Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc00a054-d75e-3767-8659-c79f11ab6848.roa
File:                     dc00a054-d75e-3767-8659-c79f11ab6848.roa (raw, json)
Hash identifier:          F+6HTUXh/+E0D2laO1C1OKZRoGHy9tYt72yPEqs6ptU=
Subject key identifier:   B3:42:2F:C6:C5:A9:3B:BC:C3:28:7E:50:53:4B:FF:61:0F:8E:0E:44
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E016B4F0FE42D4C354E973B00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc00a054-d75e-3767-8659-c79f11ab6848.roa
Signing time:             Sat 30 May 2026 13:00:10 +0000
ROA not before:           Sat 30 May 2026 13:00:10 +0000
ROA not after:            Fri 28 Aug 2026 13:00:10 +0000
asID:                     19905
IP address blocks:        2604:2d80:1180::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:01:6b:4f:0f:e4:2d:4c:35:4e:97:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 30 13:00:10 2026 GMT
            Not After : Aug 28 13:00:10 2026 GMT
        Subject: CN=9df9f315-b0e0-47b1-bd23-7976546b2dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:75:96:78:cf:1f:19:f7:50:29:05:2f:c9:94:
                    4e:f8:3d:45:8b:43:c9:5e:a9:89:71:42:4d:4c:49:
                    96:82:94:51:cf:b2:1d:19:ae:82:c2:6a:bc:16:05:
                    90:c1:5b:05:64:10:0f:89:ed:ca:da:f7:e0:8e:1c:
                    16:6d:78:c8:fc:81:cb:a2:59:c1:f0:f1:36:32:51:
                    a8:5f:24:9c:b4:7e:8e:a6:49:2e:7e:fc:89:a0:00:
                    b6:38:45:42:4e:4f:a5:36:e7:86:df:eb:67:6f:6e:
                    fc:9d:e8:fc:e4:56:68:bc:7d:c9:a6:3b:60:87:1f:
                    96:f2:46:41:a1:41:e9:08:8d:34:92:84:0b:e5:6e:
                    24:e1:9e:74:1b:af:91:94:48:4a:e2:af:ec:3f:73:
                    f6:77:b9:a2:a4:16:22:5b:ea:91:f1:12:08:cd:39:
                    6b:2f:96:59:6e:bf:3f:06:ab:30:a5:ba:e0:64:eb:
                    8a:5a:18:6f:c9:b1:36:bb:79:17:10:2c:04:d8:ae:
                    0a:d8:58:56:00:03:6b:42:0a:03:27:a5:5a:c1:94:
                    58:b1:62:d6:0b:2f:8a:16:87:2d:2c:bc:92:47:6f:
                    a2:cc:38:ef:e7:e4:fe:4f:78:56:90:3c:b7:e7:1f:
                    ab:40:e8:5b:18:bc:62:ac:cc:c8:2d:40:2a:f9:65:
                    1a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:42:2F:C6:C5:A9:3B:BC:C3:28:7E:50:53:4B:FF:61:0F:8E:0E:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc00a054-d75e-3767-8659-c79f11ab6848.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:1180::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:63:ea:62:35:04:5e:37:e8:64:9f:b6:ae:90:c9:ba:c0:4e:
         9a:0f:79:be:8e:ac:ab:25:f4:8a:d3:81:0b:b1:26:c5:2b:0f:
         6e:e9:d4:0e:d4:29:2e:92:d2:8e:c5:1c:1b:da:ad:d2:ee:24:
         e7:13:55:af:d8:5d:9a:35:1e:9d:d2:9d:1b:c0:c8:93:60:68:
         78:33:e0:dd:bb:61:62:69:2f:c1:9c:b7:5d:3c:02:0a:db:b8:
         90:1a:17:5d:88:72:16:dd:7f:07:46:61:54:4e:0e:cf:0c:f5:
         b2:57:c0:e9:a6:22:57:39:3d:5a:9b:9b:33:d1:18:25:01:69:
         2e:d9:65:43:68:0c:1a:06:27:80:08:76:1c:e6:26:00:bf:fa:
         85:e6:c5:25:1d:76:17:7b:34:d3:09:b5:5f:6b:48:c5:d3:bb:
         e6:a1:45:1a:ad:09:7c:79:07:c0:c2:3f:e2:00:d0:dc:e2:82:
         39:73:43:4b:db:4e:14:10:e3:fd:10:08:f7:c0:2e:2e:60:a8:
         40:f5:3c:8d:06:d7:b2:b0:8e:d5:01:b4:87:39:0c:d3:de:17:
         5d:20:23:1d:0e:36:e6:ee:92:2c:89:05:f8:49:af:05:80:a1:
         1f:10:6a:20:ad:f3:61:29:76:38:6c:ce:8e:e3:3d:af:20:08:
         32:f0:99:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:46:07 2026 by rpki-client