Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/27d60027-02fb-3ec0-b0b7-fd22e2f88207.roa
File:                     27d60027-02fb-3ec0-b0b7-fd22e2f88207.roa (raw, json)
Hash identifier:          JaP1v70rV4obxs1AFX3yirPrzlaP2+xwoVtFt3TPb8E=
Subject key identifier:   60:46:5D:30:3D:05:49:35:E7:1B:AA:E5:84:89:8B:FC:8A:6A:22:F6
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E4559FF94B954C9690DC8D040
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/27d60027-02fb-3ec0-b0b7-fd22e2f88207.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:3180::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:ff:94:b9:54:c9:69:0d:c8:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=eb8d1355-8545-4419-9c56-d03e3acc0ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:07:74:da:65:5e:26:a0:b7:ed:09:b8:f7:f5:
                    8d:04:42:f8:05:98:52:32:a0:00:06:5a:e2:df:0c:
                    fd:b7:d7:04:bc:cd:a0:3a:c2:cb:d4:46:93:17:bb:
                    32:87:ca:e2:90:9d:52:d4:50:37:b3:fa:05:47:e2:
                    fc:16:59:b8:41:f1:97:34:4b:4b:5d:c9:fa:22:eb:
                    e0:2a:2a:ea:1d:90:f1:a1:2b:21:9f:0c:92:c1:07:
                    fd:d6:f4:97:58:9f:07:cb:d6:52:c1:bf:a8:1f:be:
                    af:e3:46:79:21:f3:aa:89:2a:71:10:0a:3e:5e:06:
                    fc:42:67:e8:d7:05:9e:4f:a8:f9:08:da:28:20:3c:
                    d5:61:36:c9:44:35:c9:95:02:d3:93:8c:54:e1:8f:
                    fa:e6:f7:7c:61:8e:7c:40:e0:45:8d:12:31:c8:7d:
                    32:00:99:56:ca:81:86:e7:81:71:04:ec:82:b9:fb:
                    cc:bc:94:6c:74:10:47:de:fc:06:24:cc:b4:ee:66:
                    41:fd:49:a4:98:4c:54:af:ac:45:74:5e:b1:71:c0:
                    13:fe:ca:06:d0:a8:91:20:69:95:22:de:87:0e:85:
                    32:bf:c3:79:6e:4b:2b:9a:a3:53:49:64:18:aa:0e:
                    6a:fc:aa:01:7b:05:89:7a:d7:fd:17:08:d8:e8:b0:
                    02:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:46:5D:30:3D:05:49:35:E7:1B:AA:E5:84:89:8B:FC:8A:6A:22:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/27d60027-02fb-3ec0-b0b7-fd22e2f88207.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:3180::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:67:79:b1:b8:92:2a:d0:b3:42:09:90:ba:d6:16:30:8e:c8:
         3c:d0:79:15:43:4a:fb:3a:48:41:49:96:4d:03:46:68:56:c0:
         d4:36:a9:7c:26:c9:a9:df:4f:77:0d:39:da:66:06:b3:27:93:
         df:6a:01:48:55:10:1d:46:12:5d:76:07:5d:1b:5c:4e:8b:1b:
         47:07:c8:71:db:e8:bb:cd:74:67:7f:5c:36:9a:c9:0a:25:e3:
         44:c3:1a:31:4b:e6:a2:af:fe:fc:32:31:4d:0c:e5:ed:bb:a6:
         84:1f:90:82:00:c6:02:a1:3b:a5:ce:d1:65:52:f8:96:52:be:
         ec:6a:d6:5d:e0:1b:26:cd:27:4f:66:9f:4b:48:56:64:ff:5e:
         e6:aa:31:90:c2:ac:d6:1f:b1:ed:de:46:39:4a:d7:e6:ef:86:
         58:5a:46:23:e7:b2:21:7c:70:57:32:7a:c0:98:ca:68:3b:11:
         ff:8e:43:37:22:c9:50:e5:2f:48:e2:12:86:bd:1a:03:7a:7e:
         08:ae:93:ae:8f:3b:63:78:80:ba:39:7c:06:03:72:e2:ec:52:
         b3:f9:57:cf:13:50:ed:52:46:3b:c7:27:91:b9:ab:b5:44:ad:
         4a:3c:9f:6f:d3:66:21:d8:ec:24:16:be:84:ce:f6:c3:8f:4a:
         a4:b6:a0:f7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5FWf+UuVTJaQ3I0EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk
ZWI4ZDEzNTUtODU0NS00NDE5LTljNTYtZDAzZTNhY2MwZWU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAd02mVeJqC37Qm49/WNBEL4BZhSMqAABlri
3wz9t9cEvM2gOsLL1EaTF7syh8rikJ1S1FA3s/oFR+L8Flm4QfGXNEtLXcn6Iuvg
KirqHZDxoSshnwySwQf91vSXWJ8Hy9ZSwb+oH76v40Z5IfOqiSpxEAo+Xgb8Qmfo
1wWeT6j5CNooIDzVYTbJRDXJlQLTk4xU4Y/65vd8YY58QOBFjRIxyH0yAJlWyoGG
54FxBOyCufvMvJRsdBBH3vwGJMy07mZB/UmkmExUr6xFdF6xccAT/soG0KiRIGmV
It6HDoUyv8N5bksrmqNTSWQYqg5q/KoBewWJetf9FwjY6LACMwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGBGXTA9BUk15xuq5YSJi/yKaiL2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjdkNjAwMjctMDJmYi0z
ZWMwLWIwYjctZmQyMmUyZjg4MjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgDGA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADJnebG4kirQs0IJkLrWFjCOyDzQeRVDSvs6SEFJlk0DRmhWwNQ2
qXwmyanfT3cNOdpmBrMnk99qAUhVEB1GEl12B10bXE6LG0cHyHHb6LvNdGd/XDaa
yQol40TDGjFL5qKv/vwyMU0M5e27poQfkIIAxgKhO6XO0WVS+JZSvuxq1l3gGybN
J09mn0tIVmT/XuaqMZDCrNYfse3eRjlK1+bvhlhaRiPnsiF8cFcyesCYymg7Ef+O
QzciyVDlL0jiEoa9GgN6fgiuk66PO2N4gLo5fAYDcuLsUrP5V88TUO1SRjvHJ5G5
q7VErUo8n2/TZiHY7CQWvoTO9sOPSqS2oPc=
-----END CERTIFICATE-----
Generated at Wed Jun 24 03:16:23 2026 by rpki-client