Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fe98a26c-842b-303d-9f20-1f2f4eff9c96.roa
File:                     fe98a26c-842b-303d-9f20-1f2f4eff9c96.roa (raw, json)
Hash identifier:          kjt0wVu38Sh/vxsOmaWrmhlxLHHTwG7f7Qb26ZsLn3g=
Subject key identifier:   F8:AD:1A:D5:CD:AA:DD:4E:60:00:D3:0B:1C:B0:D5:1D:98:09:48:B5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DDA55BF8F12758343521C4400
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fe98a26c-842b-303d-9f20-1f2f4eff9c96.roa
Signing time:             Sat 16 May 2026 13:00:31 +0000
ROA not before:           Sat 16 May 2026 13:00:31 +0000
ROA not after:            Fri 14 Aug 2026 13:00:31 +0000
asID:                     30036
IP address blocks:        2604:2d81:3080::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:da:55:bf:8f:12:75:83:43:52:1c:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 16 13:00:31 2026 GMT
            Not After : Aug 14 13:00:31 2026 GMT
        Subject: CN=7af0cd1d-daeb-4faa-aa56-599d496bcb8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bc:3c:3b:fe:69:9f:c5:2d:ee:57:8a:c3:b3:
                    00:34:de:fa:84:f4:50:10:29:64:2d:a9:dc:fa:e5:
                    02:fa:a8:72:24:fa:f7:6c:66:4e:9b:4e:c3:d7:dd:
                    68:26:e6:4f:2e:9d:87:19:f6:03:92:59:a8:d9:e9:
                    3e:9d:c8:db:43:39:5c:39:06:c3:a0:4d:0d:d5:ba:
                    e1:11:ca:9e:8d:7a:f6:39:19:15:c2:80:0b:e0:eb:
                    6c:1d:25:56:63:fe:9e:a6:06:53:c7:63:26:fa:b9:
                    93:4f:f2:ed:13:a8:a4:53:cd:19:5d:d3:27:7c:8c:
                    ea:02:06:11:32:04:a7:14:59:9e:70:7a:cb:18:53:
                    db:4d:e3:e1:f9:05:49:ef:2c:52:27:58:54:4f:d9:
                    3f:94:66:e4:e2:39:2f:02:7f:cd:52:e3:49:5f:a5:
                    0b:8d:6f:d2:36:1f:8d:e4:67:c7:72:e8:dc:6f:7f:
                    ae:f9:86:5d:89:49:c9:ea:95:c7:3f:04:12:dc:ed:
                    86:9f:4a:6e:ff:5c:6d:5c:32:d3:35:1c:c3:a2:26:
                    12:43:b2:a9:47:c0:f2:bb:3c:75:8c:af:57:c9:66:
                    8e:da:eb:40:db:b4:7a:ca:8e:7b:8c:6a:0e:ae:01:
                    9d:76:7d:3d:bd:e1:4a:ee:5b:09:f6:50:80:4e:cb:
                    49:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:AD:1A:D5:CD:AA:DD:4E:60:00:D3:0B:1C:B0:D5:1D:98:09:48:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fe98a26c-842b-303d-9f20-1f2f4eff9c96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:3080::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:8a:e1:ec:4f:ed:e6:7b:af:2d:e6:8d:8a:e5:74:57:05:74:
         ee:6d:82:54:6b:c6:a7:6e:3c:9a:38:bb:2f:14:76:db:c7:c3:
         52:72:03:42:9f:f1:9a:c8:d3:37:75:ad:12:32:ff:de:9c:4d:
         9e:09:10:6b:bf:34:74:83:ea:d4:6e:fb:21:23:08:57:1a:6f:
         36:8d:73:3a:d8:fe:b2:33:79:da:d9:8d:13:a5:87:56:09:f5:
         ad:2a:dc:a8:ef:75:a5:2e:73:fd:8d:bd:14:e7:65:ef:25:6d:
         c3:3b:29:39:48:83:39:bc:e8:48:41:04:f6:8c:94:13:9b:c1:
         4c:77:61:3e:9f:c1:76:bb:75:db:fd:18:58:b5:ea:ae:b5:ea:
         0a:cd:3d:34:d1:8c:3c:0c:8d:c8:6b:65:d9:97:8a:56:b6:f8:
         b5:b6:cb:47:f4:c3:fc:cf:54:cc:8c:4e:9d:07:a1:78:c2:10:
         d9:ac:e8:0b:46:5a:4b:d2:fc:fe:50:8c:f5:5d:67:3b:ae:43:
         58:69:17:f5:3a:eb:00:1e:7a:37:57:e9:b5:5e:3b:c9:4a:c6:
         e8:b7:09:6a:0b:c2:2b:1c:54:63:a7:7a:7c:52:c5:fd:c8:32:
         a3:6f:a9:50:23:1e:aa:0a:cd:49:fc:66:d9:9b:a5:75:bb:19:
         d0:5e:45:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:34:07 2026 by rpki-client