Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1a91b44a-03ca-31c0-bcb0-bb1a4a240eef.roa
File:                     1a91b44a-03ca-31c0-bcb0-bb1a4a240eef.roa (raw, json)
Hash identifier:          /Vsy+TPzBaU7cA69R9k/VWoxbORwPdZP7aYy35XU/a0=
Subject key identifier:   99:42:25:3A:22:06:20:7A:31:1C:73:8F:AB:46:8A:14:1F:10:EE:8C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79D337019A64964E33F5600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1a91b44a-03ca-31c0-bcb0-bb1a4a240eef.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:8f00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:33:70:19:a6:49:64:e3:3f:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=903139a4-64c4-48eb-8944-5ce1c7742ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f9:45:95:1d:af:9c:2e:d8:aa:19:67:37:97:
                    fb:fb:8d:e7:ed:aa:3b:af:ff:f9:5d:03:59:5e:07:
                    06:23:e6:9d:b6:57:4f:a6:8e:90:4e:62:e1:27:64:
                    ff:c0:ae:0c:82:01:0c:07:66:4d:69:e3:2f:0c:95:
                    54:63:eb:9a:9b:29:11:43:8b:d0:f8:a2:cf:85:8f:
                    2b:c6:5d:f9:6b:85:2b:b4:eb:b8:da:fb:1f:b6:43:
                    16:3c:ef:80:48:23:6c:39:2a:df:62:f3:9b:f5:cb:
                    b7:64:5b:0a:50:f5:fe:98:46:02:11:eb:43:2d:8c:
                    5b:30:6c:97:da:25:aa:8a:8f:b7:34:24:17:98:13:
                    84:f5:5b:a4:b0:fa:55:3c:cc:77:36:40:cd:8a:16:
                    8f:0f:49:de:9e:96:18:82:5b:a7:07:7d:92:1d:f5:
                    df:06:1c:0c:f4:ec:f0:cf:f8:45:3f:50:99:4f:2d:
                    9b:01:91:56:49:7e:13:ad:54:93:e8:d5:ed:88:f9:
                    72:01:3c:9d:44:0b:b5:7e:47:4c:b7:26:69:4e:c4:
                    30:79:8a:88:ef:f4:f4:04:e0:ba:49:5b:ef:29:72:
                    a4:79:4d:e9:f9:93:eb:55:cb:b1:ec:6f:0b:d2:16:
                    29:01:4f:43:51:0e:bb:7e:cf:23:df:fc:25:f6:7f:
                    30:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:42:25:3A:22:06:20:7A:31:1C:73:8F:AB:46:8A:14:1F:10:EE:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1a91b44a-03ca-31c0-bcb0-bb1a4a240eef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:8f00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:43:b6:ab:44:03:3b:dc:01:bc:d9:da:fa:34:93:53:b9:fc:
         06:e3:0b:bf:8e:6b:3a:ca:d1:f2:7b:3f:f1:4a:91:2e:e6:c8:
         8c:48:e4:cf:eb:fa:72:0f:4b:87:54:fa:76:97:47:5b:0c:6f:
         c4:16:b1:55:6b:a3:bd:34:9c:40:68:13:d7:61:0a:f3:15:d6:
         19:5c:29:ed:0f:80:41:8c:0c:84:e4:c3:0e:c2:55:86:6f:f6:
         a7:c7:78:09:aa:dd:af:08:bf:b0:b1:95:e4:81:65:1f:5a:50:
         2b:08:78:7d:5a:31:31:5b:d7:82:00:02:7e:c1:85:54:b8:2e:
         cc:1d:b5:d3:69:be:f8:13:ad:a0:5c:51:dc:2e:78:c4:b2:d8:
         10:94:8e:5f:b4:e7:f4:3c:27:80:10:76:0c:54:e4:cf:cf:12:
         d4:ca:8f:e4:91:64:27:5f:be:59:55:b3:4f:82:b1:ab:18:ce:
         bb:a3:63:35:73:b9:d4:a2:12:b3:6d:18:32:ec:7b:04:02:2b:
         8e:15:5f:1e:36:02:37:46:45:66:59:0d:23:4a:bf:8b:35:e6:
         9b:dd:32:ed:62:2d:6c:ba:03:24:f4:c5:04:3d:44:c7:03:82:
         60:68:29:a6:2b:79:6b:e8:55:67:cc:9c:5d:f6:de:d4:4c:6b:
         dd:c9:40:3d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnTNwGaZJZOM/VgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OTAzMTM5YTQtNjRjNC00OGViLTg5NDQtNWNlMWM3NzQyYmE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPlFlR2vnC7YqhlnN5f7+43n7ao7r//5XQNZ
XgcGI+adtldPpo6QTmLhJ2T/wK4MggEMB2ZNaeMvDJVUY+uamykRQ4vQ+KLPhY8r
xl35a4UrtOu42vsftkMWPO+ASCNsOSrfYvOb9cu3ZFsKUPX+mEYCEetDLYxbMGyX
2iWqio+3NCQXmBOE9VuksPpVPMx3NkDNihaPD0nenpYYglunB32SHfXfBhwM9Ozw
z/hFP1CZTy2bAZFWSX4TrVST6NXtiPlyATydRAu1fkdMtyZpTsQweYqI7/T0BOC6
SVvvKXKkeU3p+ZPrVcux7G8L0hYpAU9DUQ67fs8j3/wl9n8wKQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJlCJToiBiB6MRxzj6tGihQfEO6MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWE5MWI0NGEtMDNjYS0z
MWMwLWJjYjAtYmIxYTRhMjQwZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgI8A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAFDtqtEAzvcAbzZ2vo0k1O5/AbjC7+OazrK0fJ7P/FKkS7myIxI
5M/r+nIPS4dU+naXR1sMb8QWsVVro700nEBoE9dhCvMV1hlcKe0PgEGMDITkww7C
VYZv9qfHeAmq3a8Iv7CxleSBZR9aUCsIeH1aMTFb14IAAn7BhVS4LswdtdNpvvgT
raBcUdwueMSy2BCUjl+05/Q8J4AQdgxU5M/PEtTKj+SRZCdfvllVs0+CsasYzruj
YzVzudSiErNtGDLsewQCK44VXx42AjdGRWZZDSNKv4s15pvdMu1iLWy6AyT0xQQ9
RMcDgmBoKaYreWvoVWfMnF323tRMa93JQD0=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:47:55 2026 by rpki-client