Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/928372db-cab3-3ec7-9e0d-358b2102748d.roa
File:                     928372db-cab3-3ec7-9e0d-358b2102748d.roa (raw, json)
Hash identifier:          obGskAKY+LAROKt4njnMCGXC2C7gUxnWACdI9mGsHq4=
Subject key identifier:   C6:6D:0E:8B:CC:C5:08:28:69:73:C2:2F:B4:64:B6:ED:E5:F9:82:42
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059B52DEAE4D28E3144EA480
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/928372db-cab3-3ec7-9e0d-358b2102748d.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        2604:2d80:3100::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:52:de:ae:4d:28:e3:14:4e:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=72469b40-4a59-40f6-8d16-8355e3601724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ab:ce:84:95:38:54:3a:4e:d2:fa:40:25:a6:
                    ef:38:c0:6f:bc:55:20:c0:a9:b5:d6:b4:91:cf:32:
                    0c:b9:66:4e:e6:1f:03:3e:3e:e3:aa:9e:4c:ab:8c:
                    43:67:97:83:ab:aa:e9:00:38:dc:56:e6:1f:ae:08:
                    ec:0b:3a:af:a8:41:b9:ce:61:25:d0:2d:e8:d0:c8:
                    3f:6c:fb:b9:06:46:dd:85:cc:58:d3:7f:3f:c6:6d:
                    18:f9:8f:fc:47:00:a9:e8:f3:9d:cc:7f:31:b1:eb:
                    17:4d:c6:ac:db:81:57:3e:a2:b0:ff:31:81:ca:a1:
                    8f:b3:d3:b8:3f:69:2f:c6:38:d6:74:02:a0:b6:2e:
                    c9:3f:bf:bf:1e:d5:22:68:55:ca:ed:11:f1:db:76:
                    75:59:31:90:ac:7b:54:1f:26:7d:d4:0f:ea:ad:e9:
                    25:f0:3f:be:1d:aa:de:b8:7c:4f:c5:43:bd:84:78:
                    9f:f6:a2:d5:f2:cb:7f:e5:15:3f:44:6a:4c:2c:56:
                    b0:dd:17:5b:b2:42:a0:28:a2:ac:b8:49:22:a8:55:
                    4c:c6:ab:45:0e:87:56:ac:0b:7a:1a:8a:04:a5:c7:
                    d0:1a:5e:ec:11:c2:31:f5:c1:62:e3:83:54:e6:bc:
                    6e:3b:d3:f1:f9:af:cc:fd:f1:7b:1e:a2:b4:8c:a8:
                    28:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6D:0E:8B:CC:C5:08:28:69:73:C2:2F:B4:64:B6:ED:E5:F9:82:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/928372db-cab3-3ec7-9e0d-358b2102748d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:3100::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:73:cd:3d:cc:0c:d8:2c:c8:e6:32:4b:f9:a1:04:ea:62:54:
         37:8c:2b:4b:1c:65:07:16:a3:8f:82:66:82:62:9a:e3:5d:74:
         3e:4d:f2:09:26:9e:11:b8:ed:37:13:f6:45:c7:bc:0e:66:6c:
         ba:11:59:a0:98:25:64:3b:58:2b:83:a8:e4:8b:74:69:68:a0:
         4b:c1:2b:18:40:9f:df:a2:61:10:a0:44:0b:49:90:eb:c1:62:
         69:78:46:4b:c6:9c:c5:cb:03:23:11:4b:13:f6:2d:d7:30:01:
         06:d3:16:cb:41:c1:07:d3:10:ba:a3:83:60:b7:4a:44:86:6d:
         4b:a0:2f:67:bb:ca:47:cd:48:87:89:f2:74:3f:da:ff:6c:14:
         db:5f:d1:88:6d:14:3c:83:70:b9:54:6f:c6:f9:99:45:2d:52:
         6c:3d:63:c7:de:c9:ff:2a:2b:df:4f:40:d5:e4:56:a2:f0:d9:
         45:3a:a4:6a:ec:6a:5e:c7:ad:71:85:a4:3d:18:e0:2e:d7:c2:
         5b:5f:86:ad:6b:3b:00:8e:ff:ab:d9:4b:c1:74:be:d4:03:49:
         5e:2d:53:88:72:43:72:b6:40:76:4b:9d:51:50:54:46:6c:e6:
         b1:41:25:c1:15:a4:e7:18:a9:fd:29:b9:02:0d:80:6b:e5:bf:
         02:d7:d2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:37:20 2026 by rpki-client