Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7ff6626c-5d51-3b0d-80b8-3f627952e092.roa
File:                     7ff6626c-5d51-3b0d-80b8-3f627952e092.roa (raw, json)
Hash identifier:          2UCUY0KRhuUmvf61V+SN50pXt7MSW0PxuEoWhC6+6A4=
Subject key identifier:   00:01:CC:25:77:B8:87:57:61:9F:78:EB:E0:AE:2E:31:B7:B1:78:5D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F331D298D060D6BD53F5994C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7ff6626c-5d51-3b0d-80b8-3f627952e092.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     19905
IP address blocks:        2604:2d80:5e00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:29:8d:06:0d:6b:d5:3f:59:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=26adecea-9f54-423b-99ca-5b31e701af36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:84:a6:e7:47:16:7e:06:6f:23:3c:4e:0c:37:
                    5a:f2:15:96:1a:81:73:b2:3c:cb:7e:85:9a:f3:82:
                    08:9a:38:38:02:d0:d5:14:25:44:00:33:6b:59:3a:
                    c7:88:c4:77:c0:41:da:71:86:d1:2c:2b:f2:4e:15:
                    ba:f0:33:b2:e3:72:1a:50:d5:e5:e9:9c:23:3a:1c:
                    5a:ae:69:ff:6a:c8:df:96:cb:6c:b9:e5:06:8c:71:
                    9a:b1:de:9c:3e:b1:e4:f7:0c:25:86:3f:05:a7:05:
                    dc:f0:8e:7a:7c:35:24:cd:df:4d:1f:9b:1a:12:33:
                    fd:28:71:e4:93:aa:2c:4b:95:d6:a4:d0:4e:f4:75:
                    42:dc:d2:05:c5:de:b1:79:a7:96:90:da:17:ac:08:
                    b7:32:de:76:a1:08:0f:23:13:b5:25:2e:75:7f:dd:
                    53:31:a9:5c:e2:62:8a:c3:56:82:1d:15:c9:9a:69:
                    80:7c:e7:2a:59:36:fd:aa:58:cb:28:92:d9:35:2a:
                    7b:f7:16:1a:7e:97:e6:ea:ed:07:6c:0a:9b:a3:9d:
                    3a:6c:c0:12:1f:11:cb:7f:86:15:52:18:aa:35:c0:
                    c4:bf:f5:0b:46:02:d8:3f:8d:e2:af:07:44:a5:07:
                    b5:17:46:d1:8a:85:88:8f:1b:d2:74:3b:9f:ba:4c:
                    d7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:01:CC:25:77:B8:87:57:61:9F:78:EB:E0:AE:2E:31:B7:B1:78:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7ff6626c-5d51-3b0d-80b8-3f627952e092.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:5e00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:4b:ed:5a:62:3f:50:81:ab:47:34:a6:68:98:45:1f:26:c8:
         65:12:c3:10:b1:71:17:c7:a4:b8:f4:66:81:8f:78:cd:f8:f1:
         24:3b:8c:02:d6:19:48:2e:72:7b:45:d1:ed:42:2a:1d:51:58:
         63:9c:ca:52:3e:58:53:bf:0f:63:ca:37:5b:17:63:19:a9:a2:
         39:11:d9:b3:78:2d:82:ab:61:20:01:d5:6e:97:f4:1a:72:3e:
         cf:d8:7f:0a:0e:1c:df:ec:de:16:e1:4f:f9:fc:9c:83:46:30:
         90:b5:6e:ed:ca:25:c5:c8:42:65:09:88:f5:4e:bc:75:e3:cb:
         58:be:ec:4f:1e:9d:ac:83:a2:f6:d0:f8:04:f4:2f:b5:dc:dc:
         f2:be:b5:37:5d:e2:20:74:3d:a9:fc:ef:ad:f0:1a:39:a9:fe:
         12:b7:81:11:ca:16:8d:98:74:ad:46:2f:65:a3:22:38:ff:1d:
         e7:f0:18:8f:74:da:4f:23:92:5c:09:50:97:4f:ab:59:85:60:
         5d:a7:f8:44:ef:5c:84:11:e4:15:f0:ed:e5:01:a8:ed:9b:9d:
         78:45:5c:cb:61:eb:77:d0:f9:81:02:6a:de:2f:40:a8:23:2d:
         8b:f8:37:f1:83:fe:f3:22:14:2d:d1:d0:d3:6b:96:04:d3:78:
         88:5a:4a:75
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8zHSmNBg1r1T9ZlMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk
MjZhZGVjZWEtOWY1NC00MjNiLTk5Y2EtNWIzMWU3MDFhZjM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4Sm50cWfgZvIzxODDda8hWWGoFzsjzLfoWa
84IImjg4AtDVFCVEADNrWTrHiMR3wEHacYbRLCvyThW68DOy43IaUNXl6ZwjOhxa
rmn/asjflstsueUGjHGasd6cPrHk9wwlhj8FpwXc8I56fDUkzd9NH5saEjP9KHHk
k6osS5XWpNBO9HVC3NIFxd6xeaeWkNoXrAi3Mt52oQgPIxO1JS51f91TMalc4mKK
w1aCHRXJmmmAfOcqWTb9qljLKJLZNSp79xYafpfm6u0HbAqbo506bMASHxHLf4YV
UhiqNcDEv/ULRgLYP43irwdEpQe1F0bRioWIjxvSdDufukzXWwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAABzCV3uIdXYZ946+CuLjG3sXhdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvN2ZmNjYyNmMtNWQ1MS0z
YjBkLTgwYjgtM2Y2Mjc5NTJlMDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgF4A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGxL7VpiP1CBq0c0pmiYRR8myGUSwxCxcRfHpLj0ZoGPeM348SQ7
jALWGUgucntF0e1CKh1RWGOcylI+WFO/D2PKN1sXYxmpojkR2bN4LYKrYSAB1W6X
9BpyPs/YfwoOHN/s3hbhT/n8nINGMJC1bu3KJcXIQmUJiPVOvHXjy1i+7E8enayD
ovbQ+AT0L7Xc3PK+tTdd4iB0Pan8763wGjmp/hK3gRHKFo2YdK1GL2WjIjj/Hefw
GI902k8jklwJUJdPq1mFYF2n+ETvXIQR5BXw7eUBqO2bnXhFXMth63fQ+YECat4v
QKgjLYv4N/GD/vMiFC3R0NNrlgTTeIhaSnU=
-----END CERTIFICATE-----
Generated at Sun Sep 20 20:19:35 2026 by rpki-client