Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9bc1dec5-04cb-377b-a94e-5c0428717822.roa
File:                     9bc1dec5-04cb-377b-a94e-5c0428717822.roa (raw, json)
Hash identifier:          RhSVSYPFN29Dj5tjJiUPRryh2DyGQVARXNB2F/HTUkU=
Subject key identifier:   12:62:86:9E:64:DB:04:EE:CD:76:06:76:46:89:E8:6F:22:AB:42:9E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059B46A96E996D724178A1A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9bc1dec5-04cb-377b-a94e-5c0428717822.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        2604:2d80:b580::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:46:a9:6e:99:6d:72:41:78:a1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=86dc7f65-c491-4a21-9532-47b937e95645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:03:f7:c1:ec:1e:81:0e:f1:e3:1a:c6:03:24:
                    d9:96:38:31:89:2d:8a:af:26:a0:55:04:18:72:4b:
                    5b:e2:29:18:cb:9a:52:17:59:7d:df:f8:90:70:d4:
                    1c:53:f1:f3:60:15:c6:ef:69:af:78:94:9a:4a:1b:
                    d3:9c:2e:ad:f0:da:b5:52:1a:41:f4:97:73:b2:58:
                    63:a7:15:0f:79:bf:e4:73:bc:66:59:05:99:f2:87:
                    21:02:24:fc:a5:9e:3f:4a:5b:03:1c:14:7c:83:27:
                    59:eb:b9:eb:3e:00:31:e9:b0:f5:da:5a:1a:b6:88:
                    24:d2:9d:7e:4d:fd:4e:5d:ef:15:09:fc:91:70:be:
                    5f:1f:bb:e8:e7:69:3c:11:4e:9c:91:a5:16:39:c1:
                    8e:00:0b:06:82:36:cb:88:4c:33:01:0e:d2:54:1c:
                    d3:9d:d3:d2:e4:5d:0e:ec:bf:5f:86:56:34:ee:46:
                    ef:37:05:a4:c8:d3:7a:8c:05:59:10:2d:0e:ec:d8:
                    93:20:61:25:f0:d6:e3:4b:99:ad:01:75:19:88:b5:
                    f6:6f:e8:44:12:ee:ae:24:13:06:8b:a0:04:65:f1:
                    22:7d:85:b7:94:28:5b:c4:96:83:07:e1:cc:45:9f:
                    15:d0:da:18:a2:fc:43:b7:38:3b:34:ab:36:bb:5a:
                    e4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:62:86:9E:64:DB:04:EE:CD:76:06:76:46:89:E8:6F:22:AB:42:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9bc1dec5-04cb-377b-a94e-5c0428717822.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:b580::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:19:5d:4f:c1:5b:d3:71:44:2d:42:6c:fc:55:13:91:a7:97:
         0c:d9:05:af:11:91:1b:4d:9d:bd:ad:ae:2a:96:d6:2a:d9:65:
         0b:71:5b:31:4f:6d:d8:fa:a0:1b:91:64:d5:48:aa:2a:66:b4:
         56:60:1d:06:9c:b1:67:ca:d4:ed:f5:41:9b:61:bf:20:98:da:
         05:86:bc:6b:28:ac:67:63:a8:58:42:93:ad:5f:ff:c4:cb:18:
         73:76:43:1e:cf:d9:95:d2:69:18:cc:23:d5:98:ca:e9:bb:95:
         dc:5c:5c:39:2f:ac:1b:d9:ce:d6:74:65:9f:07:b4:11:8d:80:
         11:b7:1d:03:f0:e1:1d:38:4e:da:49:24:e8:2d:51:e8:d6:44:
         4a:9f:54:8c:54:21:10:26:b7:79:e9:7b:0e:35:a3:10:fd:82:
         17:0f:af:27:73:00:1c:3e:77:b0:ca:d2:8a:25:3d:f2:61:84:
         f3:49:8b:80:30:84:b4:88:53:6f:68:bd:7e:7a:c6:35:dc:5e:
         3b:51:01:bd:b4:af:69:8e:c2:b4:5a:26:bf:97:9c:50:4d:eb:
         5f:57:3a:73:f4:c2:18:15:7a:73:a5:d9:98:84:d0:a8:85:0d:
         ae:7b:9d:e2:a5:b3:55:0b:86:b4:93:a9:aa:93:a7:bf:5d:08:
         89:89:0c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:13:46 2026 by rpki-client