Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b26ac4b0-9f5a-36c2-9c45-63614fda5ab3.roa
File:                     b26ac4b0-9f5a-36c2-9c45-63614fda5ab3.roa (raw, json)
Hash identifier:          r+a8raaWSjgMuzFuQIvZBPBpXf4Y+apYIssqaPkIgTg=
Subject key identifier:   D7:59:FF:D3:18:77:05:35:FC:4F:9B:8C:24:3A:29:0C:D0:32:E8:6B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E0435E594A9AF3EF5D6067348
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b26ac4b0-9f5a-36c2-9c45-63614fda5ab3.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     30036
IP address blocks:        2604:2d80:5d00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:e5:94:a9:af:3e:f5:d6:06:73:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=8b1e1a53-2498-4239-816c-46c392238ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:20:3e:74:00:86:81:b7:47:a7:20:33:42:7b:
                    d1:df:44:a8:3c:92:94:42:b5:9b:49:c6:96:88:4e:
                    0c:e2:91:6a:0d:e4:a0:15:23:eb:16:fd:2e:d3:d3:
                    2e:14:4c:c6:42:0e:af:6f:df:3b:fe:76:67:1e:f5:
                    4b:ef:d3:52:98:a9:22:80:82:03:18:ab:77:58:04:
                    90:6b:35:aa:a8:c7:0f:fd:0f:00:1b:f1:f1:12:9d:
                    62:70:fc:30:86:5f:82:2b:99:62:da:62:87:9c:88:
                    05:6f:d2:8e:46:fa:8c:99:80:03:b4:b9:42:8d:be:
                    08:2f:6b:48:e5:f7:51:69:8d:ae:f0:b8:49:05:02:
                    f6:42:b6:42:c8:48:66:42:be:a9:ff:d7:e0:e3:3d:
                    df:3a:56:9f:11:be:0b:a1:5d:20:54:59:85:28:fd:
                    a0:ec:23:bc:9b:be:49:b1:77:62:a1:8b:4d:65:5b:
                    5a:97:a4:9b:f9:ef:78:2f:04:fe:0a:79:76:47:c7:
                    78:27:65:82:97:37:a4:50:f5:f3:47:54:0b:64:8e:
                    e8:01:2c:df:1a:d3:c1:1b:de:0b:7c:4d:50:2e:8f:
                    bd:0e:75:1e:d7:59:c9:92:e6:1d:db:13:df:81:23:
                    a5:0c:04:c9:0d:e7:22:3f:ae:0c:bf:b2:96:1b:f2:
                    6e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:59:FF:D3:18:77:05:35:FC:4F:9B:8C:24:3A:29:0C:D0:32:E8:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b26ac4b0-9f5a-36c2-9c45-63614fda5ab3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:5d00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:2e:9d:40:59:7e:3f:45:7b:89:57:8d:21:cf:3e:e5:00:45:
         76:9e:dc:0a:5c:f3:f7:e5:ae:42:9f:9e:a3:82:a4:f8:1e:24:
         1a:90:da:fb:aa:25:a7:08:08:90:45:a9:e5:e4:83:66:9f:d4:
         1b:42:1f:27:c6:b8:6f:d7:9b:be:1b:5c:2e:18:28:20:c4:7c:
         09:0b:24:a2:74:e5:46:ca:3c:d9:70:e5:75:b8:7f:34:58:c0:
         21:b2:7a:22:bf:55:cc:4a:f7:45:68:a8:2b:ac:0e:57:d2:36:
         ae:5d:23:87:21:eb:f7:7c:48:32:f7:9d:c2:e8:28:2a:99:74:
         4b:1d:7e:87:fd:68:77:d1:55:52:06:9c:25:1d:90:a2:10:dd:
         07:7d:3d:ad:fa:e8:d2:dc:85:77:56:b3:e5:62:ab:eb:34:d6:
         d1:20:cb:0a:7a:d3:46:a1:fb:0d:f5:78:72:f3:e2:9a:5c:46:
         8f:ca:a9:63:e9:aa:b4:c5:e3:62:e4:2c:55:13:08:a4:ee:0f:
         65:77:8e:08:c0:c2:1c:38:11:58:0b:03:65:e7:d6:dc:e4:40:
         84:94:58:a5:2a:45:24:10:28:df:53:f0:05:e2:ed:e1:cc:f1:
         7d:ad:90:77:23:8b:49:7f:7e:bf:b8:47:ef:76:4d:51:0d:aa:
         43:b1:60:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:21:15 2026 by rpki-client