Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db37c17f-050f-342f-aee5-a6889e623c6b.roa
File:                     db37c17f-050f-342f-aee5-a6889e623c6b.roa (raw, json)
Hash identifier:          hhCJ48IGWJXOzQvrIsZL6Obq/0A8xp6lDFzuR9/OMyQ=
Subject key identifier:   AE:18:1A:8D:7B:10:DA:43:F1:55:1D:EC:B5:C8:93:5B:C1:D9:50:D2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E043603CD06B421DB5F0AE480
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db37c17f-050f-342f-aee5-a6889e623c6b.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     30036
IP address blocks:        2604:2d80:db80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:03:cd:06:b4:21:db:5f:0a:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=493155b6-b26e-42d8-b072-635573d826f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:42:63:d2:e9:4c:29:ff:f5:89:e0:1e:d9:6b:
                    b8:5f:06:54:fe:0b:ad:82:5c:f9:a3:5d:57:d7:66:
                    b6:bf:91:b3:52:f2:b2:3e:04:bc:17:d1:0c:e5:a8:
                    8b:3d:bd:ec:88:ce:1c:bc:18:1c:e2:ac:ab:2a:e8:
                    57:b8:ae:d3:93:4f:79:0c:5e:70:e4:6a:75:4a:50:
                    82:cd:34:a6:8e:f1:62:0b:e8:d8:7a:f0:47:41:6c:
                    05:97:60:9b:bd:2c:6d:ca:ce:01:e4:0f:7b:d3:2c:
                    af:f2:f8:9f:f0:ed:6a:a6:42:6d:79:cb:b0:7b:31:
                    56:4d:f1:84:0b:85:fe:4c:cc:6e:53:83:05:45:76:
                    d6:72:26:95:05:b7:49:67:eb:fc:d6:0d:75:ba:ae:
                    73:7e:2b:d7:7b:1b:3d:90:b4:28:73:9f:39:c3:c4:
                    e4:c7:cf:fb:32:38:25:d6:fb:80:f0:7c:5d:57:8e:
                    de:87:78:a4:3e:c7:c9:73:22:ef:0e:cb:0b:b7:83:
                    b2:a5:f7:c6:bc:77:bf:1e:6b:28:66:b0:1d:29:f8:
                    6b:41:14:aa:f3:fe:bb:32:94:f6:93:f0:e6:b4:31:
                    22:b2:08:77:aa:6a:18:cd:73:28:84:63:73:13:45:
                    74:4e:71:9b:57:34:a6:2a:59:45:1a:f1:02:2e:86:
                    34:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:18:1A:8D:7B:10:DA:43:F1:55:1D:EC:B5:C8:93:5B:C1:D9:50:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db37c17f-050f-342f-aee5-a6889e623c6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:db80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:68:a3:07:79:ca:a4:1a:86:e3:63:16:a6:d3:f7:a2:9c:cb:
         b5:b6:9e:10:1a:4f:fb:e8:6a:aa:24:9d:96:1b:2a:b5:9b:b5:
         43:12:96:6a:22:2e:9b:55:04:6b:46:db:04:a3:81:e2:9e:1e:
         7f:3f:d8:fe:76:1c:33:e1:8d:5e:bd:dc:43:83:02:1a:7d:d5:
         e9:83:57:73:c1:4f:95:c7:72:ea:9d:28:32:59:e4:fd:ef:b1:
         fa:31:49:45:a9:26:75:66:31:43:1b:f1:89:82:ff:1d:80:e3:
         49:df:57:c5:f3:0f:7c:55:71:ac:c4:6f:5c:18:61:37:72:7f:
         e7:d2:72:fb:af:43:26:8b:46:7a:34:c6:d2:51:b8:8a:04:eb:
         91:e5:f1:17:09:22:25:8e:05:cf:10:01:52:4b:cc:ab:96:5e:
         d0:49:45:48:23:f1:40:f9:7e:dc:20:8a:29:23:ee:46:45:a2:
         8f:38:46:d4:1f:6f:60:39:bb:8c:e2:38:30:ef:0c:06:a8:9d:
         45:89:6c:3e:7e:58:55:56:0c:c4:cd:1b:58:c0:0f:b9:64:38:
         8e:e8:dd:78:34:b9:3f:65:71:e4:16:b4:f9:c8:f6:44:0b:07:
         16:e8:f6:bb:b2:4c:0c:d1:f8:10:24:e9:4a:fc:47:63:85:0e:
         a6:58:9a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:05:22 2026 by rpki-client