Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9fce646a-0538-32bc-b4eb-482cc080646d.roa
File:                     9fce646a-0538-32bc-b4eb-482cc080646d.roa (raw, json)
Hash identifier:          T+pIIjY5nC8SLmZPOBJFjL9HQboV9VXJYO+wIJAGI3g=
Subject key identifier:   2F:5C:01:A5:48:6A:6A:8B:D4:CB:F6:10:1C:5F:9D:BE:24:A6:E8:5F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D75D54E6F51266E27F2A4AB00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9fce646a-0538-32bc-b4eb-482cc080646d.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     30036
IP address blocks:        2604:2d80:4400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:4e:6f:51:26:6e:27:f2:a4:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=0dba38c5-fea1-4751-b783-6945cff23d9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:11:6d:78:4f:61:d5:dc:fb:e8:22:26:ff:62:
                    e5:65:e8:0e:f8:77:f9:67:f5:7b:0d:d2:1d:ab:0e:
                    d8:41:5b:5d:ce:94:1f:71:ed:e1:8f:57:77:24:75:
                    1c:51:7f:2c:62:cd:1e:7d:3a:f8:af:e2:63:b1:d2:
                    e0:c4:9a:11:7a:2e:17:cb:c0:bd:4f:5b:45:1b:c9:
                    f8:72:87:08:7c:d5:9b:7e:35:16:f6:f1:35:00:2c:
                    cc:b0:ed:92:9f:35:d1:a7:68:92:da:be:71:2d:6e:
                    bf:ed:87:8a:0a:65:c8:a5:a0:16:ce:ac:27:5f:e5:
                    fc:0c:81:6c:37:0c:3c:d7:18:09:e2:75:32:c8:f4:
                    6b:b0:88:7c:de:60:ce:2d:84:36:2f:35:7d:1e:11:
                    74:7f:04:a4:2d:84:6d:7a:a8:c8:11:ba:9d:18:d3:
                    78:94:ab:6a:cf:dd:a7:bd:70:2c:74:11:e6:76:3e:
                    a8:1e:a8:f0:af:0f:82:f9:aa:a7:65:d2:71:14:f6:
                    0f:df:97:cb:e2:d7:59:5a:5e:68:de:97:ba:55:44:
                    15:33:45:1a:b5:8e:eb:1b:2f:a6:ac:ed:e1:4c:47:
                    75:16:61:ff:5a:76:d7:57:d9:76:46:c3:6c:97:28:
                    16:88:ae:e7:8c:54:24:1d:77:eb:31:c4:26:ce:b9:
                    18:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:5C:01:A5:48:6A:6A:8B:D4:CB:F6:10:1C:5F:9D:BE:24:A6:E8:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9fce646a-0538-32bc-b4eb-482cc080646d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:4400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:49:ed:e1:80:c7:a6:fd:4e:bd:ab:c4:fe:1f:9f:d7:e4:2e:
         f9:06:32:34:d5:00:d2:c2:10:14:73:f1:60:8d:96:7f:ab:39:
         3e:f1:43:f8:be:21:8a:c0:09:8c:3f:92:f3:a3:c1:68:3b:a2:
         28:27:53:06:14:57:89:a0:74:3f:5a:e0:92:ff:d1:bf:ee:2d:
         bd:f5:d0:02:be:c3:e2:7c:e7:ff:ce:53:bb:0d:75:6d:e8:c1:
         f5:d9:06:8a:b1:25:30:61:08:c6:28:4e:5a:f7:b8:f3:33:02:
         26:59:ad:ab:35:f4:e7:35:2b:5f:06:b5:71:94:f5:c3:e3:00:
         c0:c0:99:28:4d:e7:40:7a:72:33:61:7a:0e:d2:c4:fe:45:56:
         d4:2c:e6:d6:52:53:56:e0:a1:0c:c2:7a:2f:26:d1:69:71:3c:
         13:f4:15:45:49:5c:bf:73:99:f9:f9:84:2a:d8:b2:58:e9:7d:
         e5:30:68:fa:cd:06:f7:0f:f4:79:b6:53:5f:b5:35:b1:0e:c7:
         96:c0:f2:1a:22:93:26:99:ff:09:20:ba:c9:90:66:bc:19:d3:
         03:57:b4:83:ce:5a:5d:e3:e9:5d:57:a4:3b:36:22:6f:91:ff:
         e9:4c:c5:59:3a:d1:55:e8:51:69:13:1a:20:48:52:12:0c:50:
         92:ef:cc:15
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE111U5vUSZuJ/KkqwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk
MGRiYTM4YzUtZmVhMS00NzUxLWI3ODMtNjk0NWNmZjIzZDljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshFteE9h1dz76CIm/2LlZegO+Hf5Z/V7DdId
qw7YQVtdzpQfce3hj1d3JHUcUX8sYs0efTr4r+JjsdLgxJoRei4Xy8C9T1tFG8n4
cocIfNWbfjUW9vE1ACzMsO2SnzXRp2iS2r5xLW6/7YeKCmXIpaAWzqwnX+X8DIFs
Nww81xgJ4nUyyPRrsIh83mDOLYQ2LzV9HhF0fwSkLYRteqjIEbqdGNN4lKtqz92n
vXAsdBHmdj6oHqjwrw+C+aqnZdJxFPYP35fL4tdZWl5o3pe6VUQVM0UatY7rGy+m
rO3hTEd1FmH/WnbXV9l2RsNslygWiK7njFQkHXfrMcQmzrkYOwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFC9cAaVIamqL1Mv2EBxfnb4kpuhfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWZjZTY0NmEtMDUzOC0z
MmJjLWI0ZWItNDgyY2MwODA2NDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgEQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAB0nt4YDHpv1OvavE/h+f1+Qu+QYyNNUA0sIQFHPxYI2Wf6s5PvFD
+L4hisAJjD+S86PBaDuiKCdTBhRXiaB0P1rgkv/Rv+4tvfXQAr7D4nzn/85Tuw11
bejB9dkGirElMGEIxihOWve48zMCJlmtqzX05zUrXwa1cZT1w+MAwMCZKE3nQHpy
M2F6DtLE/kVW1Czm1lJTVuChDMJ6LybRaXE8E/QVRUlcv3OZ+fmEKtiyWOl95TBo
+s0G9w/0ebZTX7U1sQ7HlsDyGiKTJpn/CSC6yZBmvBnTA1e0g85aXePpXVekOzYi
b5H/6UzFWTrRVehRaRMaIEhSEgxQku/MFQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:01:20 2026 by rpki-client