Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/053325bd-1cf4-3c75-ad37-227061328d03.roa
File:                     053325bd-1cf4-3c75-ad37-227061328d03.roa (raw, json)
Hash identifier:          Y0aikez4YK7I3zBit9LGsDQ/Ixa16Oskz+Hjtnv+C2c=
Subject key identifier:   0D:89:6F:7F:EE:3C:04:5D:21:E2:82:E1:1C:B6:AA:C9:89:4B:C3:72
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CA5F74464697E127A2B95EE80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/053325bd-1cf4-3c75-ad37-227061328d03.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d81:2700::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:44:64:69:7e:12:7a:2b:95:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=5bf9d74a-8097-49b5-b6fa-b86115a0f111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:81:37:4b:70:4b:56:a3:bd:3f:48:dd:1d:fd:
                    01:d4:e9:4a:a3:45:a2:c9:07:cc:db:aa:a0:0e:d8:
                    10:aa:be:c1:cf:56:e0:e8:ed:36:50:de:cb:f8:b0:
                    88:fb:51:27:cc:f1:cb:af:89:29:c2:ef:15:e8:01:
                    8f:28:ad:b8:cd:9d:6d:09:d4:46:f2:4f:70:85:d8:
                    f9:7f:cf:ae:9f:aa:cc:b4:10:68:0f:9e:55:cb:4c:
                    a6:c8:7c:0b:4f:08:c5:2e:f9:d7:53:07:93:3f:56:
                    93:61:39:c0:ba:f5:35:ae:0e:47:93:af:3c:48:9c:
                    1d:fc:73:67:0c:a9:b6:32:07:75:17:3e:73:b5:fa:
                    44:cc:a2:35:17:49:27:3d:d5:2f:64:86:a4:3b:db:
                    a7:1c:1b:36:b1:c1:b5:35:e3:b7:c6:00:69:34:5f:
                    05:90:fa:60:fa:7e:11:6e:8b:99:a0:19:a0:4a:06:
                    3f:69:16:48:3a:fe:2c:5d:aa:2f:9a:f8:77:a4:93:
                    ba:f9:36:db:90:10:ac:38:52:01:45:2e:d6:81:67:
                    7b:76:c2:01:77:2a:0b:aa:1c:ca:c0:f8:4d:dd:0a:
                    ea:85:3f:e3:d7:57:61:ee:05:48:c9:e7:6d:3a:c4:
                    8a:ab:a2:1d:35:37:c0:6b:5c:f0:db:4a:cc:b7:fc:
                    6a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:89:6F:7F:EE:3C:04:5D:21:E2:82:E1:1C:B6:AA:C9:89:4B:C3:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/053325bd-1cf4-3c75-ad37-227061328d03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:2700::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:74:24:55:03:e7:6e:d5:05:7d:d8:58:1f:66:5e:ae:ee:16:
         c7:e2:ae:09:29:ab:ba:91:0d:57:54:2a:7c:9e:00:b5:c7:71:
         6f:3f:ca:9a:de:c2:1c:00:1b:e2:6e:cf:25:94:63:7b:20:fc:
         38:9e:bd:25:75:8d:05:29:7f:21:f9:36:c6:7a:f1:d8:42:85:
         7e:19:4d:ea:1c:79:ef:ce:bd:25:fe:89:87:7c:b1:80:b6:1f:
         96:7a:28:36:9b:a6:ee:59:ec:17:68:34:4f:fd:3c:e7:f8:a9:
         f8:77:5c:25:78:db:e9:d4:42:40:a0:a6:39:5e:06:83:49:d8:
         6a:7f:2d:13:2d:7c:11:92:26:42:fc:e1:f1:31:38:27:52:96:
         7c:42:f2:1c:dc:ce:08:43:e2:98:87:20:d3:5c:2b:d8:84:16:
         19:7a:95:c5:79:00:6c:d2:de:53:c1:8f:60:03:55:78:8b:e4:
         6f:98:2a:f9:25:06:3c:3f:ce:b9:0a:8d:e0:d9:7c:de:45:4e:
         1e:de:57:fa:d4:5e:ae:00:8f:f7:89:54:62:6e:31:e2:8c:8b:
         ae:9a:4a:a4:9d:b3:fd:54:9b:f6:42:cc:f6:6e:0f:c8:6d:d7:
         0b:f7:87:47:01:2d:02:e2:e3:73:e7:09:1a:3f:7b:78:44:92:
         c0:4c:0a:07
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyl90RkaX4SeiuV7oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk
NWJmOWQ3NGEtODA5Ny00OWI1LWI2ZmEtYjg2MTE1YTBmMTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4E3S3BLVqO9P0jdHf0B1OlKo0WiyQfM26qg
DtgQqr7Bz1bg6O02UN7L+LCI+1EnzPHLr4kpwu8V6AGPKK24zZ1tCdRG8k9whdj5
f8+un6rMtBBoD55Vy0ymyHwLTwjFLvnXUweTP1aTYTnAuvU1rg5Hk688SJwd/HNn
DKm2Mgd1Fz5ztfpEzKI1F0knPdUvZIakO9unHBs2scG1NeO3xgBpNF8FkPpg+n4R
bouZoBmgSgY/aRZIOv4sXaovmvh3pJO6+TbbkBCsOFIBRS7WgWd7dsIBdyoLqhzK
wPhN3QrqhT/j11dh7gVIyedtOsSKq6IdNTfAa1zw20rMt/xq5wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA2Jb3/uPARdIeKC4Ry2qsmJS8NyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDUzMzI1YmQtMWNmNC0z
Yzc1LWFkMzctMjI3MDYxMzI4ZDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgScA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHN0JFUD527VBX3YWB9mXq7uFsfirgkpq7qRDVdUKnyeALXHcW8/
yprewhwAG+JuzyWUY3sg/DievSV1jQUpfyH5NsZ68dhChX4ZTeocee/OvSX+iYd8
sYC2H5Z6KDabpu5Z7BdoNE/9POf4qfh3XCV42+nUQkCgpjleBoNJ2Gp/LRMtfBGS
JkL84fExOCdSlnxC8hzczghD4piHINNcK9iEFhl6lcV5AGzS3lPBj2ADVXiL5G+Y
KvklBjw/zrkKjeDZfN5FTh7eV/rUXq4Aj/eJVGJuMeKMi66aSqSds/1Um/ZCzPZu
D8ht1wv3h0cBLQLi43PnCRo/e3hEksBMCgc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:19:14 2026 by rpki-client