Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/36fda7e8-300e-3ab5-960c-26c25d0131e3.roa
File:                     36fda7e8-300e-3ab5-960c-26c25d0131e3.roa (raw, json)
Hash identifier:          YrvwLQ2eKwv3zdAkkXtmTZEcNBTlha6OvM3uurkk4kE=
Subject key identifier:   4D:F0:1F:75:66:F8:C5:07:50:86:6D:BA:B2:F2:D1:FE:65:5C:7F:5A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584CBC4C69EAEE91147FFC560840
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/36fda7e8-300e-3ab5-960c-26c25d0131e3.roa
Signing time:             Tue 03 Feb 2026 02:00:31 +0000
ROA not before:           Tue 03 Feb 2026 02:00:31 +0000
ROA not after:            Mon 04 May 2026 01:00:31 +0000
asID:                     23200
IP address blocks:        2603:900c::/31 maxlen: 31
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bc:4c:69:ea:ee:91:14:7f:fc:56:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb  3 02:00:31 2026 GMT
            Not After : May  4 01:00:31 2026 GMT
        Subject: CN=0db153e9-1aaa-4ace-b51e-e125d3f129c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e9:3c:d4:35:32:0b:5b:e5:85:cc:cc:00:4a:
                    8f:11:3e:2f:1e:bd:0b:64:28:13:1b:85:0f:5b:ff:
                    68:00:a7:ab:a9:8f:ed:7b:ac:51:26:ba:54:6c:81:
                    38:b6:d4:03:e5:47:fe:19:5a:b0:70:89:dc:c0:42:
                    01:e1:80:7b:c4:7b:f6:7b:e3:b9:c1:cb:02:9a:c0:
                    16:b9:7e:c9:12:ea:a3:1a:8d:18:c9:9d:61:5b:c6:
                    2a:2b:8e:ca:e5:95:de:65:81:1c:56:e6:aa:4c:30:
                    cf:30:74:48:5a:3f:5f:fb:55:aa:47:06:69:12:56:
                    d5:ee:55:94:0e:e2:8c:9b:5e:64:11:cf:64:5c:26:
                    b7:74:fd:af:5e:86:a5:51:b5:e6:c1:fe:4c:e5:70:
                    40:15:56:36:4e:2a:61:33:be:a1:01:64:6a:97:85:
                    e0:d6:62:a1:29:af:2c:b5:32:fb:bd:90:55:ea:0f:
                    89:5d:87:a6:2d:84:fc:27:b3:bc:5e:8a:bf:96:93:
                    8a:07:a7:29:fe:d3:74:f0:b0:69:7c:8b:ff:d2:c3:
                    d4:d0:32:4d:70:ec:aa:41:a3:bb:8f:5b:e9:b1:68:
                    f2:a0:55:06:65:4c:b2:a4:a5:cc:94:2c:75:45:b0:
                    9d:3b:aa:a6:d3:10:86:79:2d:39:e8:f4:29:c8:4b:
                    84:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F0:1F:75:66:F8:C5:07:50:86:6D:BA:B2:F2:D1:FE:65:5C:7F:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/36fda7e8-300e-3ab5-960c-26c25d0131e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:900c::/31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:9c:ef:4f:34:f7:4b:3e:a1:d1:21:1d:00:f3:65:2e:90:aa:
         48:ea:4c:0a:bf:ab:2b:6a:ac:60:f4:dc:56:ed:23:30:08:f7:
         05:87:a9:3b:93:2b:cc:73:40:db:d9:90:81:5c:9d:83:80:79:
         1b:42:44:7f:82:e6:7d:cf:cb:72:5c:63:f8:23:e6:38:ce:ec:
         b5:e2:2f:48:53:2d:db:c5:62:64:d9:38:6f:37:84:09:5a:19:
         65:ca:e8:98:24:1e:a7:b8:63:33:c5:9a:3b:4b:ce:09:93:a1:
         fa:60:13:8c:d5:10:d4:50:e7:63:2d:78:64:f6:f3:8a:4a:4c:
         7b:99:df:0f:ec:ec:78:84:21:e2:98:a8:13:a8:38:39:dd:3f:
         d5:32:74:de:59:80:c9:47:3a:46:ca:d2:62:0b:6d:ab:31:44:
         c7:83:9a:a7:6e:cf:af:c0:16:f5:f0:4c:3c:8a:6b:80:c6:bf:
         59:5d:73:61:2d:15:d4:1d:1b:59:11:7e:f7:99:f0:66:15:43:
         08:1d:76:11:7a:01:c3:57:10:c9:90:c5:e1:92:a4:9a:93:61:
         1d:77:41:ef:3b:fa:b1:a8:d2:88:b0:ce:73:98:31:4e:18:6c:
         a9:64:dc:2c:fa:09:a7:93:ed:04:53:68:3a:ab:3d:0c:09:17:
         68:69:13:68
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEy8TGnq7pEUf/xWCEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDIwMzAyMDAzMVoXDTI2MDUwNDAxMDAzMVowLzEtMCsGA1UEAxMk
MGRiMTUzZTktMWFhYS00YWNlLWI1MWUtZTEyNWQzZjEyOWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyek81DUyC1vlhczMAEqPET4vHr0LZCgTG4UP
W/9oAKerqY/te6xRJrpUbIE4ttQD5Uf+GVqwcIncwEIB4YB7xHv2e+O5wcsCmsAW
uX7JEuqjGo0YyZ1hW8YqK47K5ZXeZYEcVuaqTDDPMHRIWj9f+1WqRwZpElbV7lWU
DuKMm15kEc9kXCa3dP2vXoalUbXmwf5M5XBAFVY2TiphM76hAWRql4Xg1mKhKa8s
tTL7vZBV6g+JXYemLYT8J7O8Xoq/lpOKB6cp/tN08LBpfIv/0sPU0DJNcOyqQaO7
j1vpsWjyoFUGZUyypKXMlCx1RbCdO6qm0xCGeS056PQpyEuEuQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFE3wH3Vm+MUHUIZturLy0f5lXH9aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMzZmZGE3ZTgtMzAwZS0z
YWI1LTk2MGMtMjZjMjVkMDEzMWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBJgOQDDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBunO9PNPdLPqHRIR0A82UukKpI6kwKv6sraqxg9NxW7SMwCPcFh6k7
kyvMc0Db2ZCBXJ2DgHkbQkR/guZ9z8tyXGP4I+Y4zuy14i9IUy3bxWJk2ThvN4QJ
WhllyuiYJB6nuGMzxZo7S84Jk6H6YBOM1RDUUOdjLXhk9vOKSkx7md8P7Ox4hCHi
mKgTqDg53T/VMnTeWYDJRzpGytJiC22rMUTHg5qnbs+vwBb18Ew8imuAxr9ZXXNh
LRXUHRtZEX73mfBmFUMIHXYRegHDVxDJkMXhkqSak2Edd0HvO/qxqNKIsM5zmDFO
GGypZNws+gmnk+0EU2g6qz0MCRdoaRNo
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:00:46 2026 by rpki-client