:b3:89:19:44:76:28:ae:ec:51:c1:72:9c:a1:6c:8c:ea:c7:
         95:94:8f:d1:f6:8c:39:8c:35:1d:b7:14:2e:7b:71:e5:36:e4:
         88:34:ad:fb:69:7b:37:9a:d9:5f:09:08:1d:b3:7c:6d:92:ff:
         a3:d6:a3:9f:a4:3c:34:f0:5b:77:af:a4:61:eb:8c:0a:b2:ee:
         08:02:62:ff:14:75:dd:77:12:34:28:be:6d:cf:bb:1a:29:c9:
         c8:f5:dd:0d:f3:7d:83:47:7f:ae:4e:4a:11:d5:d2:fb:2f:d3:
         04:82:42:fb:8e:91:6e:a0:a2:d9:f6:ce:49:67:a3:d8:fb:fc:
         3b:72:b8:07:77:b5:72:00:7f:6a:73:03:9d:4a:9d:5e:59:ee:
         ff:a3:12:eb:fb:48:ea:c2:cf:c0:d0:54:e8:54:1a:13:e2:f8:
         09:72:cb:6e:b8:18:b1:8d:f7:34:d0:41:17:65:3b:24:ee:69:
         eb:db:6d:00:80:2a:c6:44:68:03:08:0b:44:06:ac:cd:42:bc:
         8c:0c:a4:42:ac:78:89:94:b9:3f:8d:de:68:48:07:7e:c2:a8:
         27:d3:d2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:11:53 2026 by rpki-client