Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5cc4867a-3356-37a6-bf75-69b60313f5bb.roa
File:                     5cc4867a-3356-37a6-bf75-69b60313f5bb.roa (raw, json)
Hash identifier:          bce6rb966PShKdgX0GNSpOJusiurN614pmnm3kj2ZBs=
Subject key identifier:   E2:16:97:C1:1A:8E:1F:18:01:2B:12:E3:83:0D:25:52:37:2E:02:D5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D02178CC829A9C0048E953280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5cc4867a-3356-37a6-bf75-69b60313f5bb.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        2604:2d81:1800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:8c:c8:29:a9:c0:04:8e:95:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=a4f54f65-89c0-4bbf-bd08-e40720dbd9d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f1:33:46:34:ad:69:e1:18:96:4d:7e:f1:b9:
                    4f:da:a9:4c:2e:36:35:66:c0:80:47:b8:fc:0e:f8:
                    3e:57:37:19:7e:84:70:f3:9b:69:d3:47:4c:b5:2e:
                    e2:1c:74:92:d6:67:29:73:23:ab:ca:54:50:4b:85:
                    e7:25:c5:52:92:0e:e0:8d:fe:9b:74:c6:43:04:88:
                    a6:3b:32:f9:e4:89:b8:9d:67:73:3e:03:8d:a2:d3:
                    b1:ed:a1:3e:81:1a:8b:ce:18:93:a0:d9:50:12:59:
                    a3:63:2b:43:c9:ff:2b:ac:1d:c5:ec:ae:67:36:aa:
                    a0:7f:61:c2:c0:f2:c4:e1:26:99:ec:ce:07:e3:0d:
                    26:07:44:dc:c4:5f:a7:3a:34:f6:41:09:6d:c9:85:
                    36:56:f2:76:1d:b6:01:bc:88:fe:3c:14:53:8f:f9:
                    fd:be:fa:ce:95:e3:77:fd:65:a7:4a:bc:72:4d:42:
                    52:10:49:36:7d:70:df:23:67:e7:6c:39:82:e9:8e:
                    44:e3:20:9c:49:5f:d5:9d:65:6d:a9:56:3a:53:91:
                    76:18:ad:11:21:c5:b9:49:b7:1f:02:2c:58:dd:11:
                    48:fa:95:83:6a:e2:df:07:37:1b:d2:3a:0d:91:12:
                    d0:48:cd:57:a8:33:7e:0c:8e:8a:32:7f:5b:03:30:
                    cb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:16:97:C1:1A:8E:1F:18:01:2B:12:E3:83:0D:25:52:37:2E:02:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5cc4867a-3356-37a6-bf75-69b60313f5bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:9b:01:74:3b:0b:1e:3d:8b:15:9b:a5:c4:35:82:d6:c3:6c:
         aa:9c:76:a2:f2:5f:b0:b8:a6:fe:17:dd:8f:68:02:61:ca:3c:
         2d:2e:17:0c:f3:e7:2e:59:cb:e0:28:a7:17:e2:35:8e:9c:17:
         76:04:f5:b5:1e:79:0d:0b:97:a6:35:7f:47:2e:36:53:c7:4a:
         d5:89:cb:7e:44:a7:72:07:42:22:b4:a5:2a:66:a0:d0:70:40:
         15:44:36:21:1d:ed:2f:2d:a3:7d:f3:c0:57:b4:ce:dc:51:82:
         68:37:e1:dc:d4:a5:6e:19:4e:6d:5d:37:a1:55:5f:c5:e0:8d:
         00:a1:41:ac:76:a1:92:0d:ad:6d:ac:01:46:21:d3:86:30:21:
         95:72:d2:f3:a5:32:9a:ee:14:b7:ab:ef:80:98:17:74:9b:53:
         1d:44:9d:e0:dd:86:96:ef:2e:92:b2:3c:57:d2:80:95:58:4e:
         63:64:b5:91:d2:2a:eb:fd:21:b4:56:72:91:d1:0e:ca:d3:d8:
         e1:76:4e:75:6b:de:e7:7a:3f:32:a6:99:4c:ff:2a:0e:60:c0:
         70:ae:f4:7d:7a:1f:b1:5a:31:b7:03:bf:db:61:30:90:56:94:
         1d:c7:7a:2d:67:10:a2:b9:03:45:60:53:54:63:92:4f:fb:8f:
         a4:58:d6:7e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0CF4zIKanABI6VMoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk
YTRmNTRmNjUtODljMC00YmJmLWJkMDgtZTQwNzIwZGJkOWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPEzRjStaeEYlk1+8blP2qlMLjY1ZsCAR7j8
Dvg+VzcZfoRw85tp00dMtS7iHHSS1mcpcyOrylRQS4XnJcVSkg7gjf6bdMZDBIim
OzL55Im4nWdzPgONotOx7aE+gRqLzhiToNlQElmjYytDyf8rrB3F7K5nNqqgf2HC
wPLE4SaZ7M4H4w0mB0TcxF+nOjT2QQltyYU2VvJ2HbYBvIj+PBRTj/n9vvrOleN3
/WWnSrxyTUJSEEk2fXDfI2fnbDmC6Y5E4yCcSV/VnWVtqVY6U5F2GK0RIcW5Sbcf
AixY3RFI+pWDauLfBzcb0joNkRLQSM1XqDN+DI6KMn9bAzDLSwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOIWl8Eajh8YASsS44MNJVI3LgLVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWNjNDg2N2EtMzM1Ni0z
N2E2LWJmNzUtNjliNjAzMTNmNWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgRgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAA5sBdDsLHj2LFZulxDWC1sNsqpx2ovJfsLim/hfdj2gCYco8LS4X
DPPnLlnL4CinF+I1jpwXdgT1tR55DQuXpjV/Ry42U8dK1YnLfkSncgdCIrSlKmag
0HBAFUQ2IR3tLy2jffPAV7TO3FGCaDfh3NSlbhlObV03oVVfxeCNAKFBrHahkg2t
bawBRiHThjAhlXLS86Uymu4Ut6vvgJgXdJtTHUSd4N2Glu8ukrI8V9KAlVhOY2S1
kdIq6/0htFZykdEOytPY4XZOdWve53o/MqaZTP8qDmDAcK70fXofsVoxtwO/22Ew
kFaUHcd6LWcQorkDRWBTVGOST/uPpFjWfg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:48:03 2026 by rpki-client