Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8dfd1afa-6c51-39f4-866d-0d4ad2c514fa.roa
File:                     8dfd1afa-6c51-39f4-866d-0d4ad2c514fa.roa (raw, json)
Hash identifier:          rqHcZ4ZOxI6HuHKp0YOcG7iLj9k2e2JZlaWPhNknJQE=
Subject key identifier:   1E:03:69:41:88:C5:3A:C8:E6:9F:47:53:C3:8B:EB:29:97:D5:B7:EA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EBD0DC9EB8B82B7777FDFB900
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8dfd1afa-6c51-39f4-866d-0d4ad2c514fa.roa
Signing time:             Wed 05 Aug 2026 18:04:04 +0000
ROA not before:           Wed 05 Aug 2026 18:04:04 +0000
ROA not after:            Tue 03 Nov 2026 19:04:04 +0000
asID:                     19905
IP address blocks:        2604:2d80:5980::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:0d:c9:eb:8b:82:b7:77:7f:df:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug  5 18:04:04 2026 GMT
            Not After : Nov  3 19:04:04 2026 GMT
        Subject: CN=08258948-6a6b-4f04-9cf2-ced6f8420084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5b:14:38:a7:f7:f6:32:79:5d:33:f4:f0:a2:
                    4c:da:d1:03:35:54:f1:65:da:13:1b:95:05:80:b3:
                    e5:7f:23:2d:00:0e:2d:10:2a:bc:e6:21:ac:2d:2b:
                    f2:b6:46:c2:08:3b:9c:58:07:72:50:32:22:de:fb:
                    fb:90:a6:8c:e8:eb:0c:ce:f5:9f:4c:3a:01:57:f8:
                    2f:ba:3e:bc:97:85:0d:6c:67:46:4f:3b:74:d2:a3:
                    58:dd:23:6d:00:0e:9c:5d:0c:63:70:9d:6f:0e:60:
                    41:08:67:fd:5b:c6:23:e9:f5:96:df:80:57:d2:55:
                    b0:07:79:3a:47:a4:e4:a0:8d:85:52:9a:d5:69:f3:
                    34:f9:7c:0a:55:6d:b0:b5:b0:9d:a9:b2:e3:ac:c0:
                    1b:e0:24:3c:6b:0d:89:c6:bc:a4:5d:45:e0:7c:13:
                    db:64:52:36:cb:ef:9f:0c:0d:01:9a:0b:aa:a9:7f:
                    31:e6:75:86:e4:fb:48:b3:bc:c8:9b:83:0f:87:1f:
                    52:f3:d1:7f:e4:ad:dd:44:a0:bc:2b:f2:bf:f7:ff:
                    23:30:c0:55:38:63:b6:b7:41:85:67:02:1e:1f:50:
                    aa:39:37:27:39:4b:7d:e2:e9:9d:cc:5d:38:64:c7:
                    65:9e:d1:c1:75:f7:c5:a3:20:cb:d1:32:cb:06:7d:
                    b4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:03:69:41:88:C5:3A:C8:E6:9F:47:53:C3:8B:EB:29:97:D5:B7:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8dfd1afa-6c51-39f4-866d-0d4ad2c514fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:5980::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:aa:9c:a9:58:14:8a:45:89:27:e5:2d:61:c7:19:18:1e:41:
         5c:a6:3c:93:34:3c:f2:f5:f6:ef:54:6a:58:92:8c:07:63:79:
         bf:f3:14:31:2c:94:8c:a6:aa:29:f3:5e:8c:92:c2:ed:a3:04:
         99:f3:1c:cc:af:fa:e3:07:48:b2:b7:5b:96:a4:f4:30:7f:f3:
         50:b6:b1:e5:7c:38:12:5b:82:0b:1a:cb:6c:c5:7d:81:31:39:
         be:42:de:f7:ae:55:27:9c:6f:6e:0e:a6:bd:cb:34:82:d1:63:
         d3:6d:94:91:90:9c:26:65:97:4b:a8:4b:6c:d2:5f:47:60:d3:
         fa:d2:fc:ac:e9:37:d7:6a:4b:8f:41:d1:15:8a:3a:14:6f:2d:
         26:56:5e:10:05:f3:a9:58:d6:65:e5:85:fd:9d:b6:30:c7:f2:
         75:d3:df:e1:d7:eb:f6:af:08:23:97:1c:28:d4:b2:5d:9f:a1:
         5a:c1:4a:a6:98:ab:0e:7d:33:e6:e4:e4:5f:97:aa:e4:8e:82:
         6c:34:17:c6:60:61:63:f8:30:65:7f:2e:c9:c2:0e:86:b4:18:
         0d:3b:bc:f7:8e:c5:90:fa:ab:46:33:f1:fd:a1:9b:93:84:9f:
         da:61:b1:f3:b1:9c:85:92:24:34:8a:49:6d:3d:5e:a1:f7:17:
         f3:76:82:ff
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE69Dcnri4K3d3/fuQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDgwNTE4MDQwNFoXDTI2MTEwMzE5MDQwNFowLzEtMCsGA1UEAxMk
MDgyNTg5NDgtNmE2Yi00ZjA0LTljZjItY2VkNmY4NDIwMDg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FsUOKf39jJ5XTP08KJM2tEDNVTxZdoTG5UF
gLPlfyMtAA4tECq85iGsLSvytkbCCDucWAdyUDIi3vv7kKaM6OsMzvWfTDoBV/gv
uj68l4UNbGdGTzt00qNY3SNtAA6cXQxjcJ1vDmBBCGf9W8Yj6fWW34BX0lWwB3k6
R6TkoI2FUprVafM0+XwKVW2wtbCdqbLjrMAb4CQ8aw2JxrykXUXgfBPbZFI2y++f
DA0BmguqqX8x5nWG5PtIs7zIm4MPhx9S89F/5K3dRKC8K/K/9/8jMMBVOGO2t0GF
ZwIeH1CqOTcnOUt94umdzF04ZMdlntHBdffFoyDL0TLLBn20gQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB4DaUGIxTrI5p9HU8OL6ymX1bfqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGRmZDFhZmEtNmM1MS0z
OWY0LTg2NmQtMGQ0YWQyYzUxNGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgFmA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACGqnKlYFIpFiSflLWHHGRgeQVymPJM0PPL19u9UaliSjAdjeb/z
FDEslIymqinzXoySwu2jBJnzHMyv+uMHSLK3W5ak9DB/81C2seV8OBJbggsay2zF
fYExOb5C3veuVSecb24Opr3LNILRY9NtlJGQnCZll0uoS2zSX0dg0/rS/KzpN9dq
S49B0RWKOhRvLSZWXhAF86lY1mXlhf2dtjDH8nXT3+HX6/avCCOXHCjUsl2foVrB
SqaYqw59M+bk5F+XquSOgmw0F8ZgYWP4MGV/LsnCDoa0GA07vPeOxZD6q0Yz8f2h
m5OEn9phsfOxnIWSJDSKSW09XqH3F/N2gv8=
-----END CERTIFICATE-----
Generated at Fri Aug 21 02:24:13 2026 by rpki-client