Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fe771d30-9680-37df-a599-b13a3a1fdd0a.roa
File:                     fe771d30-9680-37df-a599-b13a3a1fdd0a.roa (raw, json)
Hash identifier:          +MbEh2zYsk0rNnwTDgvUd+HWI6VkuqEnzvBYvM8Al1g=
Subject key identifier:   E7:57:61:10:B0:57:E7:1E:2D:C2:D4:82:EB:83:38:ED:36:B8:66:F6
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F119CE6E28814057658257600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fe771d30-9680-37df-a599-b13a3a1fdd0a.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d81:c80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:e6:e2:88:14:05:76:58:25:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=d3110d2d-98b5-4498-abbc-8ef76ed14d3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d4:55:8b:a7:2a:ec:48:f2:b4:ad:2f:ea:cd:
                    a8:43:b0:27:c0:79:ea:8e:0e:f5:ec:6f:90:0a:81:
                    bd:e3:ad:2e:36:f9:85:f3:51:8f:62:20:98:97:86:
                    8f:c2:1e:66:68:1e:43:e6:b5:48:4f:85:64:5c:c3:
                    f2:a7:2a:ba:15:89:97:e5:71:aa:57:d7:76:47:16:
                    a8:1d:16:12:f7:33:78:1a:45:df:9b:f7:15:dc:39:
                    ec:43:b3:77:00:b8:d8:72:f4:ae:e7:d5:59:65:c2:
                    47:a3:a4:71:af:bb:0d:de:73:59:bb:c5:f7:a5:c3:
                    61:db:6a:4c:37:21:5a:e2:08:18:dd:4c:21:d3:40:
                    56:b1:f0:d9:09:0c:01:b3:c3:c6:5e:3e:87:fc:9c:
                    c0:79:b2:b8:6b:a2:28:f3:82:51:5f:64:0a:81:15:
                    00:7e:e0:e3:dc:98:55:53:04:b1:1a:6e:1b:fc:d8:
                    ae:6d:dc:23:36:ff:35:c9:7c:28:6e:a8:c0:4a:eb:
                    91:54:b7:fc:6c:41:1e:3b:f8:ad:6d:cd:60:47:e7:
                    3b:df:8a:f3:3a:f7:c8:96:16:46:54:5f:d3:76:de:
                    60:79:93:1c:ee:66:09:18:35:a7:51:ac:53:54:14:
                    40:0c:32:c9:13:1c:fd:b2:fb:61:c5:d8:91:c1:d8:
                    56:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:57:61:10:B0:57:E7:1E:2D:C2:D4:82:EB:83:38:ED:36:B8:66:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fe771d30-9680-37df-a599-b13a3a1fdd0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:c80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:f3:6c:2a:83:6e:e7:06:ca:31:4c:9f:c4:1c:3b:a9:ef:1d:
         a7:87:55:c1:73:71:e2:d7:53:02:83:8c:8c:23:1b:80:02:93:
         31:44:ad:5b:9a:20:6f:d3:29:c9:8c:60:76:b2:51:22:5b:95:
         5b:03:69:d8:ac:e5:ac:33:bc:92:49:db:03:e4:d5:13:f6:42:
         35:2c:50:1c:cf:49:98:14:a6:82:68:77:65:19:2c:6e:b4:38:
         92:3d:45:3c:b4:7f:55:69:55:59:16:0c:cc:d4:8d:7d:b1:b3:
         6b:9a:2a:97:82:40:8c:2a:53:fb:e5:15:f2:9c:ce:8f:c5:0f:
         f2:41:15:7b:6d:09:7c:30:4e:93:2b:bd:dd:f5:50:95:f0:b9:
         b9:e7:af:fe:81:d3:74:28:6d:25:e5:ba:53:7e:3e:17:77:c4:
         d3:12:22:b9:23:1a:e7:57:5b:a9:88:3f:eb:48:fe:9f:4b:9e:
         85:2f:36:c0:72:5b:9f:79:ea:3a:81:de:53:70:ea:f3:e3:f1:
         91:01:c5:e2:24:8f:91:d4:3b:07:d6:17:20:13:71:0c:e3:ae:
         bf:d7:04:98:38:59:e4:0e:56:af:25:ad:6e:2e:79:92:66:2b:
         98:81:15:49:b7:93:bc:d3:a3:59:5a:1a:c5:05:52:c2:9d:e2:
         1b:0f:f3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:12:22 2026 by rpki-client