Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aed558aa-edfb-3843-81dc-08c64632ee56.roa
File:                     aed558aa-edfb-3843-81dc-08c64632ee56.roa (raw, json)
Hash identifier:          QqB0Ut3C+3coMKStBzTitDDt+HZ+hMHhlKNqfV8YlNY=
Subject key identifier:   7A:D6:D0:66:47:A4:5C:91:C9:B4:1F:B3:40:23:4E:2F:FF:89:CC:E1
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F30528F634B376EC1D5317000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aed558aa-edfb-3843-81dc-08c64632ee56.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:a000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:8f:63:4b:37:6e:c1:d5:31:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=2423c91f-30bc-48ee-a9ac-b32aefe9c027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b6:5c:0d:1a:9d:f3:b3:ab:d9:18:77:fe:ae:
                    2f:42:62:ff:0c:d5:1c:92:e4:6b:e1:ac:db:33:93:
                    a9:83:47:6b:63:e1:fe:8d:0e:31:1b:81:00:b3:58:
                    f7:94:e6:53:2e:91:51:d0:f9:2d:4c:c8:83:06:83:
                    2c:fd:bd:10:6d:be:53:05:ca:60:90:54:d7:ab:12:
                    ae:00:c3:b0:81:2c:9f:3e:4f:c1:4b:e4:38:ce:aa:
                    f9:ef:93:1d:9f:e8:a4:1e:74:5a:eb:a2:a8:ca:4f:
                    99:5e:97:44:77:e9:93:32:f9:9c:8f:e0:10:eb:75:
                    3c:8c:70:91:73:36:dd:73:b4:13:db:16:d5:2a:20:
                    b0:81:53:f4:81:d0:fb:35:b0:25:fc:5b:31:b7:3d:
                    ce:91:13:e4:46:04:cf:09:ef:6a:b6:fd:8f:0e:cd:
                    d0:fd:50:6f:ac:25:2f:51:99:1b:04:07:c4:32:32:
                    8a:6c:43:4e:06:d8:28:5b:cf:ea:c2:1e:63:29:c0:
                    d5:48:cd:83:12:3b:39:91:93:4c:2e:49:75:68:5b:
                    82:e5:0f:94:11:b5:f8:06:22:c4:b5:a6:19:88:ef:
                    af:10:01:3a:3b:7d:33:e4:01:e3:53:8a:1d:66:f0:
                    2f:42:40:6c:ad:bc:fd:a6:1c:25:6c:04:61:f4:12:
                    4e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D6:D0:66:47:A4:5C:91:C9:B4:1F:B3:40:23:4E:2F:FF:89:CC:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aed558aa-edfb-3843-81dc-08c64632ee56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:a000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:05:49:62:3a:05:1f:d1:eb:93:08:25:f3:79:e4:46:be:09:
         49:f1:49:11:52:92:f1:43:84:a2:3b:8a:25:8f:a9:9d:c2:24:
         25:2f:b5:53:b2:2b:e6:e5:75:5b:de:86:d1:89:a9:c1:cf:e7:
         2e:41:37:a8:40:ef:1f:34:8f:c3:7f:6e:b2:51:5e:ff:6c:b5:
         36:e4:f9:f5:96:21:f7:43:79:3c:86:d0:18:de:f8:8f:4a:54:
         b7:dc:25:40:47:93:e1:5b:e8:ab:85:36:37:93:d9:dc:32:55:
         22:d8:f0:a4:f0:10:27:c0:38:5f:92:a6:ee:65:e6:cb:67:2a:
         91:65:42:10:64:c0:58:86:73:87:9b:2c:d0:b1:b0:01:73:db:
         98:fd:48:96:9e:fb:fe:c7:f9:b5:5a:1f:e1:6f:31:d2:0b:4d:
         9a:4c:ee:c2:7f:fd:09:1c:10:3a:3d:a6:c3:40:d3:59:af:f1:
         61:7f:3c:fd:ad:41:7e:08:f3:da:fe:76:ac:d2:8a:18:d1:1f:
         b7:b3:f0:a6:12:ba:bc:db:df:ad:80:d8:02:25:0c:5c:dc:1d:
         6a:66:54:a3:36:28:2c:34:67:30:44:02:3c:d9:aa:2d:03:2a:
         4b:5e:cf:11:38:42:87:f0:2f:78:22:46:06:7f:d5:04:e5:eb:
         ab:a4:36:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:33:54 2026 by rpki-client