Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2d41f98-9eee-3499-b86c-07be5f0741f0.roa
File:                     a2d41f98-9eee-3499-b86c-07be5f0741f0.roa (raw, json)
Hash identifier:          auOxzvWc81gah/5LhEo4BmROj0ajOGK0S2DK954pfrw=
Subject key identifier:   AF:6A:4C:7C:0F:06:30:16:2C:D2:9C:C7:0E:07:17:4F:E6:24:66:D3
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CACF1DABDE41F885923239300
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2d41f98-9eee-3499-b86c-07be5f0741f0.roa
Signing time:             Wed 28 Jan 2026 14:00:36 +0000
ROA not before:           Wed 28 Jan 2026 14:00:36 +0000
ROA not after:            Tue 28 Apr 2026 13:00:36 +0000
asID:                     30036
IP address blocks:        2604:2d81:2d00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ac:f1:da:bd:e4:1f:88:59:23:23:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jan 28 14:00:36 2026 GMT
            Not After : Apr 28 13:00:36 2026 GMT
        Subject: CN=7adf5bbf-4532-4b09-ba18-4251b07be009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5a:8a:4e:3f:d0:3a:a4:de:91:b2:87:a2:af:
                    6a:8a:ae:98:63:7c:ec:b0:46:dc:af:43:1d:a1:1a:
                    d5:2d:ab:92:d1:02:8a:96:83:c2:11:a8:db:fe:c0:
                    1d:6a:ab:28:96:5f:1a:13:ea:3c:4a:ac:cd:cf:1a:
                    f5:45:ea:82:9b:39:97:71:ff:7e:81:d3:19:ad:9b:
                    a0:de:3e:ec:ed:ca:6a:e3:e1:3b:06:c6:01:ee:ff:
                    fd:a5:81:d1:15:05:01:20:c7:c1:cb:a5:fe:5c:de:
                    03:87:01:df:e6:ac:09:3a:9c:76:7a:68:e4:56:04:
                    36:5d:a6:61:33:30:fd:09:44:47:c4:e6:ee:40:05:
                    29:fc:de:ba:ed:fb:da:54:ca:28:77:6c:0f:a8:e0:
                    0e:64:cb:2c:ea:22:7d:fb:69:1e:ad:f6:f0:d6:39:
                    e5:15:fd:c3:22:e1:a1:97:8e:2d:12:89:35:cc:ed:
                    48:b9:3f:92:00:28:10:fa:30:9a:8d:74:b3:c7:e6:
                    b4:d8:4b:12:9b:8d:04:d0:c0:7f:3e:db:8c:e2:4d:
                    b3:d4:b2:9a:f2:89:e0:21:7a:e3:d5:32:ff:63:a4:
                    06:91:1c:75:f3:c1:0d:7b:d2:6e:fa:e0:39:d7:03:
                    51:11:f3:7f:7c:7c:44:6c:d1:79:dd:0b:89:a4:20:
                    b2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6A:4C:7C:0F:06:30:16:2C:D2:9C:C7:0E:07:17:4F:E6:24:66:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2d41f98-9eee-3499-b86c-07be5f0741f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:2d00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:21:ce:0a:a6:1e:bd:29:42:69:11:8e:44:ed:0c:af:71:1f:
         4a:1d:2b:b8:f3:cf:e1:ed:61:3e:91:5a:a7:08:1d:62:e4:d7:
         90:ba:b1:21:6d:ab:9e:31:2e:70:f3:57:59:4a:00:6a:6b:7f:
         42:ad:7b:9d:7f:6e:38:be:3e:8d:53:1a:19:67:f9:eb:00:97:
         32:f0:43:e0:5a:20:d4:76:9a:26:c9:e1:08:25:ca:d8:73:ba:
         55:c7:b7:34:fb:a0:34:3f:f3:85:f1:a8:40:a3:fe:fc:cd:0d:
         b6:4e:6d:56:ba:14:53:3f:67:f4:db:46:35:73:47:f6:99:7a:
         e8:90:41:a6:cb:f7:89:a1:35:e7:14:f3:08:2c:29:71:3d:ef:
         f6:12:2c:17:54:ad:39:e3:91:1b:ad:4f:ae:4c:51:3b:ab:82:
         63:8d:bf:e2:a6:dd:33:4e:dc:33:de:79:53:33:a9:94:a5:15:
         5c:43:4e:fd:fa:fb:6a:2d:f0:ad:8c:04:b9:23:dc:92:57:db:
         30:26:b4:48:5b:50:b5:b9:26:69:70:e7:ee:bc:c5:e2:fe:f5:
         d1:23:72:ce:0f:82:de:43:85:f0:5f:58:c7:d5:ec:32:76:8d:
         26:0c:a2:57:fd:b9:e4:bd:1b:2d:9b:8b:10:05:c8:fd:d2:ee:
         2a:8a:c0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:21:51 2026 by rpki-client