Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f724e8f2-6b61-3cff-b57c-0cd740b31570.roa
File:                     f724e8f2-6b61-3cff-b57c-0cd740b31570.roa (raw, json)
Hash identifier:          XW3EtVE/NK2orbDIcz8AvsC5wIEx9S4dfGJCCAviJ7s=
Subject key identifier:   CE:02:03:BE:0F:BB:47:9D:F0:A9:AE:BC:C6:AC:B3:8C:63:E1:1C:DC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA788A2E4A16EDE4F0106D440
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f724e8f2-6b61-3cff-b57c-0cd740b31570.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d81:8000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:a2:e4:a1:6e:de:4f:01:06:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=600a68cb-e88b-4c25-bf29-678f55fc2cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:16:dd:b8:73:71:ec:b1:b1:23:c4:d6:21:18:
                    ec:13:51:bc:81:08:1d:40:68:6e:4c:f5:ba:3c:46:
                    96:66:ff:d4:51:26:20:3d:06:a3:f7:f1:4f:b0:72:
                    e7:91:8c:0b:62:e8:7b:e5:e4:36:df:9d:a4:68:cd:
                    b6:47:04:ec:88:57:51:92:37:58:ce:58:5e:ed:0b:
                    d1:ba:c6:c3:a4:1e:a5:ca:b7:f8:b5:35:b3:3c:98:
                    6d:c5:76:b6:d3:d9:f6:ae:59:42:82:e5:44:97:37:
                    c9:46:7e:fc:47:1b:39:02:9f:e5:4b:e8:5e:73:df:
                    15:3f:bd:ff:67:80:55:1f:86:6c:d2:fb:a8:d8:f9:
                    e3:c3:da:76:7b:00:d3:c3:38:8b:97:6a:69:c1:32:
                    aa:5a:c9:3b:48:d9:68:25:12:60:77:ef:74:d9:99:
                    a6:26:5b:cf:10:f1:49:98:aa:d2:4c:b1:3b:c1:c5:
                    56:ca:aa:eb:d5:c9:24:9d:59:53:29:d1:2c:c2:5f:
                    ee:d2:b6:31:f4:5b:6b:c5:7e:1a:07:ef:fc:26:eb:
                    94:1a:fa:2b:d9:ef:9b:ce:84:3f:f1:75:55:f0:27:
                    a9:3c:f0:12:e4:75:b3:eb:d3:02:5c:7a:58:ce:29:
                    50:d2:79:6d:7f:dc:d4:1f:83:e4:fd:ee:e6:07:c9:
                    e4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:02:03:BE:0F:BB:47:9D:F0:A9:AE:BC:C6:AC:B3:8C:63:E1:1C:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f724e8f2-6b61-3cff-b57c-0cd740b31570.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:8000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:5d:6b:8f:0f:42:62:e1:76:dd:b2:72:df:34:d2:56:02:21:
         ee:b1:75:bb:90:76:39:c1:cf:e5:d7:d4:1a:e4:47:b4:76:42:
         53:c1:5f:25:97:49:4c:20:d9:88:d9:d6:c5:74:ba:21:d8:99:
         5d:cf:d0:c9:4a:2a:21:32:c4:fc:dc:85:a1:ac:34:c3:6d:9b:
         83:4a:87:13:b1:f7:af:d7:97:e3:c7:da:ac:16:78:8b:be:67:
         3f:66:b7:ae:62:02:95:5e:b5:6a:24:6f:d9:4e:49:9d:06:39:
         f2:c0:df:9a:2b:98:89:3d:ad:df:97:36:4d:7b:22:29:9c:83:
         f4:44:06:49:f7:28:61:9e:00:b8:72:28:a2:5d:9b:bf:ee:b5:
         6b:8f:b3:48:1c:c2:1f:2b:ca:6b:98:87:d7:0a:4e:2b:39:3c:
         ff:08:84:c0:3c:72:7a:25:31:0e:5b:a4:a5:1a:b8:2f:9a:11:
         dc:12:05:52:1e:9c:6a:b5:74:1e:0e:10:7d:a7:49:5e:e6:00:
         32:d3:e6:c7:e6:74:f1:00:93:fb:e5:15:33:73:59:ab:39:61:
         17:07:34:e3:bf:b9:9d:47:70:bb:43:56:4b:52:98:80:5c:55:
         99:ae:a8:7f:3b:8c:ee:82:64:eb:f9:e8:2e:ab:d6:1d:3f:e8:
         a2:d9:e5:ff
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6niKLkoW7eTwEG1EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NjAwYTY4Y2ItZTg4Yi00YzI1LWJmMjktNjc4ZjU1ZmMyY2IxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihbduHNx7LGxI8TWIRjsE1G8gQgdQGhuTPW6
PEaWZv/UUSYgPQaj9/FPsHLnkYwLYuh75eQ2352kaM22RwTsiFdRkjdYzlhe7QvR
usbDpB6lyrf4tTWzPJhtxXa209n2rllCguVElzfJRn78Rxs5Ap/lS+hec98VP73/
Z4BVH4Zs0vuo2Pnjw9p2ewDTwziLl2ppwTKqWsk7SNloJRJgd+902ZmmJlvPEPFJ
mKrSTLE7wcVWyqrr1ckknVlTKdEswl/u0rYx9FtrxX4aB+/8JuuUGvor2e+bzoQ/
8XVV8CepPPAS5HWz69MCXHpYzilQ0nltf9zUH4Pk/e7mB8nk6wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFM4CA74Pu0ed8KmuvMass4xj4RzcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjcyNGU4ZjItNmI2MS0z
Y2ZmLWI1N2MtMGNkNzQwYjMxNTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgYAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAdV1rjw9CYuF23bJy3zTSVgIh7rF1u5B2OcHP5dfUGuRHtHZCU8Ff
JZdJTCDZiNnWxXS6IdiZXc/QyUoqITLE/NyFoaw0w22bg0qHE7H3r9eX48farBZ4
i75nP2a3rmIClV61aiRv2U5JnQY58sDfmiuYiT2t35c2TXsiKZyD9EQGSfcoYZ4A
uHIool2bv+61a4+zSBzCHyvKa5iH1wpOKzk8/wiEwDxyeiUxDlukpRq4L5oR3BIF
Uh6carV0Hg4QfadJXuYAMtPmx+Z08QCT++UVM3NZqzlhFwc047+5nUdwu0NWS1KY
gFxVma6ofzuM7oJk6/noLqvWHT/ootnl/w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:04:31 2026 by rpki-client