Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9389c1a6-2395-3706-ac94-a5e5406a6081.roa
File:                     9389c1a6-2395-3706-ac94-a5e5406a6081.roa (raw, json)
Hash identifier:          9Os9CQe7zH6EFLXWJG3geoHXJxa/vbnEu3Wa8huiqwo=
Subject key identifier:   5A:E7:3D:5B:34:9D:3E:C8:6D:07:76:B7:57:E2:20:2B:73:08:BD:A9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E5E154867EAD861848FFA1780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9389c1a6-2395-3706-ac94-a5e5406a6081.roa
Signing time:             Thu 02 Jul 2026 17:37:23 +0000
ROA not before:           Thu 02 Jul 2026 17:37:23 +0000
ROA not after:            Wed 30 Sep 2026 17:37:23 +0000
asID:                     19905
IP address blocks:        2604:2d81:9800::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:15:48:67:ea:d8:61:84:8f:fa:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  2 17:37:23 2026 GMT
            Not After : Sep 30 17:37:23 2026 GMT
        Subject: CN=36fb2e9a-63a8-4d50-a787-bf6800545570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c4:17:9a:56:e0:ad:03:0f:91:3b:c1:ca:99:
                    60:02:22:18:40:0d:4f:bd:74:5f:a5:27:f8:07:46:
                    54:f6:cb:8a:45:84:ef:1f:57:e4:c6:26:91:8f:e5:
                    b1:b0:16:f9:75:60:c5:66:f0:8b:56:94:61:79:6b:
                    71:ce:51:ab:26:9e:02:2b:f0:92:81:b0:69:8a:fa:
                    95:2d:d4:c3:df:25:67:30:ba:78:86:19:b0:14:9d:
                    84:f4:b0:e6:82:08:e0:10:de:4b:4f:44:9e:b9:0c:
                    81:7f:5b:29:e9:0a:dc:b7:c7:36:a8:ac:58:9c:53:
                    68:76:05:4c:7c:b5:a8:5e:4d:4a:32:dc:8e:68:13:
                    8b:e0:19:da:9c:c7:4d:4a:13:4d:8f:4a:36:23:14:
                    6c:71:c6:26:d8:f5:45:82:e9:c7:f6:b4:5e:db:8a:
                    26:01:94:da:47:ca:b3:8d:da:fe:ab:92:ba:f7:6d:
                    20:1f:e7:16:8f:87:52:e0:38:1f:c4:31:db:90:c8:
                    1d:c4:9c:54:63:d9:e8:cb:b9:c7:ed:21:04:03:41:
                    83:a4:bb:93:4c:5a:ed:5d:0d:25:07:42:34:fc:32:
                    71:96:02:ae:f1:80:ec:de:9c:36:30:b2:44:aa:0f:
                    7c:5b:7e:77:6e:3a:16:eb:1d:dd:66:99:f8:12:5b:
                    8b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E7:3D:5B:34:9D:3E:C8:6D:07:76:B7:57:E2:20:2B:73:08:BD:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9389c1a6-2395-3706-ac94-a5e5406a6081.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:9800::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:af:f5:8c:04:bd:75:c3:2f:48:cd:43:ca:ce:11:da:8b:29:
         ac:67:81:9d:49:43:cb:b6:38:f2:77:74:0a:be:fb:9c:60:d1:
         da:82:19:7f:01:71:86:07:6a:46:e2:07:14:73:78:aa:8c:93:
         15:01:53:cd:f4:bb:1d:b1:3e:f1:e2:95:5b:f2:77:72:6c:b3:
         08:08:11:03:c0:87:95:e3:ac:99:14:58:15:7e:78:f2:80:ba:
         22:51:1e:8a:b2:4c:3b:4c:ec:a7:09:ba:73:84:74:3e:81:82:
         fb:18:5a:1e:13:4f:d7:55:c7:b1:da:2b:1f:ef:ad:bc:e1:63:
         c3:7b:23:4d:ec:a3:35:70:52:93:a6:2f:4d:e6:c9:cd:47:47:
         22:e3:28:78:fc:ea:74:a4:e2:66:c4:a6:2b:5a:53:ca:50:d9:
         42:2f:25:c7:d2:85:ca:0d:dd:30:a5:58:a2:7a:59:03:df:8d:
         b8:81:9b:30:1a:da:bb:48:58:d1:e1:0c:33:8a:c5:be:15:f7:
         56:96:d6:5d:b8:c5:3b:d7:10:21:00:ab:97:eb:b6:c3:d5:2a:
         d1:eb:08:0c:0e:ba:6d:c4:39:30:87:3b:a9:a1:07:63:2d:0e:
         9d:0b:e2:74:69:61:8a:51:a5:f5:5d:49:20:c4:54:8a:7f:1a:
         31:b5:de:cd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5eFUhn6thhhI/6F4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcwMjE3MzcyM1oXDTI2MDkzMDE3MzcyM1owLzEtMCsGA1UEAxMk
MzZmYjJlOWEtNjNhOC00ZDUwLWE3ODctYmY2ODAwNTQ1NTcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsQXmlbgrQMPkTvByplgAiIYQA1PvXRfpSf4
B0ZU9suKRYTvH1fkxiaRj+WxsBb5dWDFZvCLVpRheWtxzlGrJp4CK/CSgbBpivqV
LdTD3yVnMLp4hhmwFJ2E9LDmggjgEN5LT0SeuQyBf1sp6Qrct8c2qKxYnFNodgVM
fLWoXk1KMtyOaBOL4BnanMdNShNNj0o2IxRsccYm2PVFgunH9rRe24omAZTaR8qz
jdr+q5K6920gH+cWj4dS4DgfxDHbkMgdxJxUY9noy7nH7SEEA0GDpLuTTFrtXQ0l
B0I0/DJxlgKu8YDs3pw2MLJEqg98W353bjoW6x3dZpn4EluLVQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFrnPVs0nT7IbQd2t1fiICtzCL2pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTM4OWMxYTYtMjM5NS0z
NzA2LWFjOTQtYTVlNTQwNmE2MDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgZgA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC6v9YwEvXXDL0jNQ8rOEdqLKaxngZ1JQ8u2OPJ3dAq++5xg0dqC
GX8BcYYHakbiBxRzeKqMkxUBU830ux2xPvHilVvyd3JsswgIEQPAh5XjrJkUWBV+
ePKAuiJRHoqyTDtM7KcJunOEdD6BgvsYWh4TT9dVx7HaKx/vrbzhY8N7I03sozVw
UpOmL03myc1HRyLjKHj86nSk4mbEpitaU8pQ2UIvJcfShcoN3TClWKJ6WQPfjbiB
mzAa2rtIWNHhDDOKxb4V91aW1l24xTvXECEAq5frtsPVKtHrCAwOum3EOTCHO6mh
B2MtDp0L4nRpYYpRpfVdSSDEVIp/GjG13s0=
-----END CERTIFICATE-----
Generated at Mon Jul 20 19:31:41 2026 by rpki-client