Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f331d89-0bdf-3368-9e07-486a968769dd.roa
File:                     3f331d89-0bdf-3368-9e07-486a968769dd.roa (raw, json)
Hash identifier:          nzSWhowUnGpnEaIB3K2w3Ar5gkMlhq8n27TpMbnv78g=
Subject key identifier:   A0:68:FE:FC:94:E3:A6:12:58:DA:C2:CD:5E:29:AA:5B:D7:9C:64:DD
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CE57ED24B7796557BB2AFBF80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f331d89-0bdf-3368-9e07-486a968769dd.roa
Signing time:             Tue 17 Feb 2026 20:10:17 +0000
ROA not before:           Tue 17 Feb 2026 20:10:17 +0000
ROA not after:            Mon 18 May 2026 19:10:17 +0000
asID:                     19905
IP address blocks:        2604:2d80:ba00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e5:7e:d2:4b:77:96:55:7b:b2:af:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 17 20:10:17 2026 GMT
            Not After : May 18 19:10:17 2026 GMT
        Subject: CN=c925842e-2151-4168-8805-a246d5e4b7ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a9:bd:42:96:a7:fb:68:78:6b:ec:13:cf:13:
                    a2:85:1c:98:bf:b3:d5:b1:e5:8e:32:32:33:7f:df:
                    a4:11:04:44:48:d8:5d:54:66:79:cb:00:d0:bd:3b:
                    e6:63:ec:99:6b:30:0d:da:53:37:f0:92:b2:85:b5:
                    37:f2:1c:29:8e:39:60:77:66:05:89:45:91:a5:64:
                    f9:ed:e5:0d:87:cf:5a:6f:2a:ee:65:2f:5a:9f:94:
                    a4:46:6c:66:fb:4f:6c:db:e1:36:40:62:2c:3f:53:
                    69:04:dc:a4:f0:d6:b5:b4:fd:3a:3b:45:0e:ce:72:
                    8c:f1:8f:cd:63:0d:af:ca:12:2a:b5:f4:ca:6a:57:
                    95:3f:12:6d:d5:cb:0d:11:e9:be:a1:72:2a:58:27:
                    3f:41:be:db:e4:17:1a:8f:76:c1:b1:25:82:3c:b7:
                    fb:00:be:3f:d0:55:08:aa:66:0f:bc:6e:62:0d:1c:
                    97:aa:7c:01:02:92:1d:62:80:1b:31:be:cd:05:4a:
                    0d:2f:eb:98:a7:8e:fc:2f:a0:41:fe:84:ab:d6:e8:
                    d0:14:b4:29:a6:78:07:ec:d2:1d:f1:ca:3c:c2:25:
                    8c:6c:12:98:1f:78:c6:fb:15:c5:dd:aa:79:bb:a2:
                    50:bf:82:94:6e:9f:06:be:a4:98:61:06:e3:a2:03:
                    18:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:68:FE:FC:94:E3:A6:12:58:DA:C2:CD:5E:29:AA:5B:D7:9C:64:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f331d89-0bdf-3368-9e07-486a968769dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:ba00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:a3:d2:d4:dc:ef:94:79:aa:57:8f:52:d4:63:67:99:de:6c:
         7f:1a:4d:ea:25:01:50:2c:32:7b:67:ea:2d:d4:54:98:0a:98:
         7d:68:61:82:7b:84:91:8b:26:27:32:06:29:28:84:85:4a:d2:
         fa:a7:fd:51:a7:b0:6f:df:32:70:6b:60:17:f8:96:05:bc:f1:
         3c:74:61:67:b5:8c:45:69:76:b2:e5:85:f9:55:6a:dc:55:18:
         52:54:1b:f0:19:90:81:28:4c:ad:88:13:4f:fe:1b:7c:e5:21:
         74:de:40:47:9f:6e:49:54:57:23:35:ba:bd:d4:58:11:92:7b:
         1c:55:98:3a:45:3f:04:a7:6b:8b:5a:c4:72:c4:34:d2:e6:8f:
         71:e3:0d:67:c7:d8:84:e0:a9:83:d6:30:8e:e0:78:9e:1d:3d:
         d1:13:b9:10:e0:8a:2c:f3:76:60:20:9e:84:4e:c9:bf:ba:b0:
         21:72:3e:3e:b8:29:52:a8:cc:ef:b2:6d:e3:1d:1f:62:a6:99:
         fe:6c:68:db:f2:1a:50:99:b9:2a:b0:2e:62:01:7d:ca:f0:0d:
         1f:51:92:d1:eb:19:f8:a6:d4:3f:4f:fe:c0:88:80:5c:8e:b2:
         f7:a3:3f:1b:ae:27:a8:fc:50:98:75:17:da:5e:4c:7b:e6:a2:
         7e:2f:e7:a0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzlftJLd5ZVe7Kvv4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDIxNzIwMTAxN1oXDTI2MDUxODE5MTAxN1owLzEtMCsGA1UEAxMk
YzkyNTg0MmUtMjE1MS00MTY4LTg4MDUtYTI0NmQ1ZTRiN2VhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKm9Qpan+2h4a+wTzxOihRyYv7PVseWOMjIz
f9+kEQRESNhdVGZ5ywDQvTvmY+yZazAN2lM38JKyhbU38hwpjjlgd2YFiUWRpWT5
7eUNh89abyruZS9an5SkRmxm+09s2+E2QGIsP1NpBNyk8Na1tP06O0UOznKM8Y/N
Yw2vyhIqtfTKaleVPxJt1csNEem+oXIqWCc/Qb7b5Bcaj3bBsSWCPLf7AL4/0FUI
qmYPvG5iDRyXqnwBApIdYoAbMb7NBUoNL+uYp478L6BB/oSr1ujQFLQppngH7NId
8co8wiWMbBKYH3jG+xXF3ap5u6JQv4KUbp8GvqSYYQbjogMYkwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKBo/vyU46YSWNrCzV4pqlvXnGTdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2YzMzFkODktMGJkZi0z
MzY4LTllMDctNDg2YTk2ODc2OWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgLoA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEuj0tTc75R5qlePUtRjZ5nebH8aTeolAVAsMntn6i3UVJgKmH1o
YYJ7hJGLJicyBikohIVK0vqn/VGnsG/fMnBrYBf4lgW88Tx0YWe1jEVpdrLlhflV
atxVGFJUG/AZkIEoTK2IE0/+G3zlIXTeQEefbklUVyM1ur3UWBGSexxVmDpFPwSn
a4taxHLENNLmj3HjDWfH2ITgqYPWMI7geJ4dPdETuRDgiizzdmAgnoROyb+6sCFy
Pj64KVKozO+ybeMdH2Kmmf5saNvyGlCZuSqwLmIBfcrwDR9RktHrGfim1D9P/sCI
gFyOsvejPxuuJ6j8UJh1F9peTHvmon4v56A=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:25 2026 by rpki-client