Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b1fe1dcd-4ee2-31f6-bb20-15ba2eea8b12.roa
File:                     b1fe1dcd-4ee2-31f6-bb20-15ba2eea8b12.roa (raw, json)
Hash identifier:          q1/kEr7aDtLBGazJkpcZXRD93+R8ZzTwjrvK5LMgsks=
Subject key identifier:   00:94:6F:EF:3E:A2:C1:15:4B:1D:C3:6C:DB:41:21:2E:C4:DF:86:54
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F498AAA7703CD9CA9F7AA7B60
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b1fe1dcd-4ee2-31f6-bb20-15ba2eea8b12.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d81:9180::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:aa:77:03:cd:9c:a9:f7:aa:7b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9e9e8666-906a-46e1-b6d4-d6fd657aa912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cb:91:e3:b6:36:70:ed:48:e3:76:36:97:8f:
                    ba:97:93:a6:6b:10:06:69:d9:72:b5:da:51:1e:ec:
                    97:b4:f5:83:0e:43:fa:fb:55:f7:b8:30:9e:d5:d2:
                    eb:57:a2:c9:20:fc:69:5b:91:1c:52:16:e9:8d:bc:
                    14:30:d7:91:b0:f4:6d:4e:a6:84:20:e8:40:2e:cb:
                    d3:5f:7b:7a:4f:05:58:c5:53:cc:08:55:0e:56:c6:
                    b4:b6:11:69:d0:cb:72:16:35:2a:1d:7b:13:a8:50:
                    e5:8b:72:eb:e2:5a:69:16:17:46:f3:61:cd:c4:46:
                    f0:2f:d2:e7:84:64:31:bf:d1:5b:5c:2a:05:23:60:
                    31:80:dc:98:02:94:cc:1e:2d:46:b0:c6:ae:d1:b0:
                    7e:68:be:0c:49:06:e1:a6:cc:be:3d:13:75:1f:01:
                    d1:1d:1e:41:93:00:5a:1e:a7:6f:1b:2a:51:bb:ef:
                    94:f1:d9:81:b6:a1:c3:84:f7:14:c0:9b:12:bd:6c:
                    01:3f:19:79:73:23:c9:49:5b:f7:47:07:30:94:20:
                    81:eb:4f:34:55:bd:90:78:54:7d:24:54:16:10:37:
                    7b:e4:e1:3a:09:73:3e:4c:90:b4:39:bd:df:b3:1d:
                    68:00:a6:ff:25:9b:36:d2:7e:8a:59:f4:c0:73:b0:
                    b6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:94:6F:EF:3E:A2:C1:15:4B:1D:C3:6C:DB:41:21:2E:C4:DF:86:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b1fe1dcd-4ee2-31f6-bb20-15ba2eea8b12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:9180::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:70:9a:cd:16:6e:f8:31:c1:9c:be:67:06:6b:ec:5f:cf:d1:
         07:9f:fa:be:f9:91:3b:f9:90:fd:71:94:08:97:a4:81:34:41:
         b2:1a:07:44:9b:09:11:62:ad:26:bc:51:9e:52:61:fd:9f:8f:
         45:32:6d:e2:8e:b3:92:e2:6c:79:a9:df:fd:7b:04:5a:56:23:
         d7:05:31:f8:ae:5e:8f:5f:48:bb:a1:21:98:8f:24:9c:18:66:
         ec:5d:0d:54:9a:be:93:e4:8e:9b:ef:4b:39:8b:1f:61:61:2c:
         b0:eb:1f:8c:1a:09:5e:d1:17:36:b6:94:ef:1d:85:f4:c3:68:
         fe:21:39:7b:e8:48:d1:26:f9:ec:bf:76:12:49:b0:c7:93:cf:
         2c:eb:13:29:75:a7:1f:2f:c9:02:b0:bc:9c:3a:55:b8:20:e5:
         6f:2b:0b:f7:be:ce:f1:18:cd:4b:40:7f:22:05:b9:da:60:70:
         3b:ed:6c:7d:e0:f9:e3:b5:35:13:d7:ab:16:e8:7c:ec:69:c4:
         b3:91:80:c2:6a:e0:46:a7:7f:c8:e9:fc:42:91:d6:3f:38:b3:
         f3:96:78:8e:47:c0:c0:64:2d:03:16:18:88:9a:fb:8c:b1:90:
         f2:65:3d:ce:6d:49:69:34:0f:69:7b:d8:98:ee:59:65:f6:16:
         5a:32:d2:35
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jiqp3A82cqfeqe2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OWU5ZTg2NjYtOTA2YS00NmUxLWI2ZDQtZDZmZDY1N2FhOTEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MuR47Y2cO1I43Y2l4+6l5OmaxAGadlytdpR
HuyXtPWDDkP6+1X3uDCe1dLrV6LJIPxpW5EcUhbpjbwUMNeRsPRtTqaEIOhALsvT
X3t6TwVYxVPMCFUOVsa0thFp0MtyFjUqHXsTqFDli3Lr4lppFhdG82HNxEbwL9Ln
hGQxv9FbXCoFI2AxgNyYApTMHi1GsMau0bB+aL4MSQbhpsy+PRN1HwHRHR5BkwBa
HqdvGypRu++U8dmBtqHDhPcUwJsSvWwBPxl5cyPJSVv3RwcwlCCB6080Vb2QeFR9
JFQWEDd75OE6CXM+TJC0Ob3fsx1oAKb/JZs20n6KWfTAc7C2qQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFACUb+8+osEVSx3DbNtBIS7E34ZUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjFmZTFkY2QtNGVlMi0z
MWY2LWJiMjAtMTViYTJlZWE4YjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgZGA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADBwms0WbvgxwZy+ZwZr7F/P0Qef+r75kTv5kP1xlAiXpIE0QbIa
B0SbCRFirSa8UZ5SYf2fj0UybeKOs5LibHmp3/17BFpWI9cFMfiuXo9fSLuhIZiP
JJwYZuxdDVSavpPkjpvvSzmLH2FhLLDrH4waCV7RFza2lO8dhfTDaP4hOXvoSNEm
+ey/dhJJsMeTzyzrEyl1px8vyQKwvJw6Vbgg5W8rC/e+zvEYzUtAfyIFudpgcDvt
bH3g+eO1NRPXqxbofOxpxLORgMJq4Eanf8jp/EKR1j84s/OWeI5HwMBkLQMWGIia
+4yxkPJlPc5tSWk0D2l72JjuWWX2Floy0jU=
-----END CERTIFICATE-----
Generated at Mon Oct 12 22:46:20 2026 by rpki-client