Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91440845-0c9a-3837-bff7-0cc74deb5f0f.roa
File:                     91440845-0c9a-3837-bff7-0cc74deb5f0f.roa (raw, json)
Hash identifier:          mKTNRn8HOufRFgIb8YYTGf6vZh7BwHPA4hlx/VOVbAo=
Subject key identifier:   89:6C:A1:CE:37:CE:F7:FE:7E:1F:FB:66:B4:7C:F7:97:AF:75:63:AA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F3B7D2470906F1E964AD32D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91440845-0c9a-3837-bff7-0cc74deb5f0f.roa
Signing time:             Sun 20 Sep 2026 01:00:11 +0000
ROA not before:           Sun 20 Sep 2026 01:00:11 +0000
ROA not after:            Sat 19 Dec 2026 02:00:11 +0000
asID:                     19905
IP address blocks:        2604:2d81:2e80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3b:7d:24:70:90:6f:1e:96:4a:d3:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 20 01:00:11 2026 GMT
            Not After : Dec 19 02:00:11 2026 GMT
        Subject: CN=6f3bd3a0-c5fc-43d9-9a8f-f1a3495a5cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d7:34:20:b5:61:6b:7e:5d:1b:eb:8f:4b:e1:
                    4c:21:91:5c:1b:2a:e0:e7:98:8d:a4:ea:2b:b6:11:
                    59:55:49:53:7a:9c:94:47:43:60:b1:7e:67:17:e5:
                    73:e2:f8:c3:43:92:8e:c1:8e:9b:07:62:43:5a:48:
                    fa:02:68:d9:21:87:95:c1:4f:c8:43:94:9c:47:d6:
                    3e:1b:28:e6:b4:2f:1e:17:0c:6a:89:44:1f:af:80:
                    e0:79:3a:0f:08:47:64:7e:6e:e0:15:16:68:09:f0:
                    7a:52:f9:16:0f:bd:b0:4a:64:24:ed:03:0c:d3:66:
                    92:5b:aa:8b:56:8d:76:d4:42:a4:8f:c1:e6:cf:01:
                    2a:cd:99:a2:2d:b6:27:56:06:a9:45:5b:74:da:1b:
                    05:64:af:e1:e7:2f:a4:31:9c:72:63:06:cd:9e:b1:
                    10:ba:14:6e:3f:c7:17:f6:9e:30:89:c2:94:64:e7:
                    a2:69:97:13:4f:e6:47:4c:8e:ee:c0:d5:82:5a:04:
                    27:24:da:fd:e1:36:ee:e1:56:d3:06:bf:f1:a9:73:
                    e2:45:e0:d8:69:3d:68:18:b1:ed:6e:74:22:3d:eb:
                    32:61:a8:5e:c0:9f:9d:54:b6:6d:78:e0:b0:ee:16:
                    68:32:43:73:87:a3:2d:c1:70:71:1c:f3:c1:77:b7:
                    7a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6C:A1:CE:37:CE:F7:FE:7E:1F:FB:66:B4:7C:F7:97:AF:75:63:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91440845-0c9a-3837-bff7-0cc74deb5f0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:2e80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:9c:73:f3:24:1d:db:ad:29:98:7f:36:bd:77:8d:45:08:55:
         af:eb:69:cd:8e:ee:fb:f5:f2:6e:f9:7d:5b:6e:00:72:8f:00:
         d6:0e:97:df:69:eb:c2:eb:0c:bd:1f:ee:d0:f3:2f:3e:02:be:
         9e:16:ed:05:61:ee:e8:2b:fe:8f:9f:a5:da:12:a6:66:8e:36:
         7f:da:5e:47:b1:f7:09:56:02:99:c3:43:1a:aa:04:93:d0:c1:
         e2:0d:b6:c1:04:31:ca:80:5b:96:71:c6:e2:c5:ea:ea:9e:e2:
         e7:f4:80:f3:c9:6e:9d:f0:77:d1:1d:92:e5:77:ac:a7:32:1d:
         2f:4f:a7:d8:f0:d7:bf:f5:fa:26:2d:77:fb:18:5e:a8:ff:0e:
         5b:98:82:bb:97:11:fd:32:e4:70:19:69:0b:e1:02:9b:6b:db:
         97:e1:ed:bd:71:26:43:77:cf:4b:0c:e6:6a:24:4a:36:e9:70:
         6f:e4:f4:9d:51:64:5b:89:4f:2b:ee:5f:37:5d:dc:e2:5a:68:
         a6:12:b7:1f:03:7a:f1:a4:4e:f2:a5:07:b6:2e:44:7d:fc:dd:
         28:ce:d8:fa:c9:3d:a4:05:b3:e0:59:23:07:15:20:5f:1a:50:
         cb:3f:b2:7d:6b:1a:cb:9c:47:33:2b:93:53:6b:a1:89:69:92:
         98:b7:f3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:52:49 2026 by rpki-client