Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e5738ff-fe38-301f-865a-f822c6887cbd.roa
File:                     8e5738ff-fe38-301f-865a-f822c6887cbd.roa (raw, json)
Hash identifier:          sLxJ/V7VH0dWBd1phrEb3oiE47yadsJDqo6KbAMepZA=
Subject key identifier:   6E:9E:6D:40:01:6A:B8:31:95:63:EC:1A:75:86:2F:EA:03:9C:4D:C7
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D571FA93C4A8527A03884D700
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e5738ff-fe38-301f-865a-f822c6887cbd.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     30036
IP address blocks:        2604:2d81:3480::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:a9:3c:4a:85:27:a0:38:84:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=135c4521-9f52-4164-9e5c-a3647f98ca9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0f:f6:e8:37:96:43:2f:af:1f:b5:9e:11:fc:
                    0b:e1:a0:03:17:2b:2e:7f:b9:39:6b:e7:7f:04:d3:
                    a7:e9:8d:ad:c2:9f:40:b2:a1:0f:75:8a:f9:1e:55:
                    35:12:62:1e:38:1d:01:72:b4:51:25:0a:5e:76:03:
                    86:d5:2b:2b:7d:4f:38:89:02:12:9b:3e:d9:ca:df:
                    e1:0a:11:41:8c:7f:f4:fa:0d:39:24:db:ab:88:6a:
                    5a:72:ba:48:d6:8a:1b:3d:bf:d3:b5:e3:42:2f:2c:
                    67:6a:f0:ca:f2:3c:7f:67:2e:6f:1e:52:5f:6b:9a:
                    df:9d:a3:e0:bd:67:5b:35:0b:0c:ff:90:96:95:e6:
                    0f:29:77:b7:fa:f9:e3:36:0e:0d:79:de:48:5c:a0:
                    db:aa:f5:87:6b:df:f8:5f:71:f8:ee:de:df:59:28:
                    6b:e2:fa:98:55:63:93:32:5e:52:13:04:b6:48:4b:
                    11:5f:59:a1:27:44:ae:9b:89:e6:85:56:7e:75:d8:
                    02:87:5c:d7:6a:4e:fb:f9:57:4a:0d:37:79:4a:fd:
                    b1:33:04:e1:8f:e3:9b:b8:8d:0b:36:d6:f6:ef:86:
                    a7:9a:73:14:c5:fb:49:dd:5d:f4:d4:4f:2b:8d:ee:
                    0c:43:94:07:d2:bc:f2:90:e5:d2:09:68:29:2d:c3:
                    25:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9E:6D:40:01:6A:B8:31:95:63:EC:1A:75:86:2F:EA:03:9C:4D:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e5738ff-fe38-301f-865a-f822c6887cbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:3480::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:8c:fc:c6:51:72:10:ef:b7:78:b3:a7:79:21:02:c1:62:aa:
         83:b0:ac:2d:9a:85:d4:ed:4a:cb:f1:97:9b:71:aa:1d:47:11:
         25:28:d0:07:cc:39:1e:97:46:cd:ef:2d:ef:9b:fa:1a:7c:50:
         c0:6c:23:0e:11:51:39:80:02:8a:9d:21:bf:a6:6d:04:23:83:
         88:59:6b:48:ec:4e:68:ef:56:a7:85:be:b9:61:cb:cc:46:42:
         2b:d0:4f:bb:c2:98:0c:1f:c5:32:73:1a:aa:6a:ab:cc:b2:ea:
         bd:ec:ba:17:2e:ba:3a:6c:75:1c:6c:80:ba:84:37:60:75:b8:
         7f:1f:31:98:84:3a:7c:dc:8b:9b:35:1e:31:88:0e:ce:e2:b6:
         22:16:3d:bb:d7:e8:2b:c7:e6:6b:f7:92:4a:4b:5f:5f:68:76:
         bc:55:9b:43:9b:04:9f:b3:0c:c7:bc:7e:e7:a5:32:7a:fb:82:
         d7:5d:66:5b:6d:bd:67:30:a3:51:c9:67:d9:40:b2:5f:1d:ce:
         09:db:6e:fc:3f:36:2c:c6:bd:3f:47:85:f1:77:5a:81:b6:78:
         fd:f6:b1:c8:16:43:ca:c3:70:88:b6:58:71:7f:54:5e:3a:2a:
         03:a6:f5:e7:dc:50:ff:6e:d1:49:ce:1c:08:07:69:70:10:8c:
         63:38:ba:94
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1XH6k8SoUnoDiE1wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk
MTM1YzQ1MjEtOWY1Mi00MTY0LTllNWMtYTM2NDdmOThjYTlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog/26DeWQy+vH7WeEfwL4aADFysuf7k5a+d/
BNOn6Y2twp9AsqEPdYr5HlU1EmIeOB0BcrRRJQpedgOG1SsrfU84iQISmz7Zyt/h
ChFBjH/0+g05JNuriGpacrpI1oobPb/TteNCLyxnavDK8jx/Zy5vHlJfa5rfnaPg
vWdbNQsM/5CWleYPKXe3+vnjNg4Ned5IXKDbqvWHa9/4X3H47t7fWShr4vqYVWOT
Ml5SEwS2SEsRX1mhJ0Sum4nmhVZ+ddgCh1zXak77+VdKDTd5Sv2xMwThj+ObuI0L
Ntb274anmnMUxftJ3V301E8rje4MQ5QH0rzykOXSCWgpLcMliwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFG6ebUABargxlWPsGnWGL+oDnE3HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGU1NzM4ZmYtZmUzOC0z
MDFmLTg2NWEtZjgyMmM2ODg3Y2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgTSA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFuM/MZRchDvt3izp3khAsFiqoOwrC2ahdTtSsvxl5txqh1HESUo
0AfMOR6XRs3vLe+b+hp8UMBsIw4RUTmAAoqdIb+mbQQjg4hZa0jsTmjvVqeFvrlh
y8xGQivQT7vCmAwfxTJzGqpqq8yy6r3suhcuujpsdRxsgLqEN2B1uH8fMZiEOnzc
i5s1HjGIDs7itiIWPbvX6CvH5mv3kkpLX19odrxVm0ObBJ+zDMe8fuelMnr7gtdd
ZlttvWcwo1HJZ9lAsl8dzgnbbvw/NizGvT9HhfF3WoG2eP32scgWQ8rDcIi2WHF/
VF46KgOm9efcUP9u0UnOHAgHaXAQjGM4upQ=
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:40:43 2026 by rpki-client