Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/53c94d5e-285e-369f-bc50-01836280b629.roa
File:                     53c94d5e-285e-369f-bc50-01836280b629.roa (raw, json)
Hash identifier:          f9CvARG22+ar0pgEXp086t15IMwUNVLQUfzxGCl9RUw=
Subject key identifier:   A2:44:56:18:C0:EA:D3:46:6C:F2:A1:14:26:51:89:2E:FB:1B:03:BD
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D8EF5704571E5D5285A71A200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/53c94d5e-285e-369f-bc50-01836280b629.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     30036
IP address blocks:        2604:2d80:300::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:70:45:71:e5:d5:28:5a:71:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=e019c55b-2232-4e1f-b9bc-ac79571f77a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a6:5e:f0:1c:f7:d5:b3:7c:3a:fe:52:d3:a9:
                    31:70:c3:fb:bb:7e:cb:3b:54:45:02:cf:3b:4b:dd:
                    18:da:d6:86:29:ce:2e:58:e5:09:6a:57:47:ea:25:
                    2e:45:38:84:1b:2a:bd:d6:e9:be:63:1c:38:ed:3e:
                    24:37:5e:ef:23:19:65:69:6e:b1:b9:db:b1:8a:ef:
                    8f:40:10:58:ef:a4:4f:d7:9a:22:91:f1:b2:6b:61:
                    7c:46:08:c1:b6:55:5b:b5:f5:86:10:c8:ce:ea:a2:
                    50:ac:ac:59:ab:c5:e6:1d:13:a1:5b:69:b5:6f:83:
                    56:8e:e7:d5:9f:f0:cb:86:ff:d2:d8:29:c6:00:cd:
                    49:08:9f:61:f9:e6:d9:bd:05:6c:cf:69:24:5b:b2:
                    fe:1b:e0:e6:04:04:58:d2:57:5c:87:c5:ef:76:69:
                    24:0a:4b:54:18:f1:d4:41:cd:5c:e0:80:06:81:8c:
                    dd:74:f5:e3:4f:86:dd:60:a6:fa:02:31:07:7d:2c:
                    46:d7:22:c9:e5:c9:65:95:cb:e5:4c:46:33:8f:c9:
                    5f:55:d4:c1:ba:e6:fb:f1:cf:7b:e9:9f:29:aa:7c:
                    84:c4:b9:37:4d:d8:06:a2:59:73:1b:30:a2:67:d7:
                    7c:98:f5:6a:a6:0e:7c:24:f8:70:bb:3e:74:ae:be:
                    95:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:44:56:18:C0:EA:D3:46:6C:F2:A1:14:26:51:89:2E:FB:1B:03:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/53c94d5e-285e-369f-bc50-01836280b629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:300::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:3f:f6:57:c2:9c:3c:b7:52:87:c5:5f:75:8a:fb:20:65:3f:
         b1:32:15:0a:a6:e4:81:39:1a:48:7b:e2:11:ef:6f:7b:ec:95:
         77:31:c4:20:b8:28:95:31:ee:4d:4f:8a:d9:77:cc:e1:b7:9b:
         91:15:7b:ca:4c:3d:73:27:4c:41:ee:ba:9b:6d:19:b9:7c:70:
         b1:e2:18:0a:85:e4:22:15:3b:c0:dc:c8:44:1d:f4:0f:b6:64:
         7d:4c:ed:51:88:2a:06:5c:7e:eb:2b:55:92:b1:b4:81:70:9e:
         da:b8:86:7e:32:b2:d4:88:ad:99:f3:d9:27:2c:ba:7d:62:81:
         92:eb:c6:48:f9:dd:f8:5d:29:34:ff:cf:e8:7b:2e:fb:38:85:
         79:54:a6:fe:34:1c:f7:e7:38:bd:af:a2:52:9c:73:38:f6:b3:
         e7:6f:23:92:aa:0b:41:08:61:81:dc:d4:4c:48:b3:32:1d:d9:
         d9:b2:32:1b:38:a0:11:60:e7:4b:59:4d:3f:82:12:96:66:bc:
         de:56:77:a0:db:fe:e1:71:7f:63:3d:d3:36:53:12:7c:a7:21:
         72:e9:5d:9c:39:00:9a:5d:09:e0:3d:8f:86:90:25:d4:4d:22:
         fb:5a:98:e2:05:51:e5:f0:81:4a:9c:1a:dd:c0:18:10:69:a7:
         ad:e5:5c:45
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2O9XBFceXVKFpxogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
ZTAxOWM1NWItMjIzMi00ZTFmLWI5YmMtYWM3OTU3MWY3N2EyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaZe8Bz31bN8Ov5S06kxcMP7u37LO1RFAs87
S90Y2taGKc4uWOUJaldH6iUuRTiEGyq91um+Yxw47T4kN17vIxllaW6xuduxiu+P
QBBY76RP15oikfGya2F8RgjBtlVbtfWGEMjO6qJQrKxZq8XmHROhW2m1b4NWjufV
n/DLhv/S2CnGAM1JCJ9h+ebZvQVsz2kkW7L+G+DmBARY0ldch8XvdmkkCktUGPHU
Qc1c4IAGgYzddPXjT4bdYKb6AjEHfSxG1yLJ5clllcvlTEYzj8lfVdTBuub78c97
6Z8pqnyExLk3TdgGollzGzCiZ9d8mPVqpg58JPhwuz50rr6VzwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKJEVhjA6tNGbPKhFCZRiS77GwO9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTNjOTRkNWUtMjg1ZS0z
NjlmLWJjNTAtMDE4MzYyODBiNjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgAMA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHA/9lfCnDy3UofFX3WK+yBlP7EyFQqm5IE5Gkh74hHvb3vslXcx
xCC4KJUx7k1Pitl3zOG3m5EVe8pMPXMnTEHuupttGbl8cLHiGAqF5CIVO8DcyEQd
9A+2ZH1M7VGIKgZcfusrVZKxtIFwntq4hn4ystSIrZnz2Scsun1igZLrxkj53fhd
KTT/z+h7Lvs4hXlUpv40HPfnOL2volKcczj2s+dvI5KqC0EIYYHc1ExIszId2dmy
Mhs4oBFg50tZTT+CEpZmvN5Wd6Db/uFxf2M90zZTEnynIXLpXZw5AJpdCeA9j4aQ
JdRNIvtamOIFUeXwgUqcGt3AGBBpp63lXEU=
-----END CERTIFICATE-----
Generated at Fri May 8 18:25:52 2026 by rpki-client