Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3c261db-4bd8-3b97-89f3-6df1b8940f6b.roa
File:                     a3c261db-4bd8-3b97-89f3-6df1b8940f6b.roa (raw, json)
Hash identifier:          K66TvAif3j+vwiT61ktGyWjrvMvi7IjJLgnB828BJKY=
Subject key identifier:   F4:8C:88:3E:81:AA:FA:11:BE:DB:6A:83:2B:9A:5E:E0:CE:CD:15:1D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CEDCFF4339404721EEE495000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3c261db-4bd8-3b97-89f3-6df1b8940f6b.roa
Signing time:             Fri 20 Feb 2026 19:40:13 +0000
ROA not before:           Fri 20 Feb 2026 19:40:13 +0000
ROA not after:            Thu 21 May 2026 18:40:13 +0000
asID:                     19905
IP address blocks:        2604:2d81:300::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:cf:f4:33:94:04:72:1e:ee:49:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 20 19:40:13 2026 GMT
            Not After : May 21 18:40:13 2026 GMT
        Subject: CN=73b177fe-39ed-42c6-8576-8c0ae677e7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:04:98:10:51:5e:c4:a4:99:ca:27:6a:e4:d1:
                    5d:f2:ee:b4:61:08:01:8e:36:2d:90:f7:ef:45:b0:
                    8d:c8:5c:f8:eb:f5:9e:8c:37:8d:87:2c:0a:2b:a5:
                    fc:10:7c:7a:54:ac:73:0f:ec:b6:ed:8b:31:7b:8b:
                    81:94:6a:53:a8:f8:ec:48:78:8d:d2:69:34:d6:c0:
                    64:b4:e7:34:06:31:ab:e8:63:ae:3f:4a:d2:80:b3:
                    95:49:4f:a3:84:c9:fc:d4:ae:9f:98:c0:db:98:c4:
                    bd:e7:0b:28:4f:73:88:6f:b2:d6:ae:82:46:0a:b7:
                    bc:12:b2:54:94:0d:f9:10:db:9b:42:23:7b:52:92:
                    b8:f0:9f:3b:39:cd:8e:0f:ce:fb:fa:7b:e5:45:a9:
                    a8:01:71:da:1f:86:5d:5d:85:36:1d:77:df:bd:96:
                    4c:17:a5:13:ef:6f:fe:b6:0b:c0:ff:c7:23:fc:14:
                    49:09:ff:55:2f:58:0c:2a:1e:04:68:65:39:f6:80:
                    a8:f7:5b:5a:86:b8:a3:3f:32:95:4d:85:79:1b:2a:
                    c3:cf:ac:3b:03:80:a3:a8:7b:b9:88:7d:49:15:7b:
                    c2:6e:24:60:12:34:0f:6d:20:66:7a:f3:d0:ca:f1:
                    16:78:ae:4b:fc:2b:b3:86:0f:28:34:c0:24:4e:d2:
                    d2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8C:88:3E:81:AA:FA:11:BE:DB:6A:83:2B:9A:5E:E0:CE:CD:15:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3c261db-4bd8-3b97-89f3-6df1b8940f6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:300::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:b8:c7:ab:de:ac:ec:22:d8:38:bc:32:78:6f:3f:3c:cb:a0:
         79:2f:a6:92:94:82:25:f8:61:5a:0b:db:8d:ab:a0:80:01:b6:
         8f:55:b8:c1:20:98:6b:02:b9:8c:fc:f5:77:92:7e:8b:51:74:
         3b:ef:f6:69:9d:8d:db:29:a7:83:c8:0b:b6:35:e3:34:5b:c1:
         38:23:49:b3:1d:90:18:09:21:9f:d7:28:2c:3c:20:b4:26:ab:
         4d:fb:9c:da:17:22:eb:3e:46:27:fc:be:1f:3e:3a:ee:a8:d5:
         1c:63:56:72:7f:fa:b3:8a:80:e3:27:0e:4a:7e:61:bc:66:e6:
         f1:36:87:fd:e5:79:23:b9:73:bb:89:f6:89:ac:b2:4f:fb:86:
         ef:cf:89:0f:54:cc:39:24:7a:26:f7:ff:39:c0:b6:e6:49:73:
         78:fc:60:7b:df:cf:0a:a6:4e:2d:94:ac:91:89:f6:35:8f:b8:
         3b:ab:36:d6:db:7a:45:6c:ab:7a:00:86:d7:6d:57:0f:46:ad:
         93:9e:7a:66:be:03:37:0e:ae:6b:ec:54:e5:93:27:1b:4a:b0:
         c5:7a:c1:a2:73:3b:65:7b:a5:47:72:4d:57:fe:b7:f1:11:c1:
         e6:c6:fd:86:ab:d6:6f:48:c2:1e:7a:9e:55:10:80:f9:22:1e:
         87:87:1a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:53:45 2026 by rpki-client