Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dbfded7d-8483-3c8f-90c7-055e325e3c7a.roa
File:                     dbfded7d-8483-3c8f-90c7-055e325e3c7a.roa (raw, json)
Hash identifier:          XvZ1jBSiEsft3adST5F3CBCQTwe1peCYcuIiVZFLvMI=
Subject key identifier:   A1:58:48:B5:FD:E8:EB:50:1B:C1:45:84:4E:1C:48:08:E3:4C:67:CA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F2C225974F247EB35A49534C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dbfded7d-8483-3c8f-90c7-055e325e3c7a.roa
Signing time:             Mon 14 Sep 2026 13:00:12 +0000
ROA not before:           Mon 14 Sep 2026 13:00:12 +0000
ROA not after:            Sun 13 Dec 2026 14:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d81:1f00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2c:22:59:74:f2:47:eb:35:a4:95:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 14 13:00:12 2026 GMT
            Not After : Dec 13 14:00:12 2026 GMT
        Subject: CN=1a98466b-39b1-4f21-9185-b152901fe6f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0a:23:4d:df:76:ec:da:22:59:3c:14:ef:75:
                    83:f3:1f:55:3c:d5:8b:75:fc:90:04:b5:b3:2b:4c:
                    77:77:f9:f4:44:76:bd:bd:0e:eb:6b:9a:9d:73:a3:
                    22:07:08:f1:30:cc:17:60:7e:46:f8:b4:7e:73:3d:
                    2a:61:c8:f2:98:81:88:cf:b3:19:80:7f:9b:cf:ef:
                    10:26:3c:6b:97:9e:d7:af:10:18:ad:db:90:ee:3e:
                    d0:c6:ed:e8:f1:75:9f:7b:70:8d:07:85:61:2e:34:
                    bd:19:42:5e:0b:7e:97:6e:48:48:b4:7d:59:a8:ac:
                    68:be:23:65:30:09:a8:b3:cc:f2:f1:aa:7e:cb:d0:
                    8b:d5:03:da:d7:28:a5:8e:fb:92:6e:c1:07:ed:a1:
                    02:d8:b5:61:16:fa:dc:f7:49:5d:87:82:00:eb:fa:
                    1d:b4:e8:b7:71:c0:0d:85:82:f2:52:78:4e:84:7b:
                    0b:a6:99:15:fe:00:86:58:68:57:8a:4d:96:9b:14:
                    f9:ff:13:1a:f8:e1:83:88:fc:8a:19:bc:df:35:04:
                    38:b7:46:c2:05:23:00:4e:e9:6a:ed:1f:9b:f9:dd:
                    6a:ba:c4:2a:5a:1a:d5:53:96:1a:13:92:35:cd:c0:
                    52:62:99:d5:2c:a0:a5:d9:91:42:38:bc:44:13:34:
                    6d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:58:48:B5:FD:E8:EB:50:1B:C1:45:84:4E:1C:48:08:E3:4C:67:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dbfded7d-8483-3c8f-90c7-055e325e3c7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1f00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:3e:20:8a:99:87:ac:36:14:40:2f:d8:64:22:a0:59:43:92:
         8e:e1:16:30:8e:fa:03:bb:28:c9:93:ae:fc:21:91:54:f7:50:
         0d:30:46:2c:f4:2d:b7:3c:a1:1e:cb:79:12:a8:b3:25:74:11:
         83:b2:51:e9:83:01:5e:72:55:d7:29:a8:41:2e:19:15:25:61:
         67:cf:a2:30:8f:00:15:a9:39:d4:a0:a9:a7:e6:65:c8:8a:6c:
         31:99:2a:00:4c:12:b8:b4:24:24:0b:d5:c4:b9:17:7b:29:a8:
         45:a8:5e:2d:38:92:13:5f:15:5a:5b:68:95:44:1a:1b:b0:38:
         cf:e0:ff:0b:d2:5e:ec:29:fc:9f:af:1e:be:a0:cc:7e:4c:fd:
         3f:37:60:60:88:7d:5d:c4:62:11:83:f1:38:07:cd:6d:3d:3f:
         47:e4:11:48:8c:aa:7a:47:68:9a:49:6c:5c:ed:00:43:d6:ac:
         d7:80:bc:e6:57:4d:8f:6b:72:53:08:d8:87:80:59:44:70:95:
         8f:cf:02:d2:09:2e:8c:db:78:24:63:a9:dd:f3:a1:c4:31:39:
         48:39:3e:07:98:69:be:78:03:67:16:14:42:ca:d8:da:68:6b:
         8b:c7:87:26:26:03:26:4d:94:8e:88:88:7f:4b:58:de:b3:18:
         cb:53:80:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:41:00 2026 by rpki-client