Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9631be6f-d901-3a45-8f69-7f4bb3437f76.roa
File:                     9631be6f-d901-3a45-8f69-7f4bb3437f76.roa (raw, json)
Hash identifier:          vHXay2IcmMVxhQNADl/vrDJvN+Bz5uE+U1Dd9TZnM5s=
Subject key identifier:   50:AD:C6:AD:A4:B0:A3:4B:03:49:75:9C:3A:AE:6D:2D:55:E0:07:40
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E0436304BA915338F0A204600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9631be6f-d901-3a45-8f69-7f4bb3437f76.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     30036
IP address blocks:        2604:2d80:7280::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:30:4b:a9:15:33:8f:0a:20:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=0f3d9280-016f-451a-9ca8-67fade3e72a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:91:4d:e8:b7:0c:47:b3:9f:f4:c7:3e:fd:b5:
                    77:96:02:5b:ab:20:24:b7:57:ca:94:37:a1:0c:3a:
                    86:10:0e:af:8f:d5:b3:76:d3:d9:97:51:ef:a0:ce:
                    e9:f1:81:b5:55:66:ac:e3:2e:07:07:c2:62:0b:4a:
                    b0:cf:63:77:38:d9:60:41:4a:68:9c:2b:35:7d:c5:
                    e5:56:57:b3:ee:33:8a:a3:96:23:41:08:f3:02:d8:
                    00:32:55:21:01:f4:ce:ab:74:ff:1b:4c:c6:01:39:
                    50:aa:95:fc:ff:89:b7:21:2d:ba:12:78:a6:1d:1f:
                    6e:f8:77:99:fa:7e:0f:5e:d5:52:e2:1a:22:5b:82:
                    ca:d0:7d:aa:53:3c:35:34:20:6a:0c:01:f7:74:32:
                    3a:10:20:59:f7:1c:60:f0:be:ea:d3:5b:96:53:27:
                    c2:7b:84:f7:fc:55:0b:da:c4:d8:62:2c:e9:b2:a4:
                    3e:44:7b:03:b2:8b:46:53:c4:f5:47:50:d9:1b:d7:
                    c4:f4:fc:df:61:3f:53:05:f7:f5:ec:ff:94:d7:33:
                    fb:21:99:e7:d0:bd:1c:7a:fd:1c:3e:f8:22:0c:ae:
                    93:0b:30:15:e2:12:67:db:f6:7e:94:7b:09:a5:ab:
                    cf:05:5b:6f:2c:b2:69:83:01:5b:a6:c5:c3:ae:92:
                    88:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AD:C6:AD:A4:B0:A3:4B:03:49:75:9C:3A:AE:6D:2D:55:E0:07:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9631be6f-d901-3a45-8f69-7f4bb3437f76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7280::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:e2:f6:92:cc:db:45:72:e6:40:5a:f2:19:d4:5c:d7:90:ad:
         e9:5e:d1:5a:d2:ed:7b:64:7a:23:54:b6:67:cc:7f:60:e2:76:
         7a:8e:0e:5a:3a:76:3b:e5:7e:c7:c5:45:e7:ee:06:4e:89:51:
         12:3a:2e:5e:96:87:87:be:2c:18:6b:19:b6:7d:23:38:cc:2f:
         90:1b:41:4b:01:ef:d9:d5:a2:ee:ed:eb:a2:2f:b1:b0:7d:b1:
         8c:82:d1:9d:44:e7:24:a3:93:0f:33:c6:79:55:31:98:54:b7:
         ae:de:ee:e0:1e:9d:6f:3f:5d:38:9d:e1:ec:96:f4:32:fb:44:
         a1:c4:47:b2:47:77:0f:04:95:9f:d6:ce:79:73:28:2c:71:39:
         8e:6a:71:3c:01:12:2d:1c:be:a5:29:b1:fb:e9:26:f7:ac:51:
         83:1f:79:1e:b1:ad:e5:39:cd:8f:1b:e6:3f:db:c8:a0:c4:f6:
         bb:b6:6d:7b:8d:90:33:86:78:2c:78:77:c4:d5:e9:4e:e9:08:
         21:7b:34:eb:ab:ae:2a:11:10:5c:13:f0:f9:75:95:73:f3:18:
         4a:73:63:39:4b:95:fa:c0:31:e8:14:f5:e8:af:5c:61:e8:7e:
         47:88:24:b5:4b:10:2e:b9:a8:e9:59:3d:31:7e:3b:fb:d5:fe:
         aa:99:0f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:02:34 2026 by rpki-client