Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f119d8b1-eb62-39c1-aad3-ae21698b1295.roa
File:                     f119d8b1-eb62-39c1-aad3-ae21698b1295.roa (raw, json)
Hash identifier:          MWYHfI2Lceaso1p3aDMR6CkATDJLGeGg7DvAh4w5Fv8=
Subject key identifier:   EE:AA:AA:65:38:FA:BE:67:BB:BD:D2:C2:8D:E0:1E:B1:AD:37:F4:77
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584C45A6662645C405663F283A80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f119d8b1-eb62-39c1-aad3-ae21698b1295.roa
Signing time:             Mon 22 Dec 2025 14:00:39 +0000
ROA not before:           Mon 22 Dec 2025 14:00:39 +0000
ROA not after:            Sun 22 Mar 2026 13:00:39 +0000
asID:                     30036
IP address blocks:        2604:2d80:f500::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:45:a6:66:26:45:c4:05:66:3f:28:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Dec 22 14:00:39 2025 GMT
            Not After : Mar 22 13:00:39 2026 GMT
        Subject: CN=0254214a-d02d-413a-9ea8-7810bdeaf0e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:28:eb:81:fb:cc:57:37:cd:7e:b0:ea:6f:87:
                    c0:45:dc:6c:53:7c:10:28:bd:dc:ca:a2:1a:2c:be:
                    a7:33:d3:bb:a3:b3:df:6e:95:6a:d0:32:ed:10:35:
                    b3:51:f6:8d:eb:3e:29:f8:d4:3a:81:32:e6:f9:66:
                    f7:2a:03:20:1a:d4:de:e0:36:c9:0b:a2:1f:69:94:
                    d2:e1:74:d9:27:1e:36:ff:5e:1f:18:b5:5d:2e:e8:
                    f2:21:48:f1:9c:1e:9c:f7:5e:15:b8:a2:9b:f4:ce:
                    49:dd:30:e6:86:c5:fa:a5:bd:48:dd:6a:02:61:79:
                    c8:74:25:a0:f7:7c:29:fd:68:e3:22:40:e3:0b:75:
                    19:3b:f1:64:e4:89:4c:ae:c2:5e:ae:a8:39:db:82:
                    ab:77:91:ff:43:ed:d0:b1:d9:54:25:b8:89:8a:eb:
                    63:a7:a6:02:db:9f:96:57:4d:44:d8:b6:d5:42:0a:
                    67:bb:db:a4:85:ab:7f:8c:3a:d1:f3:b4:ef:d8:f0:
                    67:ff:55:ad:90:57:0e:4b:3f:c5:00:ef:6c:ca:63:
                    9a:c0:df:55:e8:58:cf:96:7e:e1:77:7a:06:9d:50:
                    26:7c:ce:ad:9a:75:f6:a8:c1:ed:d2:ac:ab:e4:3c:
                    a3:3a:b8:32:55:27:5c:84:60:aa:61:a1:4b:e9:50:
                    96:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AA:AA:65:38:FA:BE:67:BB:BD:D2:C2:8D:E0:1E:B1:AD:37:F4:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f119d8b1-eb62-39c1-aad3-ae21698b1295.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:f500::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:19:c3:66:e2:94:0a:75:22:27:6c:7f:43:33:1c:61:ed:3b:
         64:59:9b:20:96:5d:19:3c:80:3f:ee:ba:d0:7f:8b:4f:38:15:
         98:3b:98:bb:6c:c6:94:fb:d2:e8:5a:51:33:8a:75:c5:9c:4d:
         c6:55:e2:5b:c7:2a:cc:04:9c:71:41:0a:e6:8e:7e:cb:ec:20:
         28:12:c3:5e:ed:18:ea:2b:12:34:bf:64:4e:d4:35:86:53:03:
         40:a6:27:a8:59:d3:b0:d1:ef:b0:05:c9:fb:d9:96:c8:cb:63:
         90:d1:72:75:51:be:98:c7:69:2a:fa:8f:40:22:c7:45:b6:0a:
         e5:82:92:15:6f:69:ef:cc:cb:6f:b1:c3:36:7a:35:6d:06:64:
         15:e6:d5:6d:b6:0b:84:73:b9:53:ec:f5:71:22:c9:4d:19:f8:
         43:ad:e6:c3:8f:c1:b7:61:16:89:c8:c5:ec:d9:53:8a:97:07:
         5e:8c:68:1e:73:43:d2:3e:fc:1d:d8:7b:e9:1c:d8:23:22:ab:
         16:e4:f2:93:89:be:93:cf:96:d4:0b:d3:b6:0e:a4:8b:d9:92:
         26:31:4e:3c:65:33:c6:df:d4:5e:99:ee:b3:c0:e3:59:fb:ae:
         fc:38:ca:0e:b7:fc:6d:8a:42:72:62:46:1d:d5:c1:3d:b5:7c:
         24:f1:f5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:10:29 2026 by rpki-client