Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/73b43347-6fb9-3488-a979-4768613d4993.roa
File:                     73b43347-6fb9-3488-a979-4768613d4993.roa (raw, json)
Hash identifier:          dRuN511opMf+6wD2eLSzca5r2J8/nBQdrSJIGo1LdXg=
Subject key identifier:   79:B7:4C:02:EE:14:96:6E:9B:0F:D5:54:5E:98:30:30:8A:9E:EC:36
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CEE8CDC1A70B60B2D9EF40528
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/73b43347-6fb9-3488-a979-4768613d4993.roa
Signing time:             Sat 21 Feb 2026 02:00:32 +0000
ROA not before:           Sat 21 Feb 2026 02:00:32 +0000
ROA not after:            Fri 22 May 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        2604:2d81:1400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ee:8c:dc:1a:70:b6:0b:2d:9e:f4:05:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 21 02:00:32 2026 GMT
            Not After : May 22 01:00:32 2026 GMT
        Subject: CN=e5133596-d135-417e-979c-2304d1e7cba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:38:d5:08:0c:50:1f:13:bd:84:5d:ba:da:53:
                    0d:6a:71:71:56:89:20:3d:7c:e1:00:44:cd:07:8c:
                    c9:31:04:23:d4:65:17:17:22:88:e2:ef:1e:76:d3:
                    dd:79:f0:c9:7a:37:ec:72:7c:e5:b0:6a:bb:54:c4:
                    fb:0e:10:3a:42:2a:97:44:c4:7a:52:8c:35:1c:da:
                    1d:f1:07:e1:80:94:50:91:c6:a8:f2:e0:34:1e:62:
                    35:4b:18:a9:e8:b8:cf:b4:48:97:01:b5:e1:98:bc:
                    a2:b8:56:e5:90:fc:d6:b1:24:1b:3a:7b:40:c4:da:
                    40:f1:4c:78:23:1d:1a:17:4a:53:7a:9f:04:ea:ad:
                    a5:3f:1f:04:81:5f:64:b2:8d:f6:60:4a:db:5a:79:
                    69:1c:15:e2:b6:e9:97:00:ed:3a:dd:9b:01:b8:f0:
                    a2:a2:73:a7:e4:d2:19:35:b6:61:f6:3f:24:0c:d3:
                    93:e0:8b:6f:e8:28:27:90:13:25:69:39:88:dd:37:
                    8f:71:a6:cf:67:55:3c:6c:af:36:5a:26:cf:0d:7f:
                    75:b3:36:f8:0f:05:22:83:7e:31:f6:e0:40:9c:28:
                    04:26:0b:87:f4:ee:f0:57:db:61:1a:d3:8b:09:1a:
                    f7:4d:dc:e7:df:5e:79:d2:da:a1:a7:43:b9:cc:46:
                    21:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B7:4C:02:EE:14:96:6E:9B:0F:D5:54:5E:98:30:30:8A:9E:EC:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/73b43347-6fb9-3488-a979-4768613d4993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:89:d8:b4:57:3c:15:f2:97:87:72:c3:24:65:0b:49:a8:9d:
         09:59:9e:0b:2b:78:b9:3b:24:6a:11:21:2a:3e:5b:45:db:7d:
         e3:c4:0f:3c:b6:d5:78:2a:4e:e5:6b:c1:de:ec:26:e6:d7:61:
         26:86:be:8f:bc:f3:44:6f:36:c2:b9:1d:ef:fd:27:23:93:a1:
         41:9a:c5:a8:04:1f:ac:4d:38:6f:e4:3b:0a:4d:6e:63:41:63:
         31:7d:b3:1c:46:a4:74:b4:da:dc:3a:c3:97:61:55:70:ee:ed:
         8f:8a:fc:c1:08:39:a1:e9:b8:72:ca:af:79:93:ad:88:62:33:
         3c:20:a1:b8:45:80:18:82:1a:40:9f:c3:bc:40:99:c6:bb:a2:
         9f:a0:9b:0e:be:dc:f9:d6:d9:7f:bd:4c:ac:fe:41:e3:33:d3:
         65:9b:6b:aa:13:0b:ac:42:da:e8:a2:9d:58:14:12:49:97:c4:
         ce:c8:2b:40:2f:51:a6:a5:43:cf:c0:c5:a4:d8:f2:b7:f2:79:
         1c:58:02:3b:cb:f9:27:b9:51:7c:d0:1b:4b:7b:01:56:7e:12:
         95:ea:fe:aa:6b:a7:24:9b:e0:7d:14:0b:43:0b:1b:8e:00:a9:
         c8:b6:e0:cd:db:34:44:a5:75:64:c1:58:ce:10:e4:12:ad:9f:
         63:19:fb:e1
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEzujNwacLYLLZ70BSgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDIyMTAyMDAzMloXDTI2MDUyMjAxMDAzMlowLzEtMCsGA1UEAxMk
ZTUxMzM1OTYtZDEzNS00MTdlLTk3OWMtMjMwNGQxZTdjYmEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjjVCAxQHxO9hF262lMNanFxVokgPXzhAETN
B4zJMQQj1GUXFyKI4u8edtPdefDJejfscnzlsGq7VMT7DhA6QiqXRMR6Uow1HNod
8QfhgJRQkcao8uA0HmI1Sxip6LjPtEiXAbXhmLyiuFblkPzWsSQbOntAxNpA8Ux4
Ix0aF0pTep8E6q2lPx8EgV9kso32YErbWnlpHBXitumXAO063ZsBuPCionOn5NIZ
NbZh9j8kDNOT4Itv6CgnkBMlaTmI3TePcabPZ1U8bK82WibPDX91szb4DwUig34x
9uBAnCgEJguH9O7wV9thGtOLCRr3Tdzn31550tqhp0O5zEYhpwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHm3TALuFJZumw/VVF6YMDCKnuw2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzNiNDMzNDctNmZiOS0z
NDg4LWE5NzktNDc2ODYxM2Q0OTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgRQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAQ4nYtFc8FfKXh3LDJGULSaidCVmeCyt4uTskahEhKj5bRdt948QP
PLbVeCpO5WvB3uwm5tdhJoa+j7zzRG82wrkd7/0nI5OhQZrFqAQfrE04b+Q7Ck1u
Y0FjMX2zHEakdLTa3DrDl2FVcO7tj4r8wQg5oem4csqveZOtiGIzPCChuEWAGIIa
QJ/DvECZxruin6CbDr7c+dbZf71MrP5B4zPTZZtrqhMLrELa6KKdWBQSSZfEzsgr
QC9RpqVDz8DFpNjyt/J5HFgCO8v5J7lRfNAbS3sBVn4Sler+qmunJJvgfRQLQwsb
jgCpyLbgzds0RKV1ZMFYzhDkEq2fYxn74Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:12:04 2026 by rpki-client