Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9c0dc3cd-fd64-39df-bbf2-ea974a51668a.roa
File:                     9c0dc3cd-fd64-39df-bbf2-ea974a51668a.roa (raw, json)
Hash identifier:          HM2XRQVeQXCtjeEXmd0R0V3Z/3QsiTBuRfUIIB8wmQQ=
Subject key identifier:   68:9B:A4:FA:85:33:00:6F:22:57:65:71:D7:BB:D6:CD:8B:D2:95:BE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059B343A77ADBA47AF52C080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9c0dc3cd-fd64-39df-bbf2-ea974a51668a.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        2604:2d80:b600::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:34:3a:77:ad:ba:47:af:52:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=0aa6f5d4-1210-49a8-bc12-8623c489ce4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1d:f8:fa:3d:c7:b2:dc:c2:2f:20:0a:23:3f:
                    11:56:0d:fc:88:79:da:7f:a0:24:4b:47:c9:26:79:
                    04:76:da:a2:04:d5:41:e6:0e:30:a4:2f:5d:dc:71:
                    62:a6:7e:2e:b0:7f:6b:a6:e0:c5:89:10:1b:e4:5f:
                    62:44:a1:ed:50:38:d0:d9:b6:30:56:45:25:32:06:
                    5c:77:e9:29:8c:11:e8:e3:06:03:1a:52:93:6b:c3:
                    45:f0:87:c4:ec:9f:80:a1:ff:06:d9:02:e6:56:7e:
                    42:f6:9e:ab:3f:95:67:e2:32:2b:fe:92:a5:12:c1:
                    cd:25:4a:df:f8:21:fb:26:1f:9f:d0:0e:1d:a9:dc:
                    10:99:c3:79:a8:7b:e7:65:73:b4:fa:ba:fc:b9:64:
                    ee:a8:54:65:cd:98:e6:eb:f3:33:ca:d1:6c:56:7c:
                    49:ed:11:4b:28:bc:e1:7f:be:e2:4c:38:8b:a7:47:
                    17:09:81:4f:cc:0b:0a:fa:0a:ad:2e:f3:20:1f:f3:
                    fc:07:76:3a:04:50:bd:52:5b:4d:85:16:03:2c:fe:
                    7a:60:5c:0a:3f:f6:df:55:db:71:64:a9:82:b7:b2:
                    65:a4:49:c1:0d:6f:47:30:f6:9a:6b:23:03:51:4d:
                    65:ce:e0:a8:29:25:33:d5:fa:c3:db:fb:a0:60:eb:
                    3d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9B:A4:FA:85:33:00:6F:22:57:65:71:D7:BB:D6:CD:8B:D2:95:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9c0dc3cd-fd64-39df-bbf2-ea974a51668a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:b600::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:6e:5a:fa:76:7e:93:48:91:fb:40:4f:cd:d1:c7:e3:49:36:
         84:08:80:fa:6c:77:4c:e2:e9:aa:08:5a:9e:6d:13:78:78:ca:
         ac:b3:f8:cd:7e:32:39:c6:60:4f:b3:91:96:5c:54:be:19:15:
         20:92:b1:bc:7f:3e:58:bf:51:c7:e5:8e:10:ad:c4:e4:4e:b8:
         8d:ca:74:fc:0d:29:37:b2:9d:10:ba:16:b7:9d:21:9c:ba:7e:
         58:17:a1:f9:d1:20:06:cd:56:9d:d0:22:40:4d:7d:18:b3:1e:
         7d:73:31:32:2b:bd:b9:9a:19:10:2b:eb:17:98:13:ce:21:14:
         fd:c5:0d:2c:35:74:11:f7:c0:36:db:fd:10:9b:2f:78:5c:10:
         ed:e8:9c:33:8f:36:d4:4d:e2:7c:28:a3:81:41:70:98:2f:0b:
         c5:78:cf:9b:3a:6d:0d:5e:72:b5:29:71:8e:64:32:93:be:6c:
         a1:e8:7c:bc:67:fd:90:66:17:b9:98:a6:0c:1e:50:d0:97:91:
         ae:43:07:2d:dd:8b:81:f3:28:dd:85:3d:b3:e0:61:00:cc:fa:
         5d:df:bd:0c:61:76:3c:f3:d1:68:c2:cc:f8:04:fe:b7:11:d0:
         c4:88:5c:5d:48:4b:1b:5e:a2:77:f3:3c:ad:bb:9f:0a:3c:67:
         b6:3f:97:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:08:50 2026 by rpki-client