Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d91f8734-fd0a-3e54-b04c-f7eac9e90e50.roa
File:                     d91f8734-fd0a-3e54-b04c-f7eac9e90e50.roa (raw, json)
Hash identifier:          GJXoqt0N93pkK1E8Wb3PlxHyuc1kClET/nUxn1f8bVg=
Subject key identifier:   48:96:97:96:F0:19:C2:08:F9:B4:84:FA:D4:87:61:7E:49:5A:EC:77
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E1B798BEB8261E0C00E21D980
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d91f8734-fd0a-3e54-b04c-f7eac9e90e50.roa
Signing time:             Mon 08 Jun 2026 21:00:12 +0000
ROA not before:           Mon 08 Jun 2026 21:00:12 +0000
ROA not after:            Sun 06 Sep 2026 21:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d81:780::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:79:8b:eb:82:61:e0:c0:0e:21:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  8 21:00:12 2026 GMT
            Not After : Sep  6 21:00:12 2026 GMT
        Subject: CN=4a3c3d10-3a11-408f-91b3-b0096b37d6f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ef:8e:75:56:b3:06:d7:2d:81:a3:2b:ed:62:
                    74:80:56:07:eb:58:9c:77:69:79:50:65:68:48:87:
                    a4:5c:29:ba:7f:14:20:35:e4:08:99:6f:58:cf:e8:
                    8a:83:ee:ef:ec:21:30:18:ab:49:d1:94:09:b5:46:
                    ec:4d:70:c3:05:38:4f:87:b5:e6:f5:5e:e8:75:95:
                    d6:05:e9:cb:62:e7:b3:4a:73:d2:3a:6c:01:45:dd:
                    b5:d6:7d:56:f8:62:75:03:88:49:20:1d:c4:4f:62:
                    2a:bb:e6:c8:86:60:f0:5d:ff:bc:e2:3c:bb:db:cc:
                    cf:7a:5c:44:26:00:c8:94:4d:63:4b:5b:fb:d8:00:
                    81:a3:58:1f:9f:f9:11:62:d0:55:d1:b2:7f:56:c6:
                    6b:80:f1:8a:fe:67:6f:9d:cc:28:e4:45:46:b5:f9:
                    f7:59:0d:d9:b8:58:6d:24:9e:25:3a:2a:7b:44:2a:
                    c9:16:87:5c:bd:c4:fb:db:5a:d7:c3:ea:74:51:75:
                    82:77:b7:40:4f:f9:3e:4d:18:7a:d5:b6:20:fb:d3:
                    33:de:2d:92:07:ea:10:e1:52:b3:24:3a:81:0d:69:
                    b6:00:b3:bd:a0:c5:e9:58:d6:8d:23:d3:b5:f0:5f:
                    55:25:fc:90:fb:ae:ab:08:22:e9:f0:07:21:b8:ad:
                    91:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:96:97:96:F0:19:C2:08:F9:B4:84:FA:D4:87:61:7E:49:5A:EC:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d91f8734-fd0a-3e54-b04c-f7eac9e90e50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:780::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:4c:76:be:02:a2:ea:bd:2c:43:00:e9:6a:f9:8b:12:34:fd:
         5f:dd:f9:fc:d8:83:6e:d0:fe:ca:c6:59:c7:09:1c:76:b1:3a:
         0c:dc:65:ec:d9:76:41:3e:2e:7a:ba:8b:80:bf:37:2f:13:ac:
         48:d6:0b:83:d7:d7:e7:b3:07:47:a5:a2:64:4d:f8:58:80:4a:
         1a:7c:bb:cd:d7:d0:72:c0:34:b4:24:c1:e2:0f:c0:c6:87:18:
         4d:f6:d9:8e:29:e4:87:a9:b5:d9:9f:2f:46:3e:a2:af:12:21:
         24:09:e9:39:5c:d0:a9:2c:60:3e:18:19:f9:e6:a9:d6:a9:d7:
         ec:cc:36:97:91:6d:6f:a4:94:11:bf:44:12:c6:c8:4c:b6:f9:
         b0:58:61:49:d5:1f:77:86:1c:1f:d3:17:5d:4e:b8:e9:8c:47:
         9d:e7:67:f4:01:64:d5:ae:1b:17:92:c2:87:63:e1:a6:8f:60:
         dd:67:0d:0d:fd:10:9a:8b:d2:38:41:64:d7:1d:c8:cf:c3:cc:
         25:8d:01:d8:15:e1:55:55:c9:17:75:4d:32:4d:4b:c8:ac:94:
         db:8f:cb:28:1b:08:a1:a6:bf:ae:fc:2d:14:bf:05:2a:18:85:
         77:ed:9e:d8:04:db:b0:b1:81:76:61:2f:c8:7a:5b:c6:8a:e1:
         87:7b:e0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:14:45 2026 by rpki-client