Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9227fa5c-c6a3-3a78-ab45-101587aebb05.roa
File:                     9227fa5c-c6a3-3a78-ab45-101587aebb05.roa (raw, json)
Hash identifier:          wz5jQfAHXH6GcPbX7evsOyN1pJygcspRo5ep+tdxQ6U=
Subject key identifier:   F5:42:E7:66:52:C3:32:54:EE:B8:D8:17:20:46:84:BC:8F:EA:A1:6D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA79BA969B6BBA403B91EEEA0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9227fa5c-c6a3-3a78-ab45-101587aebb05.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:a9:69:b6:bb:a4:03:b9:1e:ee:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4ffd724a-abfd-4431-9e42-86aed58d10b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:17:2d:fc:5f:39:25:30:66:f5:67:59:45:cb:
                    b1:b1:58:10:bd:8d:13:40:ad:a5:ae:8d:7d:10:63:
                    15:48:f4:39:ba:58:57:53:98:76:6a:5c:bc:36:90:
                    a7:b4:5a:7e:3a:67:cd:13:bb:2e:96:9e:53:e8:12:
                    bf:02:94:1a:c7:eb:c9:c7:0b:53:33:2a:a3:34:ff:
                    e3:2b:53:0a:fb:ee:4e:f3:11:42:b2:9f:26:05:df:
                    9f:d6:9b:73:e2:bd:52:56:08:09:dd:bd:a5:03:48:
                    a4:b5:80:7a:4b:41:c0:09:1c:9a:6e:15:41:73:0c:
                    b8:0c:8b:62:a9:6f:1e:dc:30:fc:ad:5d:38:97:0c:
                    ed:58:8e:52:80:90:e4:c8:2a:fd:a9:a7:06:bc:83:
                    86:ad:f8:c8:d6:64:78:80:31:85:3b:53:3c:5a:97:
                    11:27:03:f2:8b:11:ae:52:c7:11:87:2a:91:af:0c:
                    1a:7d:2f:01:73:ad:ab:8f:74:dd:a4:ee:aa:6f:24:
                    35:25:51:d3:56:34:a1:b3:df:59:ac:3a:1e:70:28:
                    88:68:50:bf:22:a2:69:07:47:09:16:3a:fa:a6:59:
                    35:d6:ab:ad:04:d7:95:2e:28:09:a1:4c:ce:60:7a:
                    b0:fb:2b:6e:06:2c:52:8f:9f:5a:c1:75:4d:a4:43:
                    09:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:42:E7:66:52:C3:32:54:EE:B8:D8:17:20:46:84:BC:8F:EA:A1:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9227fa5c-c6a3-3a78-ab45-101587aebb05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:16:8f:d1:2e:c1:37:88:c8:49:70:7b:dd:27:10:04:b0:d8:
         33:ac:99:e3:c5:57:75:76:39:f7:8a:24:db:50:8c:db:cf:27:
         a9:71:b4:a7:97:8d:35:ab:97:2f:00:b4:0f:b7:3b:27:82:4d:
         03:25:d6:e3:0f:a4:c0:aa:9d:73:c1:a3:a4:22:c9:bc:7c:90:
         90:bb:df:a4:4f:6d:33:64:70:0e:5e:7e:33:0a:46:f6:07:96:
         41:b3:4d:3b:41:a2:e3:1b:70:da:b8:36:71:c4:ba:87:68:20:
         89:79:57:59:d2:b3:1b:af:e0:b0:b2:a0:61:fc:a3:ea:29:d6:
         dd:70:9f:12:d3:76:a9:55:c8:ff:73:96:b3:9a:e6:f6:a3:dd:
         72:f3:d1:ec:47:56:30:a4:e7:26:6a:ee:a9:ce:7a:ab:3c:1f:
         7d:2b:d4:d2:d9:67:d3:c3:f8:03:a3:19:1b:91:41:62:d6:2b:
         33:05:bf:dd:d7:3c:2a:95:df:50:03:1d:1f:57:84:e5:4d:30:
         05:d8:62:77:38:41:86:3d:d1:f7:98:7e:fc:78:eb:26:78:61:
         7a:64:32:78:25:ae:54:f8:29:42:43:c4:1d:a5:52:48:ee:03:
         2f:bf:e3:d4:a6:27:08:0e:b8:e5:f8:3d:85:a0:94:a5:91:01:
         db:99:2f:09
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nm6lptrukA7ke7qAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NGZmZDcyNGEtYWJmZC00NDMxLTllNDItODZhZWQ1OGQxMGIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBct/F85JTBm9WdZRcuxsVgQvY0TQK2lro19
EGMVSPQ5ulhXU5h2aly8NpCntFp+OmfNE7sulp5T6BK/ApQax+vJxwtTMyqjNP/j
K1MK++5O8xFCsp8mBd+f1ptz4r1SVggJ3b2lA0iktYB6S0HACRyabhVBcwy4DIti
qW8e3DD8rV04lwztWI5SgJDkyCr9qacGvIOGrfjI1mR4gDGFO1M8WpcRJwPyixGu
UscRhyqRrwwafS8Bc62rj3TdpO6qbyQ1JVHTVjShs99ZrDoecCiIaFC/IqJpB0cJ
Fjr6plk11qutBNeVLigJoUzOYHqw+ytuBixSj59awXVNpEMJcQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPVC52ZSwzJU7rjYFyBGhLyP6qFtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTIyN2ZhNWMtYzZhMy0z
YTc4LWFiNDUtMTAxNTg3YWViYjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABwWj9EuwTeIyElwe90nEASw2DOsmePFV3V2OfeKJNtQjNvPJ6lx
tKeXjTWrly8AtA+3OyeCTQMl1uMPpMCqnXPBo6Qiybx8kJC736RPbTNkcA5efjMK
RvYHlkGzTTtBouMbcNq4NnHEuodoIIl5V1nSsxuv4LCyoGH8o+op1t1wnxLTdqlV
yP9zlrOa5vaj3XLz0exHVjCk5yZq7qnOeqs8H30r1NLZZ9PD+AOjGRuRQWLWKzMF
v93XPCqV31ADHR9XhOVNMAXYYnc4QYY90feYfvx46yZ4YXpkMnglrlT4KUJDxB2l
UkjuAy+/49SmJwgOuOX4PYWglKWRAduZLwk=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:56:27 2026 by rpki-client