Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d468583f-c266-3dc4-be2b-e3f6808d97b1.roa
File:                     d468583f-c266-3dc4-be2b-e3f6808d97b1.roa (raw, json)
Hash identifier:          ru0Xgc/WKYjddfbZFVs+5i0kss3YsA8GRxcAeBxG8Lg=
Subject key identifier:   01:6C:52:E5:CA:53:BE:66:6C:DA:6A:3F:35:13:46:C9:3C:4A:14:E2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E043624CDA2AFC50945736B38
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d468583f-c266-3dc4-be2b-e3f6808d97b1.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     30036
IP address blocks:        2604:2d80:4800::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:24:cd:a2:af:c5:09:45:73:6b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=71873d6b-7d22-4634-9c17-2e64171b8c8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:44:ca:d2:af:57:ed:c8:1c:27:cd:c3:70:06:
                    89:9b:35:18:b6:06:d1:cb:a5:a3:6a:c9:fe:90:4e:
                    70:d6:84:7d:33:90:df:41:4d:61:26:31:8e:0e:69:
                    c2:9c:d2:15:22:29:e8:71:d6:98:13:b9:15:ee:d1:
                    3d:bb:32:f3:52:78:c2:d9:50:cd:fb:74:77:e9:c4:
                    97:dd:90:48:0d:e4:67:f9:ba:ae:81:87:10:53:76:
                    17:89:42:29:62:f7:67:a3:f5:57:6f:e0:a0:01:4b:
                    64:46:a0:d5:4a:7a:6d:bc:72:1c:73:01:5c:62:95:
                    ea:80:d8:8e:05:2d:6a:ff:e8:ac:e1:1e:ca:88:16:
                    cf:81:c5:93:da:09:86:f9:f6:c1:f1:59:a9:50:0b:
                    98:d6:8b:95:4c:cb:43:70:44:82:b0:87:1c:9b:b0:
                    fb:53:ec:93:69:bf:9f:9f:1f:6d:7b:7c:25:21:8c:
                    79:95:52:42:02:47:a8:b1:36:7d:5e:87:b3:84:ba:
                    15:82:e3:4d:bc:a2:a2:f5:85:26:0a:9e:1f:fb:5b:
                    aa:ed:58:cd:4c:50:62:11:27:f2:17:7b:da:eb:b0:
                    74:a6:ce:5d:7c:ea:a7:0b:14:c0:19:d0:f6:ee:d7:
                    ad:97:67:fc:29:e6:76:a7:1f:ca:34:e3:e6:5f:cf:
                    f2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6C:52:E5:CA:53:BE:66:6C:DA:6A:3F:35:13:46:C9:3C:4A:14:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d468583f-c266-3dc4-be2b-e3f6808d97b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:4800::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:af:f8:5a:2f:f8:c5:0e:f4:3c:ff:75:ed:be:01:1b:91:19:
         0e:4c:d8:a1:6c:4b:25:30:71:b0:a0:05:cb:b5:5a:2b:16:58:
         78:d8:3b:3e:6c:13:6f:1e:9f:97:b5:15:7f:1a:55:0d:aa:f4:
         be:bb:11:21:b3:7a:e0:e6:cc:cd:f3:b5:92:8a:b4:62:7a:82:
         4e:f3:d9:7a:b2:30:1d:9f:e2:53:61:de:cc:15:5b:53:d4:1b:
         e8:a7:d6:c2:7e:1a:8b:c4:38:21:38:40:85:eb:59:6a:72:fb:
         4f:e1:cb:24:8d:38:e2:21:81:8e:cd:35:7c:6c:6f:ef:77:8e:
         2e:8c:d5:4a:b2:bc:c6:07:ea:69:2f:8b:23:36:6a:0c:31:9c:
         ce:3b:97:dc:6b:6a:36:c9:e7:4e:c7:43:fc:92:b5:9a:6e:d8:
         33:ac:fc:67:58:71:1c:b8:f5:15:d4:9a:9a:41:6b:4f:52:ad:
         5e:f9:10:b5:92:46:f8:c2:a6:e7:42:36:73:57:ac:eb:8e:c9:
         a2:ff:ab:5c:dc:1f:36:64:2a:f2:0f:64:08:6a:46:5e:10:95:
         ca:f7:b2:8e:b0:b1:f8:a8:ae:bc:24:38:72:00:f3:9c:6a:f7:
         dc:96:ef:f2:66:1b:5a:2a:bc:7c:ff:21:f5:be:46:d5:ca:1f:
         27:9f:9d:f6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4ENiTNoq/FCUVzazgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk
NzE4NzNkNmItN2QyMi00NjM0LTljMTctMmU2NDE3MWI4YzhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UTK0q9X7cgcJ83DcAaJmzUYtgbRy6Wjasn+
kE5w1oR9M5DfQU1hJjGODmnCnNIVIinocdaYE7kV7tE9uzLzUnjC2VDN+3R36cSX
3ZBIDeRn+bqugYcQU3YXiUIpYvdno/VXb+CgAUtkRqDVSnptvHIccwFcYpXqgNiO
BS1q/+is4R7KiBbPgcWT2gmG+fbB8VmpUAuY1ouVTMtDcESCsIccm7D7U+yTab+f
nx9te3wlIYx5lVJCAkeosTZ9XoezhLoVguNNvKKi9YUmCp4f+1uq7VjNTFBiESfy
F3va67B0ps5dfOqnCxTAGdD27tetl2f8KeZ2px/KNOPmX8/yCQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAFsUuXKU75mbNpqPzUTRsk8ShTiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDQ2ODU4M2YtYzI2Ni0z
ZGM0LWJlMmItZTNmNjgwOGQ5N2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgEgA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADuv+Fov+MUO9Dz/de2+ARuRGQ5M2KFsSyUwcbCgBcu1WisWWHjY
Oz5sE28en5e1FX8aVQ2q9L67ESGzeuDmzM3ztZKKtGJ6gk7z2XqyMB2f4lNh3swV
W1PUG+in1sJ+GovEOCE4QIXrWWpy+0/hyySNOOIhgY7NNXxsb+93ji6M1UqyvMYH
6mkviyM2agwxnM47l9xrajbJ507HQ/yStZpu2DOs/GdYcRy49RXUmppBa09SrV75
ELWSRvjCpudCNnNXrOuOyaL/q1zcHzZkKvIPZAhqRl4Qlcr3so6wsfiorrwkOHIA
85xq99yW7/JmG1oqvHz/IfW+RtXKHyefnfY=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:00:21 2026 by rpki-client