Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6024c732-2ab3-3d99-957a-e2e9756627b6.roa
File:                     6024c732-2ab3-3d99-957a-e2e9756627b6.roa (raw, json)
Hash identifier:          z5ZrkyxeGr/N/ViPH6enC6a/s/07K0TL8H2l1j3Ls64=
Subject key identifier:   98:F4:52:C0:24:22:7A:E6:66:47:8B:2B:F4:10:42:EA:66:7A:61:AB
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F7FD655307EB3472DB0ED4880
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6024c732-2ab3-3d99-957a-e2e9756627b6.roa
Signing time:             Wed 14 Oct 2026 12:34:58 +0000
ROA not before:           Wed 14 Oct 2026 12:34:58 +0000
ROA not after:            Tue 12 Jan 2027 13:34:58 +0000
asID:                     19905
IP address blocks:        2604:2d80:f480::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:d6:55:30:7e:b3:47:2d:b0:ed:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 14 12:34:58 2026 GMT
            Not After : Jan 12 13:34:58 2027 GMT
        Subject: CN=25824f73-962d-42b4-9ecb-cafe5999df1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:92:8a:d5:9e:e5:a3:ed:82:2c:9c:79:bd:2e:
                    63:f5:0c:02:dc:d4:80:18:b3:34:19:57:f5:f7:77:
                    29:4e:38:bb:db:2d:34:44:72:0b:84:2d:c0:54:3e:
                    c0:97:76:34:bf:85:32:ca:7e:fb:57:b4:c6:61:85:
                    c6:47:b3:12:42:3d:e9:cb:89:84:66:79:34:f4:09:
                    ee:d7:68:a7:09:21:73:2e:ad:da:ff:46:3f:55:b1:
                    3a:58:61:0a:78:66:45:25:68:d6:b2:8f:5e:17:23:
                    f1:91:34:65:cb:95:66:47:ad:d0:9d:6e:c2:df:99:
                    18:49:15:66:02:2f:fe:eb:e8:6e:c8:e4:16:2f:b2:
                    80:fd:e3:bc:35:5f:81:da:15:b2:90:52:e7:c0:b9:
                    55:1a:0a:2f:ce:de:2a:40:f1:b5:98:01:de:32:d3:
                    83:64:b3:1f:51:15:bc:c4:1a:fc:e5:d1:12:e1:c8:
                    c1:f7:e3:a4:b1:72:6c:73:39:c6:78:1e:39:71:8f:
                    f1:4e:aa:bb:11:e4:ab:e7:50:4e:52:38:0d:0d:0e:
                    f8:0d:ec:8c:08:9f:86:17:aa:78:48:e5:eb:83:b9:
                    03:11:1c:85:26:04:95:65:8e:80:6e:8f:a3:f8:80:
                    21:81:11:d2:5d:30:4d:bf:65:2a:75:2e:a9:53:80:
                    be:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F4:52:C0:24:22:7A:E6:66:47:8B:2B:F4:10:42:EA:66:7A:61:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6024c732-2ab3-3d99-957a-e2e9756627b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:f480::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:e8:11:42:b7:48:b1:76:ff:d5:83:ad:0e:59:89:25:dc:68:
         3f:38:41:f3:e5:49:0a:1a:0b:9b:25:52:5e:da:34:bc:2a:e1:
         29:df:0a:ad:31:9c:4a:50:f4:75:9f:d4:4e:5b:f3:6a:e3:46:
         b0:65:56:a5:50:a5:86:66:66:bd:1c:23:03:f1:8a:78:58:e4:
         78:3f:f2:4f:52:7c:fb:89:ec:72:1f:5f:79:8a:10:41:71:d3:
         d0:33:7e:44:69:23:6b:54:e5:42:09:71:1c:43:4a:6c:85:76:
         91:20:0b:fd:d7:ae:65:91:17:36:d2:a7:a8:cc:65:c0:c5:9b:
         56:bc:8d:a4:29:9c:12:54:a2:01:df:1e:54:bc:e3:53:90:b1:
         6a:b5:10:ab:f6:89:e4:ee:7c:4d:9f:ea:88:73:46:ab:55:39:
         f1:d6:4f:5e:94:62:55:10:5f:47:0a:31:ad:08:5d:39:dd:da:
         8d:98:df:55:29:b0:37:ad:35:fa:47:ca:6d:91:54:e7:ef:3d:
         0b:e3:f2:ca:e1:d5:83:2f:d6:b8:22:27:8b:18:47:8a:aa:f1:
         61:27:ab:bc:65:71:2d:fd:5e:d3:4f:4d:44:41:2c:6b:56:f3:
         8b:fd:64:36:e9:3b:87:33:4b:6a:fc:fd:2e:5a:66:15:4c:32:
         2b:8d:09:61
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9/1lUwfrNHLbDtSIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MTAxNDEyMzQ1OFoXDTI3MDExMjEzMzQ1OFowLzEtMCsGA1UEAxMk
MjU4MjRmNzMtOTYyZC00MmI0LTllY2ItY2FmZTU5OTlkZjFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpKK1Z7lo+2CLJx5vS5j9QwC3NSAGLM0GVf1
93cpTji72y00RHILhC3AVD7Al3Y0v4Uyyn77V7TGYYXGR7MSQj3py4mEZnk09Anu
12inCSFzLq3a/0Y/VbE6WGEKeGZFJWjWso9eFyPxkTRly5VmR63QnW7C35kYSRVm
Ai/+6+huyOQWL7KA/eO8NV+B2hWykFLnwLlVGgovzt4qQPG1mAHeMtODZLMfURW8
xBr85dES4cjB9+OksXJscznGeB45cY/xTqq7EeSr51BOUjgNDQ74DeyMCJ+GF6p4
SOXrg7kDERyFJgSVZY6Abo+j+IAhgRHSXTBNv2UqdS6pU4C+IwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJj0UsAkInrmZkeLK/QQQupmemGrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjAyNGM3MzItMmFiMy0z
ZDk5LTk1N2EtZTJlOTc1NjYyN2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgPSA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHPoEUK3SLF2/9WDrQ5ZiSXcaD84QfPlSQoaC5slUl7aNLwq4Snf
Cq0xnEpQ9HWf1E5b82rjRrBlVqVQpYZmZr0cIwPxinhY5Hg/8k9SfPuJ7HIfX3mK
EEFx09AzfkRpI2tU5UIJcRxDSmyFdpEgC/3XrmWRFzbSp6jMZcDFm1a8jaQpnBJU
ogHfHlS841OQsWq1EKv2ieTufE2f6ohzRqtVOfHWT16UYlUQX0cKMa0IXTnd2o2Y
31UpsDetNfpHym2RVOfvPQvj8srh1YMv1rgiJ4sYR4qq8WEnq7xlcS39XtNPTURB
LGtW84v9ZDbpO4czS2r8/S5aZhVMMiuNCWE=
-----END CERTIFICATE-----
Generated at Fri Oct 16 00:18:43 2026 by rpki-client