Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b21d6727-3f00-3161-a176-3b74158a3ade.roa
File:                     b21d6727-3f00-3161-a176-3b74158a3ade.roa (raw, json)
Hash identifier:          GaqTDVxFWLxVKxXK5DAg9xzUBB3bh3fzk1qav0B5R/M=
Subject key identifier:   39:4C:7E:C7:4D:FF:A2:E3:17:F0:29:3B:5C:04:1E:A6:B2:58:6F:1D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F49745CC429DD5E1D19D97B00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b21d6727-3f00-3161-a176-3b74158a3ade.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d81:f80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:5c:c4:29:dd:5e:1d:19:d9:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8c116ad6-bf31-4f96-91b1-6492c8122d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a3:6b:31:cb:b8:34:b8:62:8a:8b:11:56:0b:
                    ef:5e:8c:db:3b:79:7e:21:d0:d7:ff:a9:fd:69:5b:
                    40:e8:38:4c:6e:a0:68:1d:90:e7:17:36:2d:48:a6:
                    a8:cc:b5:5c:2e:62:fb:b9:f8:70:8b:e6:c6:19:f5:
                    b8:73:b3:09:7d:97:41:af:7f:14:3b:dc:bd:d1:02:
                    d2:24:79:c7:81:56:9e:b2:bc:70:5f:29:0f:95:40:
                    ed:18:9b:6a:61:39:81:8d:2d:3b:14:9d:4f:4b:54:
                    11:94:3d:c8:45:f0:b5:80:14:f7:cc:4a:0a:18:0f:
                    76:4d:ee:02:48:20:00:0b:11:6b:81:64:c2:3f:62:
                    78:bf:1e:e2:75:15:be:4e:1a:92:0e:4f:37:00:4b:
                    e1:3e:e3:de:9e:b1:8d:45:4d:42:58:1f:03:65:9a:
                    6e:e9:d0:a0:d9:84:d5:67:8c:4d:8f:e7:cc:21:88:
                    52:15:61:fe:11:5d:85:80:2d:e1:74:5f:61:cb:ee:
                    98:d0:00:d8:e7:1e:8c:bc:28:db:55:49:ce:ac:52:
                    af:44:68:77:67:e6:27:6a:0a:ab:76:0d:cd:f0:29:
                    a3:28:56:b7:8f:0f:bd:f1:a4:d2:e4:92:31:f5:4f:
                    9a:b3:f2:7f:94:80:4d:cb:0f:5f:df:22:92:e8:c9:
                    a4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4C:7E:C7:4D:FF:A2:E3:17:F0:29:3B:5C:04:1E:A6:B2:58:6F:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b21d6727-3f00-3161-a176-3b74158a3ade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:f80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:b1:31:13:d2:23:d0:d8:ae:25:1a:99:d5:e9:a4:98:1f:3c:
         b9:92:1e:27:36:2f:ab:51:81:25:b5:55:01:74:71:c2:ef:22:
         af:54:0b:db:3c:92:c4:0d:a7:65:17:3b:63:e5:ad:05:a5:fa:
         80:9e:18:16:1e:e7:59:c5:06:da:15:6a:5b:df:a7:60:73:4f:
         b9:d4:28:4c:8a:57:f0:bb:ce:fc:9a:9c:5f:6b:60:f1:da:ac:
         f5:0c:1d:f2:82:a7:70:c4:66:35:c7:b5:cd:d6:11:b7:e2:c1:
         29:e0:0a:6e:86:56:33:36:b3:56:b0:e4:3c:0e:f1:1a:f6:32:
         92:75:cc:14:db:ca:5c:b1:9e:94:56:b8:91:5a:2a:f1:0f:52:
         d3:e9:c5:27:4d:eb:71:3c:5a:f1:dd:75:b2:9a:fa:50:2f:7a:
         be:cc:18:18:dc:74:21:19:dd:52:92:9b:fa:80:97:fc:60:6a:
         ed:32:c1:e8:9c:08:b1:98:80:dc:a8:3c:fe:56:c7:36:47:40:
         48:76:08:db:31:09:cd:25:f8:a6:62:80:8b:31:4c:b7:24:7d:
         43:6c:40:2e:36:dc:d3:e4:40:05:49:57:a5:e4:d7:96:55:5a:
         c4:3c:42:b1:8c:22:d2:12:29:d5:50:db:38:51:e6:e8:f9:9e:
         a0:5c:66:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:24:29 2026 by rpki-client