Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bede0898-83eb-3351-ae2c-bc6f117a10d8.roa
File:                     bede0898-83eb-3351-ae2c-bc6f117a10d8.roa (raw, json)
Hash identifier:          NRfJ32g2yX6/jga6ee8ihkF/3G3F5Pv89hSI1ZQN5DE=
Subject key identifier:   EC:6B:91:13:A8:79:8F:50:CD:65:35:9A:2E:F5:6E:F6:2D:8E:24:06
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79BB99EF9479C79C34EBC40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bede0898-83eb-3351-ae2c-bc6f117a10d8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d80:f180::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:b9:9e:f9:47:9c:79:c3:4e:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e100977a-0966-49ac-8261-089c3280e270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:34:dc:c1:f6:22:c6:7c:0b:df:a4:56:e2:0e:
                    e2:84:cc:00:14:e4:08:4e:63:6a:b3:f0:33:96:60:
                    87:28:e7:04:50:98:82:99:73:20:69:a9:92:ba:c7:
                    e4:aa:c2:54:3a:64:9f:84:c0:6b:3a:34:aa:ef:7c:
                    e6:0e:99:bb:bd:61:80:9f:5f:16:53:ab:f5:fd:fe:
                    01:ce:71:70:58:10:8d:c8:77:df:10:fb:62:c4:5e:
                    08:27:cf:7b:30:0d:3b:7d:f4:9a:f3:d3:12:e1:c8:
                    9d:17:7a:ce:3b:0e:88:3d:ac:b5:d9:d6:12:50:3f:
                    99:d3:eb:c1:73:8a:5e:50:dd:ef:3b:65:db:e8:70:
                    3e:ee:f9:5e:a1:93:9a:b5:2f:cc:b8:c4:bd:8c:e9:
                    c2:8a:81:69:a1:20:fe:d5:43:17:34:09:d2:1a:70:
                    e8:4b:ce:2b:f7:7a:d7:31:cd:4f:bc:72:03:b1:ee:
                    64:4d:3b:f0:04:c9:1e:68:59:7a:4c:d4:a9:85:87:
                    de:45:96:c1:fc:15:c2:3e:0b:70:86:8d:e4:3e:6f:
                    9b:8f:79:e7:8e:34:d8:75:18:c4:09:bd:9e:b3:35:
                    64:8c:05:82:ba:c1:1b:19:3c:7d:02:55:d2:7e:2a:
                    f1:53:d7:71:f4:98:ac:de:6b:d8:a3:d2:2b:09:28:
                    18:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6B:91:13:A8:79:8F:50:CD:65:35:9A:2E:F5:6E:F6:2D:8E:24:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bede0898-83eb-3351-ae2c-bc6f117a10d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:f180::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:32:45:c8:b5:79:a3:50:77:51:99:69:51:6f:18:f8:ed:40:
         bd:0f:a9:12:a9:f9:19:6f:e5:f5:72:ea:1c:20:d0:df:b9:19:
         34:d5:d0:0c:3c:7f:ac:58:39:a0:89:ce:b0:ff:89:df:25:08:
         fc:4c:d1:50:9e:7a:e6:16:22:2b:25:38:1a:9c:5b:c4:5a:56:
         5e:7e:1f:75:ed:3e:61:66:f0:5d:0d:4a:b1:5d:fb:a3:e3:b5:
         8f:1f:e0:30:08:db:dc:8c:e0:d4:e0:66:c9:9f:05:1f:50:f3:
         e1:32:2b:37:12:bf:2d:9c:99:34:8b:b6:89:fc:bd:e3:b0:b1:
         75:c7:5e:b6:20:04:5f:15:fc:31:ae:37:5e:03:07:64:ae:91:
         6e:0c:3e:f0:7a:cd:da:3b:91:30:2f:b2:27:74:65:68:29:0c:
         72:32:f0:af:82:1a:93:f9:58:64:a8:3b:1b:82:dc:d0:f5:9e:
         fb:79:12:9f:a2:47:74:12:16:3a:19:bb:a8:46:d6:1e:46:c2:
         97:e9:a4:bb:74:18:2e:d0:5a:34:42:4a:29:83:25:f0:e6:9e:
         96:aa:e9:21:7c:19:d6:f1:ab:0f:20:8a:fe:b0:35:4f:92:b2:
         2f:f8:37:6c:51:29:71:ff:5d:fb:0e:60:98:c8:b1:fc:74:cc:
         3a:5e:74:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:53:02 2026 by rpki-client