Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1ca4fc62-c482-3fc5-971c-c0d42ab1b820.roa
File:                     1ca4fc62-c482-3fc5-971c-c0d42ab1b820.roa (raw, json)
Hash identifier:          027WOSiVDYQ3jbfx/cEKr8QqeNjmkUEK7RBgavtJIa0=
Subject key identifier:   BD:DA:7C:1C:17:05:74:8E:3B:30:2D:76:37:69:F6:35:B8:B7:1A:D7
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DE2B5CBB76D37D019D14A2700
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1ca4fc62-c482-3fc5-971c-c0d42ab1b820.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d81:1800::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:cb:b7:6d:37:d0:19:d1:4a:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=653cedf3-bd8c-45c2-aff1-163693d4c1a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:08:4e:7b:bf:86:e9:6b:c7:1b:bb:86:6f:be:
                    c4:2f:be:d5:3f:6c:38:cb:ac:cc:48:c8:0c:79:0e:
                    7e:eb:d9:ba:bf:e4:15:22:79:e4:d1:6d:44:a3:3e:
                    8f:87:16:43:17:09:9e:77:2f:51:83:88:94:b3:1b:
                    1d:11:b1:b8:5d:12:5e:1c:82:e5:a6:80:f2:b1:2b:
                    04:4d:ed:21:00:9c:43:a7:f1:48:1b:13:48:7f:17:
                    61:7e:d3:83:f8:35:d7:b4:d7:a8:12:8b:1d:4a:89:
                    e5:5b:92:76:8c:f1:2a:56:5d:5f:08:79:c4:84:b5:
                    41:cb:61:59:56:fe:01:51:cf:bb:0b:51:6f:7e:92:
                    e4:cd:6a:f0:f7:79:dd:c1:ef:9a:06:5d:c8:b7:7c:
                    53:a9:a2:bf:bc:20:08:ce:13:d3:50:4c:7b:e2:92:
                    b0:6f:0f:79:ad:53:2a:b0:d5:3d:07:77:a9:dd:57:
                    11:de:6d:eb:85:c3:ab:85:18:eb:d4:84:86:6a:7e:
                    d9:ff:70:05:ee:68:77:1d:6f:d4:8c:e3:f0:40:97:
                    96:70:0f:fb:0e:b8:da:50:63:2e:a1:f3:39:5c:ff:
                    61:65:28:02:5d:9f:45:1a:d8:72:70:04:35:84:e9:
                    9a:0c:eb:5f:ba:f6:5f:50:b8:95:06:8c:9b:da:be:
                    f6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:DA:7C:1C:17:05:74:8E:3B:30:2D:76:37:69:F6:35:B8:B7:1A:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1ca4fc62-c482-3fc5-971c-c0d42ab1b820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1800::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:31:55:39:4f:21:76:a4:7c:be:ce:ec:95:84:a0:50:bd:9b:
         c5:4b:90:52:e0:30:f6:44:80:e8:2b:d5:fc:7f:8f:b4:39:ce:
         cd:11:6b:09:8e:e9:ef:87:45:b2:91:71:89:2a:05:1b:05:e9:
         b2:e7:e7:51:5d:32:86:bc:17:36:85:45:18:09:e2:5a:35:1c:
         c1:41:bb:13:ae:71:1d:71:e7:aa:e4:f0:fe:81:d3:e0:4b:76:
         5e:8c:27:ed:50:11:95:39:61:3e:b6:04:53:6a:9f:df:5c:80:
         79:18:f1:25:e9:04:1d:9e:df:24:20:a2:e0:04:54:a9:fd:44:
         c4:39:4c:81:ab:93:12:11:b2:f1:2c:13:28:76:24:11:97:9c:
         92:db:cb:a9:13:30:34:bb:c1:e4:27:2b:ab:a0:ad:d8:82:2a:
         a8:ba:72:ad:77:28:9f:82:d1:f0:c4:6a:46:4b:7b:6a:02:5f:
         b4:fe:5d:c5:41:ec:5c:97:37:00:69:9d:bc:4e:69:55:a4:85:
         95:af:a7:26:c2:53:e7:c6:f7:3c:10:b9:25:d1:9d:3d:ff:d9:
         be:1d:bb:19:ae:50:44:bc:26:2f:cc:3c:ce:0b:44:36:45:1b:
         43:23:11:9e:aa:8f:ff:a1:a5:5f:ac:8a:c2:2a:7b:0b:9f:86:
         64:c0:71:cb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3itcu3bTfQGdFKJwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk
NjUzY2VkZjMtYmQ4Yy00NWMyLWFmZjEtMTYzNjkzZDRjMWEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwhOe7+G6WvHG7uGb77EL77VP2w4y6zMSMgM
eQ5+69m6v+QVInnk0W1Eoz6PhxZDFwmedy9Rg4iUsxsdEbG4XRJeHILlpoDysSsE
Te0hAJxDp/FIGxNIfxdhftOD+DXXtNeoEosdSonlW5J2jPEqVl1fCHnEhLVBy2FZ
Vv4BUc+7C1FvfpLkzWrw93ndwe+aBl3It3xTqaK/vCAIzhPTUEx74pKwbw95rVMq
sNU9B3ep3VcR3m3rhcOrhRjr1ISGan7Z/3AF7mh3HW/UjOPwQJeWcA/7DrjaUGMu
ofM5XP9hZSgCXZ9FGthycAQ1hOmaDOtfuvZfULiVBoyb2r72jQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL3afBwXBXSOOzAtdjdp9jW4txrXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWNhNGZjNjItYzQ4Mi0z
ZmM1LTk3MWMtYzBkNDJhYjFiODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgRgA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEQxVTlPIXakfL7O7JWEoFC9m8VLkFLgMPZEgOgr1fx/j7Q5zs0R
awmO6e+HRbKRcYkqBRsF6bLn51FdMoa8FzaFRRgJ4lo1HMFBuxOucR1x56rk8P6B
0+BLdl6MJ+1QEZU5YT62BFNqn99cgHkY8SXpBB2e3yQgouAEVKn9RMQ5TIGrkxIR
svEsEyh2JBGXnJLby6kTMDS7weQnK6ugrdiCKqi6cq13KJ+C0fDEakZLe2oCX7T+
XcVB7FyXNwBpnbxOaVWkhZWvpybCU+fG9zwQuSXRnT3/2b4duxmuUES8Ji/MPM4L
RDZFG0MjEZ6qj/+hpV+sisIqewufhmTAccs=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:11:40 2026 by rpki-client