Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9205185a-63d3-395f-b356-f510570e6133.roa
File:                     9205185a-63d3-395f-b356-f510570e6133.roa (raw, json)
Hash identifier:          FXjr/Uay+I6hGE/ySS0BNUgNfzyDYlgAH/9mi3ktiHs=
Subject key identifier:   C0:77:65:B7:ED:B9:A6:AD:DD:C7:4D:44:C0:0A:84:10:1A:16:26:29
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA78F3146B4D1858D7AFB4D00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9205185a-63d3-395f-b356-f510570e6133.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:1900::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:31:46:b4:d1:85:8d:7a:fb:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=abb5495c-abbb-418c-849a-d0bcb9041954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:77:8e:9b:54:bf:2d:5a:54:32:be:c0:ac:f9:
                    1b:57:3b:db:cd:50:94:f2:69:21:72:5e:f9:d8:bc:
                    83:40:ce:3d:f6:26:db:dd:1e:93:60:1f:4d:bf:36:
                    d1:fd:d3:65:ef:8c:79:a8:25:7e:d9:b2:ea:89:dc:
                    c4:78:43:de:f4:5c:01:bd:db:4f:d4:a1:51:86:06:
                    dd:a4:75:6c:19:3f:d4:67:2d:d9:9f:6c:33:9f:24:
                    cc:25:38:c1:05:1f:9c:74:f8:d6:e3:4a:fe:f8:3e:
                    a9:27:3e:21:bd:16:23:44:fb:12:24:a6:39:ea:9a:
                    7c:79:f4:4e:cc:ce:e9:fc:db:e2:9a:08:0a:31:48:
                    7f:1f:08:87:a9:4d:a7:d3:b2:43:97:c3:18:c2:23:
                    d4:53:3b:a4:b3:d0:e4:9c:c9:12:18:ad:52:2a:6e:
                    d8:c6:8f:30:f5:cd:b9:68:2b:bf:02:4e:e4:3d:9c:
                    26:e3:79:4f:29:ac:f9:0c:98:86:fb:07:d9:7e:c4:
                    a1:e1:fd:45:28:66:45:71:90:0c:bb:bd:ee:ea:70:
                    8c:67:5b:d5:0b:1e:96:68:cc:b5:95:94:9b:7d:22:
                    18:22:42:33:09:63:02:8e:d1:52:ca:e9:ef:83:fe:
                    c3:b1:90:79:53:34:6a:f5:93:f5:ce:41:86:bf:7f:
                    15:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:77:65:B7:ED:B9:A6:AD:DD:C7:4D:44:C0:0A:84:10:1A:16:26:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9205185a-63d3-395f-b356-f510570e6133.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:1900::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:7b:b7:bc:a6:70:a0:f0:a1:d5:56:87:c0:d2:54:87:ad:7b:
         f1:3b:f3:a7:e3:2f:b9:70:ca:f4:17:ef:49:ad:fa:20:2e:56:
         87:8c:b7:12:6c:ea:9f:32:11:a2:dc:47:0d:80:b2:2f:c4:b2:
         a5:d2:79:d9:71:0f:09:f3:71:4c:92:dd:5d:68:22:19:46:2b:
         af:a8:92:59:8e:7b:4d:0a:8b:cd:8e:d9:a5:14:7d:c6:ca:b0:
         45:35:e7:1a:23:ed:cf:ea:4b:57:84:b4:b9:cc:dc:0f:95:37:
         43:3d:46:d5:9f:f3:02:f2:39:b4:68:dc:0c:0b:27:95:e0:31:
         0f:77:b2:ee:8f:9b:b3:ea:92:fa:9e:94:00:5c:04:48:5b:43:
         8e:a8:70:8d:93:80:d1:82:af:d7:f0:66:5a:1d:75:5e:c8:84:
         27:88:ea:4a:9b:83:9a:e9:f6:45:1c:23:1d:6e:dc:f6:c1:6e:
         81:97:27:2b:67:0d:49:f5:af:b6:67:fa:94:c0:92:3c:5b:c9:
         4d:42:99:52:67:85:c4:16:9e:aa:e1:e2:fa:bf:8e:f5:ba:2a:
         72:3c:2b:0f:db:67:57:b5:5a:af:cf:65:dc:33:96:ac:cb:eb:
         f5:c6:d5:69:0d:29:7b:4d:0b:5d:33:d3:f4:f9:e7:6e:07:cd:
         6f:ef:72:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:43:06 2026 by rpki-client