Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ff8403a7-c00a-3e67-87b2-b98abd044e1f.roa
File:                     ff8403a7-c00a-3e67-87b2-b98abd044e1f.roa (raw, json)
Hash identifier:          loWMpjyQuG2A7wCNy/CB/UIthFqA/2SDmvbHOeTvQko=
Subject key identifier:   F6:CA:F3:54:40:59:77:0C:50:14:97:F5:70:D9:7F:D0:EA:D5:2A:6E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CEE8CDCF8BD0E294FE14F0780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ff8403a7-c00a-3e67-87b2-b98abd044e1f.roa
Signing time:             Sat 21 Feb 2026 02:00:32 +0000
ROA not before:           Sat 21 Feb 2026 02:00:32 +0000
ROA not after:            Fri 22 May 2026 01:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d81:1400::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ee:8c:dc:f8:bd:0e:29:4f:e1:4f:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 21 02:00:32 2026 GMT
            Not After : May 22 01:00:32 2026 GMT
        Subject: CN=e68aa0a7-39d6-409a-9920-0d35f34e85af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fc:f2:12:41:96:93:33:82:c4:0a:7d:00:d1:
                    37:11:0f:aa:b0:61:4f:81:68:43:3b:75:2e:37:59:
                    00:b5:15:bf:49:e5:6f:63:f9:e6:bc:36:70:2f:d3:
                    f0:7c:86:8b:ad:24:d8:bb:2c:02:db:ba:77:74:eb:
                    e5:d7:f0:fd:ac:39:f3:d9:53:1e:83:26:06:61:05:
                    4d:dc:28:a9:3d:7d:f0:6f:89:a3:b3:69:45:90:2d:
                    00:c8:5b:05:24:57:40:ed:76:f5:de:bd:d7:83:57:
                    0f:33:c3:c4:77:ab:9c:c8:26:62:aa:1c:0c:4e:a1:
                    b7:f0:bb:40:e5:ca:fe:ea:f3:03:2d:64:71:26:bc:
                    f6:53:67:74:86:a4:9d:66:27:99:ee:e7:7e:3f:a2:
                    b2:3e:9d:16:87:45:98:c4:c1:98:f1:2d:a7:33:72:
                    7d:5c:7f:4a:a1:94:be:d2:49:95:94:b8:f3:eb:d2:
                    33:48:be:53:85:ba:98:97:eb:ce:80:9b:f3:9d:b4:
                    e2:d9:81:1c:67:52:80:cb:22:5a:ab:94:ce:02:63:
                    b7:16:0c:3d:3c:84:c6:32:cf:83:bf:ae:78:7a:b4:
                    1b:6b:19:12:1e:8e:d9:46:4b:8f:08:68:52:97:45:
                    fd:84:09:28:4a:0b:26:26:38:02:a5:b8:97:f6:8d:
                    50:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CA:F3:54:40:59:77:0C:50:14:97:F5:70:D9:7F:D0:EA:D5:2A:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ff8403a7-c00a-3e67-87b2-b98abd044e1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1400::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:69:81:e1:28:9e:ff:c9:e4:bd:b9:e6:c2:f1:c2:7e:e3:f9:
         15:a0:39:13:7c:bc:da:bb:58:6b:c2:ce:8f:c1:44:3e:0c:89:
         7a:bb:d7:f7:fe:8c:d0:4e:29:18:e9:ab:1c:1d:8e:7f:06:d5:
         f2:9b:3e:a8:f3:05:ca:0f:9a:ba:3a:f8:30:31:66:b7:c2:98:
         bd:5b:ce:41:32:04:3f:79:ee:60:9b:d0:7c:bc:66:76:fa:6d:
         39:01:2a:7a:51:87:e0:40:bd:ee:fc:75:0f:e5:34:36:05:06:
         63:87:ad:a4:b2:8c:f5:d5:85:c0:af:d8:43:81:99:a8:76:77:
         51:fc:c3:c2:a3:18:14:ad:5f:eb:ae:d0:74:4c:fc:e8:2b:df:
         e5:21:24:a8:94:ec:2f:c7:f3:27:c8:46:76:c3:ad:84:56:30:
         81:f1:34:f7:a2:9a:3d:78:91:05:6b:e4:ee:a4:bf:25:a0:7f:
         da:e5:b7:7f:f6:6d:07:aa:55:28:66:1c:77:db:71:d0:a1:3d:
         07:26:1c:b8:70:d7:ea:8e:53:1e:6c:f1:90:a6:1d:db:83:ff:
         43:83:4f:87:80:7b:26:dd:7a:6d:a7:ce:fb:68:23:15:07:0d:
         f7:3f:fd:35:63:ad:71:70:d4:ab:ff:f3:87:54:35:8d:d5:53:
         f6:ab:d7:dc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzujNz4vQ4pT+FPB4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDIyMTAyMDAzMloXDTI2MDUyMjAxMDAzMlowLzEtMCsGA1UEAxMk
ZTY4YWEwYTctMzlkNi00MDlhLTk5MjAtMGQzNWYzNGU4NWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvzyEkGWkzOCxAp9ANE3EQ+qsGFPgWhDO3Uu
N1kAtRW/SeVvY/nmvDZwL9PwfIaLrSTYuywC27p3dOvl1/D9rDnz2VMegyYGYQVN
3CipPX3wb4mjs2lFkC0AyFsFJFdA7Xb13r3Xg1cPM8PEd6ucyCZiqhwMTqG38LtA
5cr+6vMDLWRxJrz2U2d0hqSdZieZ7ud+P6KyPp0Wh0WYxMGY8S2nM3J9XH9KoZS+
0kmVlLjz69IzSL5ThbqYl+vOgJvznbTi2YEcZ1KAyyJaq5TOAmO3Fgw9PITGMs+D
v654erQbaxkSHo7ZRkuPCGhSl0X9hAkoSgsmJjgCpbiX9o1QewIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPbK81RAWXcMUBSX9XDZf9Dq1SpuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmY4NDAzYTctYzAwYS0z
ZTY3LTg3YjItYjk4YWJkMDQ0ZTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgRQA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAENpgeEonv/J5L255sLxwn7j+RWgORN8vNq7WGvCzo/BRD4MiXq7
1/f+jNBOKRjpqxwdjn8G1fKbPqjzBcoPmro6+DAxZrfCmL1bzkEyBD957mCb0Hy8
Znb6bTkBKnpRh+BAve78dQ/lNDYFBmOHraSyjPXVhcCv2EOBmah2d1H8w8KjGBSt
X+uu0HRM/Ogr3+UhJKiU7C/H8yfIRnbDrYRWMIHxNPeimj14kQVr5O6kvyWgf9rl
t3/2bQeqVShmHHfbcdChPQcmHLhw1+qOUx5s8ZCmHduD/0ODT4eAeybdem2nzvto
IxUHDfc//TVjrXFw1Kv/84dUNY3VU/ar19w=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:11:51 2026 by rpki-client