Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/51e04d2c-0ee3-3a65-871f-0d8bdaf6f06f.roa
File:                     51e04d2c-0ee3-3a65-871f-0d8bdaf6f06f.roa (raw, json)
Hash identifier:          kijjkN7oyfqjk7NdG190+jaFdzsPNhPl4awMHl8HwAY=
Subject key identifier:   1D:1C:8E:B6:A8:12:22:AF:1B:AC:73:59:0D:9A:47:51:44:0B:7C:46
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D8AC53FE5179391A862C90300
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/51e04d2c-0ee3-3a65-871f-0d8bdaf6f06f.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     19905
IP address blocks:        2604:2d81:2c80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:3f:e5:17:93:91:a8:62:c9:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=476a4efe-6b3c-43e5-8c08-dac254527824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:94:c3:9a:8e:c9:97:38:6d:c0:48:21:23:90:
                    21:f0:35:73:7a:17:9c:d5:75:6f:ba:3e:61:b4:d6:
                    fb:ed:18:42:1d:e9:61:80:c8:2f:68:88:7d:26:21:
                    e4:53:d9:1f:b9:25:79:40:98:b2:1b:a2:87:78:a7:
                    38:c8:55:31:d4:65:70:51:a0:6e:83:81:b9:e5:f7:
                    81:7a:a8:d3:68:9c:13:a2:ce:87:87:a1:d4:85:55:
                    24:2a:64:5f:57:9d:bb:4d:b3:e8:94:91:80:c0:89:
                    29:d2:c0:7a:52:b1:49:76:67:13:95:52:8b:48:81:
                    71:1d:65:60:b7:15:ac:59:47:a1:c2:f7:b5:81:81:
                    51:3a:df:17:e9:23:c4:c0:fc:a2:6a:c1:cf:63:05:
                    6a:3b:0d:fa:f1:b5:c6:01:7d:33:61:cd:2b:d6:a2:
                    dd:0b:f8:71:24:58:49:58:a4:31:e1:0c:48:b1:2d:
                    ee:c4:d3:f8:6f:07:57:14:f2:d7:fe:f0:b2:55:ee:
                    49:12:9f:53:e5:1c:e1:cb:58:fa:fa:2a:24:36:4f:
                    e2:18:7c:d8:3f:03:3f:85:5a:cb:6f:e7:81:8e:ff:
                    14:4a:f0:e2:1c:5f:e0:27:ee:85:de:f8:ac:8a:94:
                    d8:44:1e:d0:5b:0f:3b:64:39:0a:2d:4b:85:75:82:
                    67:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1C:8E:B6:A8:12:22:AF:1B:AC:73:59:0D:9A:47:51:44:0B:7C:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/51e04d2c-0ee3-3a65-871f-0d8bdaf6f06f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:2c80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:8c:21:34:9d:53:2b:44:4b:6a:0c:01:ae:4d:e5:c4:0f:61:
         83:02:4b:bc:55:a3:61:55:66:03:34:74:e5:d4:ec:ba:c4:6a:
         12:26:29:5f:f9:3d:3f:1b:c8:cf:d5:6b:ae:67:a5:8f:64:2b:
         3e:e1:7d:f7:ba:78:04:43:e1:2b:84:ad:09:da:b2:81:f2:e6:
         15:2c:59:7f:2c:10:75:24:3e:34:cf:56:d4:10:42:fa:1d:20:
         7c:47:70:ac:71:c8:ba:ae:79:fd:fd:30:dd:e1:7b:89:f1:bd:
         3f:cd:e9:f2:b9:ca:d3:7c:27:8d:3a:0f:75:7a:0a:c3:d9:85:
         7f:10:ce:1a:c4:47:dd:d4:ea:c4:90:a6:c1:b8:4b:9f:99:29:
         3d:73:cc:5a:7c:b5:fb:49:c0:c5:b8:94:f3:eb:26:d2:d5:2e:
         d0:d8:3b:c6:17:90:b9:4f:4c:ec:96:f7:26:f2:9e:da:82:81:
         df:be:74:5c:18:d0:e6:21:9f:4e:6f:63:66:7f:41:d7:ef:8b:
         4f:91:f7:f7:f1:31:98:dc:81:61:07:4d:c3:30:39:a0:e5:c6:
         c5:f1:33:d3:f2:9a:75:46:24:b8:e8:33:7d:e2:3f:53:ec:3a:
         63:1c:cf:b6:2d:f3:f2:4e:5e:8c:8a:a5:fa:3d:2b:5e:30:09:
         3a:c0:16:ef
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2KxT/lF5ORqGLJAwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk
NDc2YTRlZmUtNmIzYy00M2U1LThjMDgtZGFjMjU0NTI3ODI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZTDmo7JlzhtwEghI5Ah8DVzehec1XVvuj5h
tNb77RhCHelhgMgvaIh9JiHkU9kfuSV5QJiyG6KHeKc4yFUx1GVwUaBug4G55feB
eqjTaJwTos6Hh6HUhVUkKmRfV527TbPolJGAwIkp0sB6UrFJdmcTlVKLSIFxHWVg
txWsWUehwve1gYFROt8X6SPEwPyiasHPYwVqOw368bXGAX0zYc0r1qLdC/hxJFhJ
WKQx4QxIsS3uxNP4bwdXFPLX/vCyVe5JEp9T5Rzhy1j6+iokNk/iGHzYPwM/hVrL
b+eBjv8USvDiHF/gJ+6F3visipTYRB7QWw87ZDkKLUuFdYJnIwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB0cjraoEiKvG6xzWQ2aR1FEC3xGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTFlMDRkMmMtMGVlMy0z
YTY1LTg3MWYtMGQ4YmRhZjZmMDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgSyA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF2MITSdUytES2oMAa5N5cQPYYMCS7xVo2FVZgM0dOXU7LrEahIm
KV/5PT8byM/Va65npY9kKz7hffe6eARD4SuErQnasoHy5hUsWX8sEHUkPjTPVtQQ
QvodIHxHcKxxyLquef39MN3he4nxvT/N6fK5ytN8J406D3V6CsPZhX8QzhrER93U
6sSQpsG4S5+ZKT1zzFp8tftJwMW4lPPrJtLVLtDYO8YXkLlPTOyW9ybyntqCgd++
dFwY0OYhn05vY2Z/Qdfvi0+R9/fxMZjcgWEHTcMwOaDlxsXxM9PymnVGJLjoM33i
P1PsOmMcz7Yt8/JOXoyKpfo9K14wCTrAFu8=
-----END CERTIFICATE-----
Generated at Fri May 8 20:27:01 2026 by rpki-client