Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/80accf89-89c6-338c-b9b9-82508a0a0804.roa
File:                     80accf89-89c6-338c-b9b9-82508a0a0804.roa (raw, json)
Hash identifier:          MJUFtNsp2i7o2wd/wcMmND5oWkYzo52jpiJ/c/n1jA8=
Subject key identifier:   4D:F9:F1:BF:36:CD:D0:78:A7:CD:BC:76:CE:7F:E6:BE:B9:CE:A9:73
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D67DFF9595967543EF5F39100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/80accf89-89c6-338c-b9b9-82508a0a0804.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     30036
IP address blocks:        2604:2d81:1a80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:f9:59:59:67:54:3e:f5:f3:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=9e60df20-7d36-4ed7-af5a-7dd773e73fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:30:b5:1f:ee:0c:75:89:49:2e:59:a0:76:17:
                    cc:4a:5b:e0:d7:d0:e7:c5:8c:7f:a7:06:12:64:8f:
                    d6:82:14:e0:f1:5d:88:3d:df:0c:a0:4b:94:33:3d:
                    42:21:5c:3f:76:6e:e5:d7:9d:8f:2d:56:22:ca:d6:
                    43:cf:75:0e:db:cf:ea:a7:32:ef:70:67:08:18:ee:
                    26:5f:4e:41:fc:2c:9e:08:1c:ae:df:6d:9d:f9:77:
                    b7:f4:39:19:79:c5:b7:20:ff:35:e8:23:6f:ec:be:
                    aa:48:47:0a:fa:e2:4e:63:d7:ea:0a:c7:ed:8d:a5:
                    6c:f2:8a:6c:28:f6:74:c9:b4:9c:d9:e3:18:11:ce:
                    20:98:3e:04:cb:60:b0:ea:3c:49:19:75:48:81:72:
                    7b:19:6a:c0:e4:1c:17:70:86:7a:30:f2:9a:97:12:
                    9f:5f:f5:d7:6a:26:dc:46:09:e9:b1:8e:13:3d:2d:
                    25:20:5c:94:33:08:0a:df:a9:c8:55:63:93:75:95:
                    d8:95:6f:76:2d:7e:c7:d3:ef:f3:21:ad:01:f1:cc:
                    29:0a:2f:12:61:6b:ed:58:65:3a:8a:7e:f2:4f:cd:
                    3f:dc:ca:ff:6d:17:eb:40:41:7f:3d:93:46:6b:77:
                    cb:ae:ff:4f:38:84:d9:e3:4b:05:00:98:40:5d:c6:
                    9e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F9:F1:BF:36:CD:D0:78:A7:CD:BC:76:CE:7F:E6:BE:B9:CE:A9:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/80accf89-89c6-338c-b9b9-82508a0a0804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1a80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:74:f1:8e:b5:cd:93:45:a5:b4:fb:a2:2e:b6:27:b2:46:47:
         5e:96:db:f0:f8:de:4b:35:28:87:e5:05:e3:f9:a4:17:d2:1a:
         f4:ce:03:e5:b7:99:6d:4b:2a:65:37:6f:ca:cc:81:ad:13:9c:
         2a:03:af:ef:b1:87:97:d3:c3:92:0e:51:fa:7d:5a:47:76:70:
         90:b9:91:2a:e5:c3:9d:5e:04:3d:f5:d8:05:17:9f:b8:fb:73:
         f1:80:17:b8:fd:4a:ff:c6:40:d1:3a:37:c1:d0:97:5c:ea:65:
         7c:c4:b7:b2:2f:99:2d:c4:da:09:10:7f:f4:ce:2c:9e:40:26:
         05:1d:71:69:4f:5f:ad:fa:5a:11:03:95:53:20:13:60:52:29:
         b6:ea:85:79:d0:dd:20:08:db:9d:13:aa:14:fb:20:41:39:28:
         81:8a:77:ef:2f:c3:ed:11:e2:cc:1c:f8:a9:6c:95:04:3c:63:
         fb:f9:00:77:b3:8f:b6:46:74:5b:fc:27:80:97:83:a3:6c:04:
         0d:54:a3:86:1b:e4:9c:c8:b3:2f:59:41:1c:6f:76:63:fd:81:
         ca:b2:b6:81:0d:86:99:e9:eb:6a:08:60:12:37:e7:7c:29:1f:
         6b:ab:17:4b:dc:e3:c6:30:e4:b4:1c:ac:3c:ea:55:79:ab:9a:
         46:7d:a2:17
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1n3/lZWWdUPvXzkQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk
OWU2MGRmMjAtN2QzNi00ZWQ3LWFmNWEtN2RkNzczZTczZmEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizC1H+4MdYlJLlmgdhfMSlvg19DnxYx/pwYS
ZI/WghTg8V2IPd8MoEuUMz1CIVw/dm7l152PLVYiytZDz3UO28/qpzLvcGcIGO4m
X05B/CyeCByu322d+Xe39DkZecW3IP816CNv7L6qSEcK+uJOY9fqCsftjaVs8ops
KPZ0ybSc2eMYEc4gmD4Ey2Cw6jxJGXVIgXJ7GWrA5BwXcIZ6MPKalxKfX/XXaibc
RgnpsY4TPS0lIFyUMwgK36nIVWOTdZXYlW92LX7H0+/zIa0B8cwpCi8SYWvtWGU6
in7yT80/3Mr/bRfrQEF/PZNGa3fLrv9POITZ40sFAJhAXcaedQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFE358b82zdB4p828ds5/5r65zqlzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODBhY2NmODktODljNi0z
MzhjLWI5YjktODI1MDhhMGEwODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgRqA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGx08Y61zZNFpbT7oi62J7JGR16W2/D43ks1KIflBeP5pBfSGvTO
A+W3mW1LKmU3b8rMga0TnCoDr++xh5fTw5IOUfp9Wkd2cJC5kSrlw51eBD312AUX
n7j7c/GAF7j9Sv/GQNE6N8HQl1zqZXzEt7IvmS3E2gkQf/TOLJ5AJgUdcWlPX636
WhEDlVMgE2BSKbbqhXnQ3SAI250TqhT7IEE5KIGKd+8vw+0R4swc+KlslQQ8Y/v5
AHezj7ZGdFv8J4CXg6NsBA1Uo4Yb5JzIsy9ZQRxvdmP9gcqytoENhpnp62oIYBI3
53wpH2urF0vc48Yw5LQcrDzqVXmrmkZ9ohc=
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:41:24 2026 by rpki-client