Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b9d49e71-6f4f-36df-b865-0a55f6c3abfa.roa
File:                     b9d49e71-6f4f-36df-b865-0a55f6c3abfa.roa (raw, json)
Hash identifier:          GsPvMgYuFyAzS8bWHRlXG12JP/uLmsblEMJELC6/vE8=
Subject key identifier:   76:E5:69:49:F6:5E:17:C6:3B:82:06:CC:05:85:E7:B6:B2:A3:81:FA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA794F5E5E67672266ED3C640
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b9d49e71-6f4f-36df-b865-0a55f6c3abfa.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d81:1780::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:f5:e5:e6:76:72:26:6e:d3:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e54e706c-57f2-4942-bf9a-1612bbf197e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:21:af:5f:64:0c:a2:66:de:52:73:37:65:c0:
                    e0:a3:57:dc:2b:e4:79:e8:cf:14:43:cc:f4:a8:0a:
                    8a:a2:f4:d3:71:06:1a:f7:9f:20:aa:bc:d4:34:b4:
                    32:8c:eb:f0:e1:ef:7f:d0:2f:ca:46:60:06:cb:c2:
                    e9:2e:3f:41:1e:5b:4d:5c:c8:aa:e8:74:53:df:ab:
                    cf:9d:35:33:f9:6c:27:df:48:8a:26:c7:d0:77:bb:
                    7f:e7:c2:a5:3f:d8:19:80:d0:16:9a:b7:13:0a:e1:
                    d3:6d:1e:3a:1b:0d:7f:1a:68:c8:f3:e4:f4:3b:0e:
                    76:77:e5:70:06:26:3f:a0:18:b9:b1:d1:e2:57:53:
                    3b:74:ae:3e:b6:72:22:0f:15:79:46:0a:f1:67:6c:
                    50:08:3f:17:03:97:e8:6a:90:df:8e:ab:e4:69:25:
                    cf:82:81:db:cd:77:b0:48:81:fd:76:a3:31:74:a1:
                    7a:b8:04:e3:ae:a4:72:5d:ba:11:ed:8c:54:d1:cd:
                    1d:48:4d:00:33:b6:25:70:d3:0d:ca:a5:e8:9a:ed:
                    22:7b:a0:62:9f:0c:ef:f3:ff:a2:c8:9a:3d:6f:d1:
                    a2:21:08:ef:70:2e:57:07:01:d1:ad:24:cd:78:1a:
                    de:a6:53:ee:63:2f:b0:18:bf:88:57:4d:e3:cd:32:
                    4b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E5:69:49:F6:5E:17:C6:3B:82:06:CC:05:85:E7:B6:B2:A3:81:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b9d49e71-6f4f-36df-b865-0a55f6c3abfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1780::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:10:43:b7:e4:ca:5f:b1:bf:07:66:97:97:6c:3c:28:e8:22:
         d2:eb:c0:55:bc:a4:1d:fa:36:4b:ac:41:32:ac:2b:6b:5d:c6:
         26:9c:98:b7:ac:8e:ff:12:cb:a8:fb:8a:9b:95:e1:df:25:2d:
         1d:a2:59:07:f2:79:40:82:1f:53:a9:fc:73:df:fb:bf:1d:12:
         7f:28:75:88:4d:9c:49:fb:69:12:db:c3:f6:e2:59:7e:01:42:
         97:80:92:c3:7c:5a:d7:95:52:18:3a:eb:f2:30:f5:52:73:5d:
         43:69:48:d2:66:fa:2c:c8:ae:b5:9d:f3:42:96:e2:c2:c6:0b:
         97:47:35:69:c8:b4:00:9b:7d:f9:c2:54:50:35:a1:6f:73:f9:
         ec:53:f5:f1:c2:c6:44:ed:0c:03:49:92:5b:0e:28:50:31:c5:
         49:37:d3:17:8d:99:15:80:01:44:10:e0:6d:6d:cd:93:26:1d:
         f5:a2:22:60:71:28:04:83:ec:b0:b1:8c:78:fc:07:17:b6:a9:
         f9:6e:d6:5d:61:aa:2b:c7:be:d4:1b:9c:fe:3a:6d:97:1a:66:
         23:13:5e:b5:b3:e7:b8:d5:8a:ba:61:8d:4c:da:92:b3:05:f4:
         01:08:0b:87:f6:4d:e6:3e:25:81:61:f8:76:bd:eb:8b:65:88:
         cb:20:be:5a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nlPXl5nZyJm7TxkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZTU0ZTcwNmMtNTdmMi00OTQyLWJmOWEtMTYxMmJiZjE5N2U1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCGvX2QMombeUnM3ZcDgo1fcK+R56M8UQ8z0
qAqKovTTcQYa958gqrzUNLQyjOvw4e9/0C/KRmAGy8LpLj9BHltNXMiq6HRT36vP
nTUz+Wwn30iKJsfQd7t/58KlP9gZgNAWmrcTCuHTbR46Gw1/GmjI8+T0Ow52d+Vw
BiY/oBi5sdHiV1M7dK4+tnIiDxV5RgrxZ2xQCD8XA5foapDfjqvkaSXPgoHbzXew
SIH9dqMxdKF6uATjrqRyXboR7YxU0c0dSE0AM7YlcNMNyqXomu0ie6Binwzv8/+i
yJo9b9GiIQjvcC5XBwHRrSTNeBreplPuYy+wGL+IV03jzTJLQQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHblaUn2XhfGO4IGzAWF57ayo4H6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjlkNDllNzEtNmY0Zi0z
NmRmLWI4NjUtMGE1NWY2YzNhYmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgReA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADMQQ7fkyl+xvwdml5dsPCjoItLrwFW8pB36NkusQTKsK2tdxiac
mLesjv8Sy6j7ipuV4d8lLR2iWQfyeUCCH1Op/HPf+78dEn8odYhNnEn7aRLbw/bi
WX4BQpeAksN8WteVUhg66/Iw9VJzXUNpSNJm+izIrrWd80KW4sLGC5dHNWnItACb
ffnCVFA1oW9z+exT9fHCxkTtDANJklsOKFAxxUk30xeNmRWAAUQQ4G1tzZMmHfWi
ImBxKASD7LCxjHj8Bxe2qflu1l1hqivHvtQbnP46bZcaZiMTXrWz57jVirphjUza
krMF9AEIC4f2TeY+JYFh+Ha964tliMsgvlo=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:47:40 2026 by rpki-client