Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b9d49e71-6f4f-36df-b865-0a55f6c3abfa.roa
File:                     b9d49e71-6f4f-36df-b865-0a55f6c3abfa.roa (raw, json)
Hash identifier:          nisJwNxp3hN+ehuNbRWDfEVU/8eBvPKAdM5jZwj6uOs=
Subject key identifier:   2D:C7:B6:95:E5:20:E2:C2:95:B3:14:01:F6:50:A4:24:E4:1A:79:89
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DF0AB3BCA743D2BB6DDD950C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b9d49e71-6f4f-36df-b865-0a55f6c3abfa.roa
Signing time:             Sun 24 May 2026 13:00:30 +0000
ROA not before:           Sun 24 May 2026 13:00:30 +0000
ROA not after:            Sat 22 Aug 2026 13:00:30 +0000
asID:                     19905
IP address blocks:        2604:2d81:1780::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f0:ab:3b:ca:74:3d:2b:b6:dd:d9:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 24 13:00:30 2026 GMT
            Not After : Aug 22 13:00:30 2026 GMT
        Subject: CN=7b84ed8c-524d-4133-9bad-137562639ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9f:4b:46:fd:4e:d0:cb:b1:9d:31:96:8d:4f:
                    fe:64:3f:60:9a:b3:ab:11:00:7e:58:7a:08:50:ab:
                    0f:c8:e2:1e:72:58:dc:c6:a1:b3:7c:68:5d:e3:2e:
                    71:fb:e3:7a:02:a7:b7:f8:27:79:e1:ad:81:8e:61:
                    bf:ba:5c:be:ac:c4:72:0a:07:47:b3:f5:47:f5:38:
                    e8:ae:15:8a:c6:0a:b2:1b:b8:4a:2d:1b:67:8c:4a:
                    dd:ca:44:b1:53:84:2e:40:ce:42:be:05:39:df:97:
                    ec:96:6a:de:e7:e2:0a:fe:37:4b:e6:b1:63:93:b5:
                    f7:f4:ce:cb:15:3b:01:96:9f:77:61:3c:30:fe:fc:
                    50:12:57:93:fa:8d:e4:ce:5e:e6:33:c0:64:d3:63:
                    c1:ce:7b:f8:df:54:9d:83:e8:02:5f:59:28:e9:55:
                    56:aa:7d:be:f0:97:97:7a:b4:82:cc:82:17:31:82:
                    fe:fa:6e:c7:2b:42:63:99:fa:47:0b:62:14:94:a2:
                    78:f2:c3:19:5b:c1:4a:9a:e0:1e:c6:a0:86:3b:36:
                    99:2f:a1:cb:7f:3f:bd:d1:bb:5e:9e:d9:87:2b:f1:
                    79:bd:96:fc:a0:d4:d6:49:50:d7:db:a2:05:ff:ef:
                    f4:61:2b:46:54:cb:89:ba:97:68:64:57:d0:15:2b:
                    51:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C7:B6:95:E5:20:E2:C2:95:B3:14:01:F6:50:A4:24:E4:1A:79:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b9d49e71-6f4f-36df-b865-0a55f6c3abfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1780::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:c8:fa:0a:55:67:e6:cb:08:bd:8d:f6:15:a5:d6:60:23:40:
         70:44:0e:6d:65:fe:22:c9:87:98:11:f5:8e:96:a8:73:a9:30:
         15:25:70:97:8c:ac:d0:82:5b:7e:1c:e5:94:70:00:88:2d:82:
         22:25:7f:3d:9c:9e:fb:30:03:39:17:06:74:6a:ed:6e:36:38:
         7d:98:16:40:3b:dc:10:9e:d3:44:f1:e5:35:cd:81:53:68:9a:
         c7:65:38:20:84:a3:3c:f4:8c:05:46:4d:90:0e:68:92:66:a3:
         94:56:9a:06:29:e1:fd:7e:6a:c5:b7:a1:33:cc:3d:24:f1:82:
         96:4a:66:be:3d:6c:3d:1c:59:fa:74:a9:c7:a0:e5:6d:e2:1d:
         8f:fe:9c:39:6d:64:ac:33:a5:53:78:65:32:f6:12:23:71:55:
         1f:48:a9:04:44:2c:b6:bf:e0:c0:39:63:00:8b:b7:ff:79:72:
         55:f4:32:3c:18:89:d9:86:67:7c:d7:34:62:dc:6c:d6:ae:9b:
         1b:ba:6c:69:fb:66:a1:47:a9:fd:1b:7c:f1:32:66:1a:f2:16:
         94:6e:82:f5:92:41:43:3f:ac:e9:83:4c:05:87:a5:1e:f4:f9:
         a1:24:28:07:f0:67:98:e0:e3:af:23:6c:15:e7:e6:80:38:73:
         14:c3:c3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:27:14 2026 by rpki-client