Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af24fabb-a446-3593-9b02-7544b4fbbf3c.roa
File:                     af24fabb-a446-3593-9b02-7544b4fbbf3c.roa (raw, json)
Hash identifier:          hLyDoC8WnxksGCFOWSHM3Gy7LxxaDN86PIU1Zdvv9KY=
Subject key identifier:   43:D0:BF:9F:C5:31:DB:E5:49:D9:CB:47:EF:CB:11:B4:F6:8A:E3:0A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D624A5C039820BDD0077FA100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af24fabb-a446-3593-9b02-7544b4fbbf3c.roa
Signing time:             Fri 03 Apr 2026 13:00:30 +0000
ROA not before:           Fri 03 Apr 2026 13:00:30 +0000
ROA not after:            Thu 02 Jul 2026 13:00:30 +0000
asID:                     30036
IP address blocks:        2604:2d80:3000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:4a:5c:03:98:20:bd:d0:07:7f:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr  3 13:00:30 2026 GMT
            Not After : Jul  2 13:00:30 2026 GMT
        Subject: CN=a1e5fcee-c1d0-4142-b5be-41d2b710f0b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:32:6d:54:09:d0:63:74:9c:1a:fe:0e:72:41:
                    67:7c:98:b7:51:64:c7:a0:65:b8:7d:73:0b:84:41:
                    dd:89:64:6d:49:ed:86:41:cf:27:ef:14:fb:4a:5a:
                    b7:5e:75:5b:01:c8:e9:87:70:e3:9b:5d:49:3a:1e:
                    57:77:0e:eb:15:d1:f2:57:3f:1b:b6:03:42:e3:9b:
                    6e:98:1d:d7:b5:4d:3e:62:10:72:18:aa:37:9f:a9:
                    48:27:2e:a2:97:60:5a:3e:74:f0:d7:e4:41:dd:c2:
                    8a:fe:1a:aa:05:79:9b:58:27:70:a3:74:e5:a3:33:
                    d5:b1:9d:88:a1:96:c1:82:ef:e5:c6:74:66:8b:62:
                    c2:a4:99:65:86:7e:ef:74:9c:3d:66:be:ac:38:f0:
                    4e:85:25:5f:2d:f3:0f:10:be:22:6b:a1:93:85:e7:
                    cc:6b:89:20:8d:5b:5f:3b:91:f7:17:76:d2:8b:2d:
                    99:bc:31:17:c1:c5:0e:09:c4:31:3c:f7:ca:23:fd:
                    49:0c:56:3b:b8:7a:1d:47:50:11:80:61:b2:16:2b:
                    60:79:83:c9:8b:07:4b:24:23:4b:ca:33:2c:06:59:
                    c5:6c:15:45:de:cd:a6:9e:e4:d1:a1:06:bf:28:86:
                    93:c3:c4:ab:bc:a2:68:13:b1:bf:fa:19:58:18:98:
                    09:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D0:BF:9F:C5:31:DB:E5:49:D9:CB:47:EF:CB:11:B4:F6:8A:E3:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af24fabb-a446-3593-9b02-7544b4fbbf3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:3000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:40:73:5b:da:23:d3:11:e6:46:41:c9:ad:66:80:5d:7f:3c:
         ea:f0:ef:0f:73:56:56:0b:ee:e5:68:17:4f:fc:2d:df:f0:5b:
         24:89:f7:89:33:88:2d:99:22:22:99:80:8c:71:45:8c:a6:cd:
         bb:ee:1f:40:c3:9e:0d:96:68:f6:49:2c:41:7a:9c:6e:6b:1c:
         9c:ab:9f:55:62:58:fb:82:7b:e6:c5:88:32:9f:cb:dc:33:24:
         ee:f9:51:e8:8f:ca:48:da:b7:42:5f:6a:0a:75:ed:28:1c:de:
         73:ee:8a:cd:ca:89:2e:63:95:5a:06:f2:f5:b4:8c:04:e5:d8:
         34:26:ca:87:4b:c4:08:49:5b:4f:b8:16:12:f2:88:61:13:34:
         1b:e7:52:f7:bf:5e:cd:9f:2b:99:cf:03:fc:86:bc:c9:ff:bc:
         16:2b:7a:9f:9d:b2:17:ed:02:99:26:a4:4e:f2:75:37:d9:dd:
         c7:92:db:5f:a7:fa:d5:3d:7e:3e:86:c1:7d:16:3c:bd:2e:7e:
         32:61:04:ca:e7:df:0c:20:f0:49:5d:48:92:80:06:09:06:aa:
         7d:44:d4:34:18:f0:75:b3:62:83:eb:2d:dd:61:3a:48:b9:b0:
         10:f6:b6:cb:99:f1:1c:88:91:67:9d:63:81:e6:a3:bf:5e:0b:
         80:7f:ac:91
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1iSlwDmCC90Ad/oQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDQwMzEzMDAzMFoXDTI2MDcwMjEzMDAzMFowLzEtMCsGA1UEAxMk
YTFlNWZjZWUtYzFkMC00MTQyLWI1YmUtNDFkMmI3MTBmMGI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zJtVAnQY3ScGv4OckFnfJi3UWTHoGW4fXML
hEHdiWRtSe2GQc8n7xT7Slq3XnVbAcjph3Djm11JOh5Xdw7rFdHyVz8btgNC45tu
mB3XtU0+YhByGKo3n6lIJy6il2BaPnTw1+RB3cKK/hqqBXmbWCdwo3TlozPVsZ2I
oZbBgu/lxnRmi2LCpJllhn7vdJw9Zr6sOPBOhSVfLfMPEL4ia6GThefMa4kgjVtf
O5H3F3bSiy2ZvDEXwcUOCcQxPPfKI/1JDFY7uHodR1ARgGGyFitgeYPJiwdLJCNL
yjMsBlnFbBVF3s2mnuTRoQa/KIaTw8SrvKJoE7G/+hlYGJgJMwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEPQv5/FMdvlSdnLR+/LEbT2iuMKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWYyNGZhYmItYTQ0Ni0z
NTkzLTliMDItNzU0NGI0ZmJiZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgDAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAdUBzW9oj0xHmRkHJrWaAXX886vDvD3NWVgvu5WgXT/wt3/BbJIn3
iTOILZkiIpmAjHFFjKbNu+4fQMOeDZZo9kksQXqcbmscnKufVWJY+4J75sWIMp/L
3DMk7vlR6I/KSNq3Ql9qCnXtKBzec+6KzcqJLmOVWgby9bSMBOXYNCbKh0vECElb
T7gWEvKIYRM0G+dS979ezZ8rmc8D/Ia8yf+8Fit6n52yF+0CmSakTvJ1N9ndx5Lb
X6f61T1+PobBfRY8vS5+MmEEyuffDCDwSV1IkoAGCQaqfUTUNBjwdbNig+st3WE6
SLmwEPa2y5nxHIiRZ51jgeajv14LgH+skQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:10:14 2026 by rpki-client