Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9d8a2ff3-8986-3e8d-84f9-3b02c7bb41ed.roa
File:                     9d8a2ff3-8986-3e8d-84f9-3b02c7bb41ed.roa (raw, json)
Hash identifier:          4y+8BCua43+egGAP/FOkZRsKERcq3gmmsRci9j/41pI=
Subject key identifier:   53:B7:E6:77:47:31:21:13:E0:28:C1:97:F8:4B:ED:B2:A3:F7:43:9B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F5E62F01D1347AD0B18BF24A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9d8a2ff3-8986-3e8d-84f9-3b02c7bb41ed.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     30036
IP address blocks:        2604:2d80:5200::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:f0:1d:13:47:ad:0b:18:bf:24:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=39ffeeb7-d209-47a7-8b8d-5c13e6a26fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4f:48:95:87:15:7b:ec:9f:74:8c:85:b8:54:
                    fb:3f:a9:ca:1e:73:9e:6c:69:34:82:48:b4:c6:f8:
                    39:30:b2:59:22:3c:ac:92:1f:e6:20:0e:62:f7:b9:
                    07:95:29:37:50:69:ef:fc:21:17:b9:1a:69:83:e8:
                    54:4f:50:38:3f:10:00:43:b6:a8:98:c6:16:19:b5:
                    00:e5:21:8c:95:37:8e:2a:f0:70:9c:94:ca:0b:e3:
                    d2:59:d7:7c:80:50:29:99:7f:64:d1:3a:f0:3e:6e:
                    fd:e2:3d:22:2f:ae:07:8d:0f:86:62:0d:6a:c7:c2:
                    f8:23:c6:8f:b1:a7:55:67:48:80:f9:f0:bf:b2:52:
                    0f:57:28:a7:ea:ff:e1:d9:f4:90:e6:1b:54:00:5c:
                    45:e2:0d:09:26:07:37:8d:ef:d1:8b:c3:6b:04:0a:
                    21:5f:8f:21:0a:c5:6c:d8:dc:78:54:17:ef:8d:e7:
                    e5:b6:5e:56:54:27:27:d0:40:e4:b9:31:66:1e:51:
                    73:c6:a8:3d:8e:96:f8:02:cb:01:dc:5d:f7:61:f5:
                    91:32:b9:87:b0:bd:4a:e7:96:77:17:4c:72:ae:ec:
                    b6:78:36:f9:0a:d8:61:45:e0:ed:80:7b:b2:a4:1b:
                    af:9c:cf:ef:87:88:2f:c6:cd:cf:6c:59:ca:ee:db:
                    97:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B7:E6:77:47:31:21:13:E0:28:C1:97:F8:4B:ED:B2:A3:F7:43:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9d8a2ff3-8986-3e8d-84f9-3b02c7bb41ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:5200::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:1b:1f:7e:65:36:63:22:d3:9c:22:96:a2:5e:28:53:b3:31:
         7c:48:98:09:58:8c:37:4f:fa:11:96:d1:b1:8a:a0:c2:87:4a:
         8b:76:34:5a:f0:54:fb:4b:bf:f2:e0:19:1f:07:66:32:61:ec:
         b4:88:33:6f:af:21:3e:be:60:a7:b8:7a:c5:0b:1b:4c:6d:ed:
         53:61:30:69:df:1c:b7:2e:da:ba:7e:4c:a6:ca:f5:15:95:8c:
         39:67:1d:15:74:34:bb:36:ba:3d:ca:41:42:a5:b6:89:f8:40:
         8f:9d:bb:66:a9:ef:68:fe:c1:8b:ec:7b:3a:93:b1:c4:01:d4:
         27:9c:b2:c9:c1:e1:a1:43:00:6d:27:28:a2:da:1d:07:8a:e3:
         d9:27:3b:07:ec:3c:4e:a0:c2:af:86:43:d2:4f:36:41:80:12:
         ce:73:d7:f9:04:9d:d8:55:76:6b:17:6f:2c:9c:5f:85:dc:3a:
         d9:3c:76:73:20:8f:3a:86:63:d5:ea:8b:04:0a:b5:96:b1:a1:
         b1:41:f6:14:aa:67:18:00:5f:de:a2:e6:55:16:ca:49:00:05:
         1d:28:7a:f1:e1:b6:1e:24:90:01:12:f3:f0:63:65:b2:ec:6a:
         e5:68:3a:2b:15:04:6b:f0:db:c6:c3:56:0e:ac:c8:c3:b4:31:
         05:57:04:6e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9eYvAdE0etCxi/JKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk
MzlmZmVlYjctZDIwOS00N2E3LThiOGQtNWMxM2U2YTI2ZmQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU9IlYcVe+yfdIyFuFT7P6nKHnOebGk0gki0
xvg5MLJZIjyskh/mIA5i97kHlSk3UGnv/CEXuRppg+hUT1A4PxAAQ7aomMYWGbUA
5SGMlTeOKvBwnJTKC+PSWdd8gFApmX9k0TrwPm794j0iL64HjQ+GYg1qx8L4I8aP
sadVZ0iA+fC/slIPVyin6v/h2fSQ5htUAFxF4g0JJgc3je/Ri8NrBAohX48hCsVs
2Nx4VBfvjefltl5WVCcn0EDkuTFmHlFzxqg9jpb4AssB3F33YfWRMrmHsL1K55Z3
F0xyruy2eDb5CthhReDtgHuypBuvnM/vh4gvxs3PbFnK7tuXxQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFO35ndHMSET4CjBl/hL7bKj90ObMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWQ4YTJmZjMtODk4Ni0z
ZThkLTg0ZjktM2IwMmM3YmI0MWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgFIA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAMbH35lNmMi05wilqJeKFOzMXxImAlYjDdP+hGW0bGKoMKHSot2
NFrwVPtLv/LgGR8HZjJh7LSIM2+vIT6+YKe4esULG0xt7VNhMGnfHLcu2rp+TKbK
9RWVjDlnHRV0NLs2uj3KQUKlton4QI+du2ap72j+wYvsezqTscQB1CecssnB4aFD
AG0nKKLaHQeK49knOwfsPE6gwq+GQ9JPNkGAEs5z1/kEndhVdmsXbyycX4XcOtk8
dnMgjzqGY9XqiwQKtZaxobFB9hSqZxgAX96i5lUWykkABR0oevHhth4kkAES8/Bj
ZbLsauVoOisVBGvw28bDVg6syMO0MQVXBG4=
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:10:33 2026 by rpki-client