Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a860acbc-fb2b-3daf-9414-d0cc53c6d924.roa
File:                     a860acbc-fb2b-3daf-9414-d0cc53c6d924.roa (raw, json)
Hash identifier:          CxS7RCiwWnYCyHRqXbXpy3wHhIk6e6xUr/Gc+la7c4A=
Subject key identifier:   1D:C7:E4:9A:0F:8F:77:FA:66:2B:19:6D:10:06:D1:19:92:AF:CD:F0
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E04362611D4DE30092F1DBCC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a860acbc-fb2b-3daf-9414-d0cc53c6d924.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     30036
IP address blocks:        2604:2d80:6800::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:26:11:d4:de:30:09:2f:1d:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=1bbb0494-d32e-46fb-9a18-13f6d8b2dc4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:11:87:68:ef:bc:6a:6e:2d:49:f7:cc:6d:3c:
                    ca:51:06:9b:81:70:61:1a:a6:17:05:85:c4:7d:33:
                    25:5f:14:bd:41:3a:4c:da:ee:35:89:25:99:28:d8:
                    bb:ce:25:ba:0b:b8:c1:bb:1d:dd:61:3d:e6:45:23:
                    f8:38:c1:7c:b1:82:5f:f6:86:53:e4:ac:eb:50:0b:
                    19:8e:3a:22:51:d1:5c:33:8b:b8:d6:62:fb:01:72:
                    99:7e:10:72:26:a5:be:6c:f5:da:7b:e5:2a:31:ff:
                    45:76:45:2b:75:93:ad:c8:92:05:0e:38:b1:e6:b4:
                    67:67:5d:3e:a5:1c:92:b0:8f:49:7a:5b:6f:d8:16:
                    cb:e9:fb:b8:32:99:b7:ca:7c:73:2a:32:df:bf:64:
                    76:fc:b6:57:7b:21:26:62:ea:ea:fb:92:5d:52:8e:
                    46:bb:34:89:d1:77:ff:9a:11:b0:d9:43:6b:24:b8:
                    f7:73:2f:cf:8b:e8:83:44:32:99:23:ff:0d:08:58:
                    f2:16:56:21:46:5c:97:87:37:43:ad:b7:7d:77:1c:
                    71:fb:2b:75:ce:a3:23:30:9a:28:08:6a:be:f7:e5:
                    0b:16:9f:ac:e2:51:ca:42:ae:f4:55:1d:1c:8d:a2:
                    c7:58:cf:7b:12:f5:bd:8d:a3:89:57:ce:86:71:eb:
                    6e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C7:E4:9A:0F:8F:77:FA:66:2B:19:6D:10:06:D1:19:92:AF:CD:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a860acbc-fb2b-3daf-9414-d0cc53c6d924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:6800::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:35:96:d8:2c:16:72:60:fa:58:98:e8:27:2c:8c:c3:60:03:
         40:9d:fb:81:01:4e:36:c8:f2:5a:16:0d:58:99:73:09:2e:38:
         d3:1c:bb:38:19:3f:2b:e6:0b:0a:58:1d:13:16:7e:28:74:e2:
         38:0a:d2:a6:03:93:0d:68:ee:a0:05:74:fa:56:3b:4d:d1:4e:
         d9:f6:7b:21:7a:68:16:a0:eb:37:94:7c:f5:14:eb:bd:65:8f:
         81:a6:29:fb:69:e5:1b:e2:9b:cd:bb:01:53:ac:a0:f9:b8:b6:
         08:81:52:28:f3:fe:90:5b:37:da:43:cf:1b:58:15:6e:b3:c0:
         b6:3d:c4:9f:33:63:e8:27:83:bd:9b:94:a9:5e:6a:7c:75:85:
         73:3c:65:6b:ac:0c:e3:c7:e9:1e:8c:0e:0f:6c:a2:40:b6:ea:
         90:d2:03:72:92:22:a2:0f:2e:44:e8:31:01:84:8e:df:56:8a:
         2b:f1:c4:53:48:21:11:42:1d:7a:5a:4c:b9:d6:47:c9:51:60:
         3d:8f:64:36:e6:1b:93:cd:1d:8b:8f:0f:86:c0:ce:fd:98:e5:
         ad:d7:e7:19:9a:fd:1d:ab:d0:2d:69:27:26:44:14:47:7b:68:
         00:05:47:6d:56:a8:68:e2:7a:00:e9:e6:af:8a:e3:a9:7b:e0:
         00:77:ad:2c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4ENiYR1N4wCS8dvMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk
MWJiYjA0OTQtZDMyZS00NmZiLTlhMTgtMTNmNmQ4YjJkYzRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRGHaO+8am4tSffMbTzKUQabgXBhGqYXBYXE
fTMlXxS9QTpM2u41iSWZKNi7ziW6C7jBux3dYT3mRSP4OMF8sYJf9oZT5KzrUAsZ
jjoiUdFcM4u41mL7AXKZfhByJqW+bPXae+UqMf9FdkUrdZOtyJIFDjix5rRnZ10+
pRySsI9Jeltv2BbL6fu4Mpm3ynxzKjLfv2R2/LZXeyEmYurq+5JdUo5GuzSJ0Xf/
mhGw2UNrJLj3cy/Pi+iDRDKZI/8NCFjyFlYhRlyXhzdDrbd9dxxx+yt1zqMjMJoo
CGq+9+ULFp+s4lHKQq70VR0cjaLHWM97EvW9jaOJV86GcetuaQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB3H5JoPj3f6ZisZbRAG0RmSr83wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTg2MGFjYmMtZmIyYi0z
ZGFmLTk0MTQtZDBjYzUzYzZkOTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgGgA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE01ltgsFnJg+liY6CcsjMNgA0Cd+4EBTjbI8loWDViZcwkuONMc
uzgZPyvmCwpYHRMWfih04jgK0qYDkw1o7qAFdPpWO03RTtn2eyF6aBag6zeUfPUU
671lj4GmKftp5Rvim827AVOsoPm4tgiBUijz/pBbN9pDzxtYFW6zwLY9xJ8zY+gn
g72blKleanx1hXM8ZWusDOPH6R6MDg9sokC26pDSA3KSIqIPLkToMQGEjt9Wiivx
xFNIIRFCHXpaTLnWR8lRYD2PZDbmG5PNHYuPD4bAzv2Y5a3X5xma/R2r0C1pJyZE
FEd7aAAFR21WqGjiegDp5q+K46l74AB3rSw=
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:02:00 2026 by rpki-client