Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b04b4c47-cd8d-32d4-beb7-5540a769b38a.roa
File:                     b04b4c47-cd8d-32d4-beb7-5540a769b38a.roa (raw, json)
Hash identifier:          lumwBX/cyl4g7+oThoIIoGuYSHNXb96BMXkwH9mMXhQ=
Subject key identifier:   2F:50:B5:88:32:A7:F3:FD:93:D5:85:B1:28:B5:42:BD:B0:D2:DC:C7
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F498AF5E3130FC36724824900
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b04b4c47-cd8d-32d4-beb7-5540a769b38a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d81:9280::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:f5:e3:13:0f:c3:67:24:82:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=80ea53ab-fb60-48a7-aaba-f8a3ab7f9053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9e:40:01:81:30:e0:45:99:43:d0:2d:d3:20:
                    69:a9:d4:c8:cc:36:44:5d:b8:18:4a:de:c2:1a:be:
                    e2:db:fa:0f:7e:9a:1e:af:95:b5:3b:a2:42:51:ab:
                    6e:d9:40:ef:8b:c8:ff:a2:10:5c:1f:91:38:c7:1c:
                    3d:32:bb:79:03:9c:d8:87:3b:45:ab:a7:f8:7d:f5:
                    79:56:79:11:9a:2d:dd:c1:c3:39:91:c5:dd:45:ab:
                    ff:3b:52:14:f1:b4:05:ed:35:e0:75:3a:8b:db:60:
                    96:aa:17:6f:bd:0f:f8:86:02:9b:c2:20:ec:6d:3a:
                    76:da:0d:27:85:8b:d3:b5:8a:82:82:4c:14:dc:01:
                    6e:0e:3b:b5:f5:c3:10:8a:5a:b6:e4:d5:cf:f0:22:
                    19:11:9a:1e:68:ff:ca:db:be:8f:88:a6:9b:27:1e:
                    d0:b4:61:da:af:b6:4c:c8:f4:c9:ee:cd:04:f0:69:
                    61:e4:46:fe:ae:33:fd:2d:2f:00:c8:9b:a1:c0:7c:
                    a1:3e:d1:00:90:be:5f:4f:81:14:bf:32:27:9e:e6:
                    22:c9:74:af:80:16:a8:0f:38:51:f2:37:ab:5e:a0:
                    81:c4:38:cc:31:02:4b:76:45:2a:33:a6:c5:be:ee:
                    62:6f:48:d1:ae:3b:32:2d:b4:5e:16:52:28:e2:02:
                    53:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:50:B5:88:32:A7:F3:FD:93:D5:85:B1:28:B5:42:BD:B0:D2:DC:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b04b4c47-cd8d-32d4-beb7-5540a769b38a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:9280::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:9d:a4:3b:b4:ec:62:3e:ff:a1:61:fd:6d:df:1c:6c:7f:93:
         02:74:f8:30:b1:59:01:31:96:2a:ce:ba:da:e3:e3:f0:07:aa:
         97:20:a7:0f:0b:f3:5e:39:eb:69:90:c9:26:e8:a9:8e:bf:66:
         c8:39:45:68:e8:b2:c9:a4:7e:47:0a:5f:93:c7:5c:a6:7e:f4:
         05:1d:bc:a4:c2:a2:e8:a5:db:63:49:15:b0:32:7a:cf:aa:de:
         82:c5:92:7a:16:ce:b1:7f:72:f6:92:1d:4b:41:9b:3c:a9:44:
         0d:99:98:ed:b4:f9:42:aa:79:c1:ca:ef:5d:12:8f:d3:ba:ab:
         6a:d8:b7:95:11:c5:42:da:e9:9f:75:f1:fc:6d:32:eb:64:22:
         77:9d:b4:ab:98:23:00:7e:8e:d7:14:9c:24:e8:8c:4b:f0:7d:
         35:a9:61:4c:1b:7e:b6:3c:4c:13:a1:81:42:16:bc:53:20:e8:
         d6:b2:37:70:98:61:24:0e:8e:86:71:99:cb:b7:c8:45:2e:bf:
         c9:b5:6b:ed:b2:25:06:9a:45:95:4d:f5:3a:74:b8:bb:97:4a:
         1a:75:a1:d7:54:b2:d6:92:83:b7:e2:34:6d:f5:bb:a8:5d:54:
         c1:f7:c5:df:3a:89:c7:a3:b8:b7:f5:b8:62:86:ee:94:b9:10:
         c2:55:21:37
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JivXjEw/DZySCSQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ODBlYTUzYWItZmI2MC00OGE3LWFhYmEtZjhhM2FiN2Y5MDUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ5AAYEw4EWZQ9At0yBpqdTIzDZEXbgYSt7C
Gr7i2/oPfpoer5W1O6JCUatu2UDvi8j/ohBcH5E4xxw9Mrt5A5zYhztFq6f4ffV5
VnkRmi3dwcM5kcXdRav/O1IU8bQF7TXgdTqL22CWqhdvvQ/4hgKbwiDsbTp22g0n
hYvTtYqCgkwU3AFuDju19cMQilq25NXP8CIZEZoeaP/K276PiKabJx7QtGHar7ZM
yPTJ7s0E8Glh5Eb+rjP9LS8AyJuhwHyhPtEAkL5fT4EUvzInnuYiyXSvgBaoDzhR
8jerXqCBxDjMMQJLdkUqM6bFvu5ib0jRrjsyLbReFlIo4gJT9wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFC9QtYgyp/P9k9WFsSi1Qr2w0tzHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjA0YjRjNDctY2Q4ZC0z
MmQ0LWJlYjctNTU0MGE3NjliMzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgZKA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADedpDu07GI+/6Fh/W3fHGx/kwJ0+DCxWQExlirOutrj4/AHqpcg
pw8L814562mQySboqY6/Zsg5RWjossmkfkcKX5PHXKZ+9AUdvKTCouil22NJFbAy
es+q3oLFknoWzrF/cvaSHUtBmzypRA2ZmO20+UKqecHK710Sj9O6q2rYt5URxULa
6Z918fxtMutkInedtKuYIwB+jtcUnCTojEvwfTWpYUwbfrY8TBOhgUIWvFMg6Nay
N3CYYSQOjoZxmcu3yEUuv8m1a+2yJQaaRZVN9Tp0uLuXShp1oddUstaSg7fiNG31
u6hdVMH3xd86icejuLf1uGKG7pS5EMJVITc=
-----END CERTIFICATE-----
Generated at Mon Oct 12 04:40:33 2026 by rpki-client