Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf086877-6111-3575-a311-6f4e03f0d49b.roa
File:                     cf086877-6111-3575-a311-6f4e03f0d49b.roa (raw, json)
Hash identifier:          O6x2h6abfkdJkYX1QXtBJfU5PPw4oo54j7NJ+lYEB0k=
Subject key identifier:   32:A6:10:41:2E:BB:00:69:F5:3B:AE:CC:0F:65:15:7B:09:73:41:1B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D703FD8D58B885A78BDD60280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf086877-6111-3575-a311-6f4e03f0d49b.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     19905
IP address blocks:        2604:2d81:2600::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:d8:d5:8b:88:5a:78:bd:d6:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=7378cca9-3124-46f0-9205-836526815289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:69:f3:6d:61:0e:af:62:a4:dd:f7:31:29:f4:
                    3c:3b:7a:40:a6:f3:71:0d:b9:5c:7c:ba:96:fb:21:
                    6a:4a:93:b6:d6:d4:3e:01:31:a4:fd:9a:d9:bc:4c:
                    1b:a7:76:61:ba:c0:b4:ea:d6:21:e0:3d:bc:fc:d2:
                    b8:1f:1e:58:38:8d:5d:e0:6c:70:47:4c:ec:08:04:
                    59:39:5a:3b:95:b4:13:99:fa:1b:a3:e0:b1:e6:b0:
                    cd:7c:76:ee:ca:c2:59:d4:b9:d3:9d:26:5c:a9:1a:
                    42:66:f1:9e:7c:a0:e7:74:0e:66:10:d4:dc:a9:38:
                    88:85:2b:1a:65:4d:0d:c3:e8:33:34:a1:3b:87:a9:
                    3b:c9:23:3c:fe:07:d4:53:c0:37:9e:4c:ab:3b:b6:
                    36:aa:25:a1:47:3f:0e:aa:32:b5:ae:e7:ca:3d:29:
                    99:24:26:cc:63:d5:08:ad:29:92:21:ac:6b:3e:52:
                    29:6f:20:69:66:0d:9d:d9:1e:0f:04:ed:d4:68:99:
                    33:8b:7d:73:e3:21:6a:a0:86:af:2e:97:a4:a6:6e:
                    2b:8d:ab:02:70:7c:1d:c0:92:11:84:73:94:c0:24:
                    f1:e6:8c:6d:eb:b9:79:9e:64:63:5f:b4:5c:eb:c5:
                    bb:85:13:4d:cd:01:85:b0:45:df:30:3d:34:1f:a1:
                    0c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A6:10:41:2E:BB:00:69:F5:3B:AE:CC:0F:65:15:7B:09:73:41:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf086877-6111-3575-a311-6f4e03f0d49b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:2600::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:53:d8:80:c0:e0:2b:c5:8e:b5:91:84:32:23:c5:fe:f3:28:
         71:ff:93:60:ad:1e:b1:e3:c9:10:1e:e8:c9:e6:fd:a2:3e:8d:
         75:4c:6e:9c:6a:65:aa:a8:ce:06:a0:6a:69:a0:67:62:c9:9a:
         8e:9a:6b:b7:de:84:37:57:24:2c:7f:83:65:31:7e:30:ad:f6:
         4b:00:ad:1c:2b:bc:09:4d:14:59:0b:65:b4:2d:c4:35:d2:19:
         6e:48:bc:2f:42:46:cb:10:3f:ec:61:df:d2:c8:d0:0d:d7:f2:
         5f:d2:79:c5:1f:b2:c7:d6:85:b5:41:a1:22:ed:c2:6a:45:2a:
         4e:b0:bc:91:42:e2:fe:69:54:cd:a5:5f:04:51:1a:3c:ca:cc:
         84:9f:21:46:b9:86:85:c8:6b:e4:f8:9b:63:38:d0:57:ea:3e:
         3c:fa:74:d2:d6:7d:8a:31:81:1b:c0:80:4b:2f:29:fe:51:f1:
         f5:59:dd:e4:aa:7f:ab:8c:e7:3d:4f:26:d5:f0:cc:c0:7f:0a:
         17:08:2d:a8:3b:b2:3f:8e:00:73:4b:44:ff:6b:86:39:c1:ce:
         86:bb:ab:0d:5a:bf:14:87:20:ee:34:39:f8:f1:d5:4e:78:3b:
         f0:7c:c7:86:8d:16:21:5c:5d:d4:30:8a:4e:87:3d:42:50:8e:
         95:dc:38:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:16:02 2026 by rpki-client