Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e08bba05-46f0-378a-a0e6-d067d719e9b8.roa
File:                     e08bba05-46f0-378a-a0e6-d067d719e9b8.roa (raw, json)
Hash identifier:          y3zv1d7y15QzociNptUw+Zs8A6TjdQXMiA6yg01o98E=
Subject key identifier:   76:FA:56:20:36:C9:9D:A9:6E:E5:CA:C4:62:98:2D:AD:B4:E1:23:0E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F1467B03231D1D1B28CB6A940
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e08bba05-46f0-378a-a0e6-d067d719e9b8.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     30036
IP address blocks:        2604:2d81:e00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:b0:32:31:d1:d1:b2:8c:b6:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=762c70b6-dac1-4049-b179-a9f8dd79feb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e2:47:3d:53:b3:f6:c2:ce:b3:d0:5d:28:14:
                    14:91:a1:bf:e2:f2:88:ec:c6:63:64:4d:17:53:51:
                    86:32:ba:05:49:7f:45:d7:23:54:c3:e4:a8:8f:f9:
                    f5:07:b7:fa:d3:b7:85:cd:ad:83:9c:78:5a:f0:de:
                    2d:fe:2b:9b:61:e8:90:83:31:e0:6d:89:a8:37:2f:
                    ce:7b:cc:72:4b:2b:a7:87:be:1a:1c:60:4b:3e:e7:
                    20:60:4a:09:28:e1:0f:7f:78:82:9a:c9:03:a7:64:
                    23:4c:84:11:74:ec:1d:21:dd:e1:95:cb:3c:15:93:
                    a0:64:da:6d:20:cc:3d:6a:04:e6:56:fe:e4:0a:50:
                    95:96:ee:3a:f1:4e:1c:93:de:ac:bc:f1:35:96:23:
                    a1:20:bf:48:ab:67:e3:b3:ad:5c:3a:49:b7:c7:c6:
                    27:db:0d:5c:4f:48:cc:54:69:40:34:c9:52:f8:d8:
                    6d:a3:d8:4e:e2:18:b7:8d:a8:ae:4e:6f:6b:19:e3:
                    cd:31:ea:e5:3a:05:4c:88:14:1e:82:d0:48:23:f5:
                    e3:a8:ac:16:ca:f2:6e:a9:b8:ce:01:37:51:43:30:
                    76:15:72:f0:b0:cf:71:21:6b:fd:c8:a7:de:73:ca:
                    2a:2f:64:83:f4:df:9f:86:5a:03:61:86:d7:08:51:
                    d4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FA:56:20:36:C9:9D:A9:6E:E5:CA:C4:62:98:2D:AD:B4:E1:23:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e08bba05-46f0-378a-a0e6-d067d719e9b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:e00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:6a:08:1c:1b:68:d8:b2:f8:c0:18:78:12:6f:24:b7:12:fd:
         55:0c:1a:be:ae:88:7a:8e:35:2d:fc:60:49:19:c5:06:c5:00:
         28:d6:3e:0c:0f:ec:13:68:6b:8a:7f:3d:e3:60:32:d0:1b:47:
         31:39:f4:e7:1e:f8:5b:1e:33:ce:72:e4:d4:c7:bf:2c:27:47:
         4f:66:a9:3e:cf:44:d1:fc:2e:15:49:81:bc:f9:36:26:ec:ae:
         2e:0f:e0:15:60:3e:7d:10:41:6b:5c:95:38:fb:a0:22:ac:f2:
         40:a5:17:6a:b4:39:ba:6b:e3:ae:c2:58:f5:7e:e8:96:29:ab:
         05:18:11:6d:0b:25:a2:9d:a8:98:a2:40:2e:1a:c1:3b:4a:1e:
         a3:5d:bd:0f:a4:2e:4e:e3:fb:f0:d4:27:f0:f2:d1:50:72:72:
         c1:4a:e2:52:a9:c9:23:ba:ea:d2:01:1a:dc:54:0a:1f:f8:ed:
         07:f3:86:aa:d1:05:d1:4d:d9:97:44:69:6f:e9:b8:73:41:20:
         7e:3e:63:44:cc:0e:72:0f:c8:02:1c:ab:e6:c9:81:00:ca:57:
         65:0a:82:28:37:21:b6:8b:bd:57:d4:1a:cb:56:4a:49:f3:50:
         43:29:12:64:60:2f:60:dc:8b:15:8d:fe:2e:3a:57:29:5e:95:
         0c:5a:4c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:48:50 2026 by rpki-client