Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9661321-207b-31de-bd8b-c58406bf694f.roa
File:                     f9661321-207b-31de-bd8b-c58406bf694f.roa (raw, json)
Hash identifier:          CXgl4KwYOIQITVJhC8aFzhXCStSfA4UFyJR4IuFJ/bs=
Subject key identifier:   33:C3:82:35:EC:CD:7F:77:69:C1:65:0A:10:4C:2B:09:FE:F0:01:09
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CAA2710F565CB98F7403D0D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9661321-207b-31de-bd8b-c58406bf694f.roa
Signing time:             Tue 27 Jan 2026 14:00:36 +0000
ROA not before:           Tue 27 Jan 2026 14:00:36 +0000
ROA not after:            Mon 27 Apr 2026 13:00:36 +0000
asID:                     30036
IP address blocks:        2604:2d81:2c00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:27:10:f5:65:cb:98:f7:40:3d:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jan 27 14:00:36 2026 GMT
            Not After : Apr 27 13:00:36 2026 GMT
        Subject: CN=89ee29c6-4a45-4392-8216-ebbb236bbf5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:12:76:99:3f:d9:f0:3a:24:f2:d2:ac:d8:75:
                    28:47:35:33:b2:f2:e1:79:69:bc:1e:70:2b:ce:c1:
                    85:13:2b:1f:1d:d4:88:14:00:9e:15:90:db:24:a1:
                    eb:03:e0:48:18:f7:3a:0e:d3:13:ba:90:c9:41:02:
                    f1:7d:e2:e7:51:f7:76:68:54:25:ad:a8:b0:52:d4:
                    5e:4f:f6:a1:56:67:da:e1:7a:a7:2a:f5:cb:47:00:
                    a2:9a:09:ea:b1:9a:d7:19:76:43:95:20:7d:5c:6e:
                    59:ad:c0:51:e6:8a:a7:ef:e3:95:98:ab:d8:58:1d:
                    34:ea:14:47:8b:e1:23:82:b5:5c:11:7b:e4:b3:21:
                    e9:0e:a6:0d:8b:22:f4:9f:51:be:c0:05:7b:ca:87:
                    7f:7c:29:85:32:d9:b3:61:cc:97:4a:52:af:5a:7b:
                    64:e4:d2:70:f9:63:55:4f:70:e9:0a:11:58:8c:fe:
                    df:45:c1:14:59:dd:0f:f5:0e:21:19:c1:5d:22:82:
                    a3:0e:38:d7:92:4a:a2:c6:17:b4:db:67:52:f0:b8:
                    b0:f3:d3:36:8b:ec:7c:f8:d2:73:b2:41:c8:56:94:
                    ef:a5:0d:99:7a:69:9c:f7:63:0f:03:16:9a:b4:cf:
                    4c:9c:50:75:58:50:fe:32:b3:9b:d4:45:72:c4:3e:
                    b8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C3:82:35:EC:CD:7F:77:69:C1:65:0A:10:4C:2B:09:FE:F0:01:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9661321-207b-31de-bd8b-c58406bf694f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:2c00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:96:a2:5d:59:08:75:54:1f:bc:2d:5e:c3:0d:66:4d:b6:21:
         81:b4:66:0f:5e:d9:5b:6b:94:e4:81:a2:d8:18:9a:94:e7:27:
         e4:9b:e2:74:fc:4f:5c:bf:cc:0b:0a:fc:c1:d1:45:72:fb:55:
         d4:01:4d:11:a4:50:94:4b:35:97:e0:2c:99:6e:f1:7f:bd:b4:
         82:83:15:12:f5:15:25:03:2d:0f:36:b6:14:34:22:bd:a3:8c:
         1c:85:b2:1f:7a:f3:fc:85:20:fe:2a:59:f0:bc:32:97:22:73:
         f2:75:c0:41:07:e2:f8:2b:b9:1d:14:c5:53:93:6d:00:75:92:
         a7:96:93:43:4e:0a:05:bc:06:56:cc:02:fb:c5:ca:43:04:c3:
         21:a5:99:90:93:2b:92:81:c1:e1:f1:f5:eb:3e:a1:3f:ee:15:
         6b:43:83:b5:92:14:3d:44:fe:89:ca:74:32:7d:ef:15:7d:8d:
         37:58:1b:f9:9b:b1:0d:39:78:02:53:db:c7:8d:34:49:21:b3:
         9d:dd:0b:1f:f4:0f:5c:d4:b3:77:04:38:87:91:57:03:55:ad:
         e4:5a:08:98:9e:a4:45:0a:23:fd:56:25:b9:52:19:51:1e:22:
         8f:9f:5d:98:28:5f:05:33:ac:94:67:27:9f:6a:cc:12:ed:f5:
         f8:5a:d2:bf
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyqJxD1ZcuY90A9DYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk
ODllZTI5YzYtNGE0NS00MzkyLTgyMTYtZWJiYjIzNmJiZjViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhJ2mT/Z8Dok8tKs2HUoRzUzsvLheWm8HnAr
zsGFEysfHdSIFACeFZDbJKHrA+BIGPc6DtMTupDJQQLxfeLnUfd2aFQlraiwUtRe
T/ahVmfa4XqnKvXLRwCimgnqsZrXGXZDlSB9XG5ZrcBR5oqn7+OVmKvYWB006hRH
i+EjgrVcEXvksyHpDqYNiyL0n1G+wAV7yod/fCmFMtmzYcyXSlKvWntk5NJw+WNV
T3DpChFYjP7fRcEUWd0P9Q4hGcFdIoKjDjjXkkqixhe022dS8Liw89M2i+x8+NJz
skHIVpTvpQ2Zemmc92MPAxaatM9MnFB1WFD+MrOb1EVyxD64PQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDPDgjXszX93acFlChBMKwn+8AEJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjk2NjEzMjEtMjA3Yi0z
MWRlLWJkOGItYzU4NDA2YmY2OTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgSwA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACqWol1ZCHVUH7wtXsMNZk22IYG0Zg9e2VtrlOSBotgYmpTnJ+Sb
4nT8T1y/zAsK/MHRRXL7VdQBTRGkUJRLNZfgLJlu8X+9tIKDFRL1FSUDLQ82thQ0
Ir2jjByFsh968/yFIP4qWfC8Mpcic/J1wEEH4vgruR0UxVOTbQB1kqeWk0NOCgW8
BlbMAvvFykMEwyGlmZCTK5KBweHx9es+oT/uFWtDg7WSFD1E/onKdDJ97xV9jTdY
G/mbsQ05eAJT28eNNEkhs53dCx/0D1zUs3cEOIeRVwNVreRaCJiepEUKI/1WJblS
GVEeIo+fXZgoXwUzrJRnJ59qzBLt9fha0r8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:37:50 2026 by rpki-client