Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6c8cbf4f-5d66-3b75-9b04-c5bd86f3be98.roa
File:                     6c8cbf4f-5d66-3b75-9b04-c5bd86f3be98.roa (raw, json)
Hash identifier:          FGC4WDYiHYnRGbPJ99eXlOPEqa/tA1e8UoXlH5K1p14=
Subject key identifier:   0B:88:F8:63:A2:9B:0E:B7:95:30:3B:C6:44:62:70:2A:DC:DF:1A:A0
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4927692C399133346DC85400
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6c8cbf4f-5d66-3b75-9b04-c5bd86f3be98.roa
Signing time:             Thu 24 Sep 2026 22:28:52 +0000
ROA not before:           Thu 24 Sep 2026 22:28:52 +0000
ROA not after:            Wed 23 Dec 2026 23:28:52 +0000
asID:                     19905
IP address blocks:        2604:2d80:5400::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:27:69:2c:39:91:33:34:6d:c8:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 24 22:28:52 2026 GMT
            Not After : Dec 23 23:28:52 2026 GMT
        Subject: CN=e91e03ef-2954-4bbf-ab5e-967eafcbfaeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e7:6a:4b:54:db:a7:e1:28:b3:05:a9:ae:d3:
                    ed:0c:6f:9d:ee:16:7e:0e:90:ad:ab:92:94:6f:35:
                    a6:c4:23:34:0b:3d:ce:89:5d:3a:55:6d:31:e2:0d:
                    49:7d:a1:1e:24:f1:a6:17:eb:80:96:b5:fa:64:d0:
                    7c:62:53:e6:1b:25:3f:c2:e5:5d:b6:f7:e3:97:98:
                    71:52:7f:09:f2:0d:b8:7e:8c:3f:59:42:9c:ea:e0:
                    98:c4:5a:e1:06:9c:53:5e:34:45:f6:ed:bb:22:2f:
                    b4:22:ba:5f:98:78:66:c3:56:2e:bd:9e:9c:25:a3:
                    57:8b:05:e0:55:82:a8:cb:11:55:7c:82:88:80:f3:
                    52:e1:7b:8c:41:5c:80:2e:97:a3:73:ff:74:1c:34:
                    fa:dd:1e:bd:b7:46:40:a7:bb:08:7a:2f:df:e5:d3:
                    c2:eb:32:b9:cc:92:52:c5:03:e4:8e:a0:14:07:61:
                    11:67:42:e6:83:e5:3b:1c:7f:ce:37:1f:b3:6b:c7:
                    14:19:96:86:32:d1:42:93:5f:7d:c4:25:e4:0c:c2:
                    41:46:6c:60:d9:53:7c:59:bb:f3:b9:84:16:c9:68:
                    a5:0c:d6:05:10:f0:c5:4c:24:bb:f2:f2:23:e5:c9:
                    9a:d2:5a:9d:d9:6f:56:de:44:6e:6a:fd:79:47:63:
                    d7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:88:F8:63:A2:9B:0E:B7:95:30:3B:C6:44:62:70:2A:DC:DF:1A:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6c8cbf4f-5d66-3b75-9b04-c5bd86f3be98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:5400::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:91:c3:c8:d2:5c:6c:4c:56:8b:69:cb:10:f3:3c:86:dc:c6:
         e8:93:67:56:fc:01:34:69:5d:81:04:96:67:c2:f9:a1:0e:f7:
         85:9a:be:37:62:4c:a4:6d:42:6f:21:28:ac:6b:75:1e:48:c8:
         89:88:bd:1d:96:54:15:fb:90:ca:2d:e6:e8:ce:c0:58:47:31:
         60:65:fd:68:36:b9:22:01:eb:1c:88:c2:53:d3:9d:af:77:13:
         03:bc:1b:21:1b:d4:2d:e8:6d:c9:3f:01:d3:22:75:7a:16:1b:
         55:d3:27:3c:f1:55:07:23:66:77:44:70:fe:26:92:49:d2:46:
         16:a8:94:34:d7:12:44:ef:11:56:a7:db:5b:00:fc:5f:a9:e0:
         28:64:ee:77:d9:02:44:a3:48:16:31:03:78:52:21:9e:b2:bf:
         69:22:5e:c2:38:90:4e:93:2f:de:c8:d1:7b:87:2d:e2:cf:ed:
         ff:cb:3d:15:81:25:53:84:49:f9:d9:fe:af:26:12:95:85:3e:
         1a:41:b9:74:47:73:c5:18:dc:81:e6:99:3e:4e:ae:f4:77:96:
         90:cb:b6:d6:bc:66:a6:17:aa:4e:31:31:14:e1:57:ae:65:dc:
         d0:57:4a:32:6c:ad:cb:73:e5:44:95:22:9c:c6:ef:1f:26:23:
         f8:72:17:15
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JJ2ksOZEzNG3IVAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDkyNDIyMjg1MloXDTI2MTIyMzIzMjg1MlowLzEtMCsGA1UEAxMk
ZTkxZTAzZWYtMjk1NC00YmJmLWFiNWUtOTY3ZWFmY2JmYWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmudqS1Tbp+EoswWprtPtDG+d7hZ+DpCtq5KU
bzWmxCM0Cz3OiV06VW0x4g1JfaEeJPGmF+uAlrX6ZNB8YlPmGyU/wuVdtvfjl5hx
Un8J8g24fow/WUKc6uCYxFrhBpxTXjRF9u27Ii+0IrpfmHhmw1YuvZ6cJaNXiwXg
VYKoyxFVfIKIgPNS4XuMQVyALpejc/90HDT63R69t0ZAp7sIei/f5dPC6zK5zJJS
xQPkjqAUB2ERZ0Lmg+U7HH/ONx+za8cUGZaGMtFCk199xCXkDMJBRmxg2VN8Wbvz
uYQWyWilDNYFEPDFTCS78vIj5cma0lqd2W9W3kRuav15R2PXjQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAuI+GOimw63lTA7xkRicCrc3xqgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNmM4Y2JmNGYtNWQ2Ni0z
Yjc1LTliMDQtYzViZDg2ZjNiZTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgFQA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABORw8jSXGxMVotpyxDzPIbcxuiTZ1b8ATRpXYEElmfC+aEO94Wa
vjdiTKRtQm8hKKxrdR5IyImIvR2WVBX7kMot5ujOwFhHMWBl/Wg2uSIB6xyIwlPT
na93EwO8GyEb1C3obck/AdMidXoWG1XTJzzxVQcjZndEcP4mkknSRhaolDTXEkTv
EVan21sA/F+p4Chk7nfZAkSjSBYxA3hSIZ6yv2kiXsI4kE6TL97I0XuHLeLP7f/L
PRWBJVOESfnZ/q8mEpWFPhpBuXRHc8UY3IHmmT5OrvR3lpDLtta8ZqYXqk4xMRTh
V65l3NBXSjJsrctz5USVIpzG7x8mI/hyFxU=
-----END CERTIFICATE-----
Generated at Mon Oct 12 00:52:23 2026 by rpki-client