Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c8f7181f-ef82-3975-982d-7f453157fd8a.roa
File:                     c8f7181f-ef82-3975-982d-7f453157fd8a.roa (raw, json)
Hash identifier:          GwlNdKyWYRogelWEoVcPaXk2BFNGSvPyImPA5p8N/ho=
Subject key identifier:   BF:2D:04:29:A4:85:50:68:43:A1:AE:D8:CD:C0:77:92:81:17:B9:14
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F6AF2BC7068C33EC738FAEE80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c8f7181f-ef82-3975-982d-7f453157fd8a.roa
Signing time:             Wed 07 Oct 2026 01:00:12 +0000
ROA not before:           Wed 07 Oct 2026 01:00:12 +0000
ROA not after:            Tue 05 Jan 2027 02:00:12 +0000
asID:                     19905
IP address blocks:        2604:2d81:9480::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6a:f2:bc:70:68:c3:3e:c7:38:fa:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  7 01:00:12 2026 GMT
            Not After : Jan  5 02:00:12 2027 GMT
        Subject: CN=94d1c6d8-37ea-4693-b545-87a141e7ffe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7c:4a:7f:29:1e:1e:b4:35:be:03:10:08:b3:
                    28:3f:f8:e4:3e:58:75:98:16:bb:d4:7d:85:06:16:
                    56:15:29:4b:c9:26:ab:87:e7:69:8d:11:b2:30:3d:
                    db:64:c6:f7:29:59:5f:80:23:22:c5:1f:d0:01:d7:
                    63:b4:9b:42:59:84:69:2f:68:95:24:f5:68:fe:7c:
                    68:d3:c0:39:39:ea:a6:00:2f:13:2f:78:3e:71:b8:
                    ff:e3:2f:93:5d:40:17:95:5b:5c:88:62:66:fc:51:
                    5f:a0:e9:b2:09:08:22:6b:5d:29:a0:bb:10:72:a1:
                    89:50:23:1c:20:6a:13:0c:b9:a4:88:40:02:4f:e2:
                    b7:f9:30:8b:9d:67:6f:05:5f:21:2e:9b:c6:74:13:
                    df:d9:d1:50:5e:d6:24:4a:18:35:7d:d2:ff:10:b8:
                    66:fb:4c:01:c3:5d:01:6e:80:0f:06:8e:4e:5f:d6:
                    98:0e:24:9b:a8:a2:24:1b:ec:b9:4b:79:3a:c9:66:
                    36:5d:41:ae:0e:2a:dc:39:f5:90:ed:2b:46:2e:34:
                    18:82:ca:f1:36:19:16:f6:f2:33:47:7d:e8:20:3e:
                    28:e8:46:10:56:c8:5f:d1:a2:24:da:c4:bd:59:f9:
                    1f:c7:1a:6c:20:d1:58:00:90:d4:d9:e1:bd:ce:41:
                    81:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:2D:04:29:A4:85:50:68:43:A1:AE:D8:CD:C0:77:92:81:17:B9:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c8f7181f-ef82-3975-982d-7f453157fd8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:9480::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:36:7e:fc:e3:24:ea:86:6b:83:d1:71:71:b3:8a:86:14:aa:
         bb:2d:9b:0f:0f:da:be:69:55:ba:ee:45:9b:a0:e5:c0:ee:21:
         f8:56:82:d9:d7:5e:e9:d1:f3:39:05:fd:8a:fb:0b:40:a3:15:
         9c:d2:b0:07:cd:4d:fc:b7:89:7a:d4:e7:06:62:99:b5:f7:18:
         01:f2:32:92:b3:b2:48:fa:c7:b7:b1:bc:74:92:3a:4b:e4:3e:
         24:ca:b6:0b:51:7d:cb:84:65:ff:8d:a3:2e:85:84:db:72:fc:
         d3:a2:6e:86:b1:55:0e:2d:39:92:66:da:dc:59:8b:8e:cd:97:
         66:b2:20:b3:de:3b:72:8a:2f:dd:bd:d3:04:16:b4:d3:d4:dd:
         b2:83:b7:05:a9:fe:c0:d6:c8:ea:c0:dc:f0:29:96:45:b0:ae:
         b5:fd:06:7f:26:77:be:4e:f3:36:41:dd:96:26:52:bd:00:90:
         0a:b2:58:48:30:b3:f0:2d:86:3f:73:2b:e6:2b:0b:6c:22:51:
         bc:4b:6d:fc:67:d1:02:30:a5:83:09:35:16:b4:6e:00:68:a7:
         0b:2a:9a:8d:ba:39:d3:2d:d0:77:62:78:2a:ef:c3:ee:76:a5:
         b3:12:37:06:ab:97:0d:f0:df:ed:57:4b:94:4e:02:9d:d1:52:
         7e:22:0b:98
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9q8rxwaMM+xzj67oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MTAwNzAxMDAxMloXDTI3MDEwNTAyMDAxMlowLzEtMCsGA1UEAxMk
OTRkMWM2ZDgtMzdlYS00NjkzLWI1NDUtODdhMTQxZTdmZmU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnxKfykeHrQ1vgMQCLMoP/jkPlh1mBa71H2F
BhZWFSlLySarh+dpjRGyMD3bZMb3KVlfgCMixR/QAddjtJtCWYRpL2iVJPVo/nxo
08A5OeqmAC8TL3g+cbj/4y+TXUAXlVtciGJm/FFfoOmyCQgia10poLsQcqGJUCMc
IGoTDLmkiEACT+K3+TCLnWdvBV8hLpvGdBPf2dFQXtYkShg1fdL/ELhm+0wBw10B
boAPBo5OX9aYDiSbqKIkG+y5S3k6yWY2XUGuDircOfWQ7StGLjQYgsrxNhkW9vIz
R33oID4o6EYQVshf0aIk2sS9WfkfxxpsINFYAJDU2eG9zkGBnwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL8tBCmkhVBoQ6Gu2M3Ad5KBF7kUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzhmNzE4MWYtZWY4Mi0z
OTc1LTk4MmQtN2Y0NTMxNTdmZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgZSA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGk2fvzjJOqGa4PRcXGzioYUqrstmw8P2r5pVbruRZug5cDuIfhW
gtnXXunR8zkF/Yr7C0CjFZzSsAfNTfy3iXrU5wZimbX3GAHyMpKzskj6x7exvHSS
OkvkPiTKtgtRfcuEZf+Noy6FhNty/NOiboaxVQ4tOZJm2txZi47Nl2ayILPeO3KK
L9290wQWtNPU3bKDtwWp/sDWyOrA3PAplkWwrrX9Bn8md75O8zZB3ZYmUr0AkAqy
WEgws/Athj9zK+YrC2wiUbxLbfxn0QIwpYMJNRa0bgBopwsqmo26OdMt0HdieCrv
w+52pbMSNwarlw3w3+1XS5ROAp3RUn4iC5g=
-----END CERTIFICATE-----
Generated at Mon Oct 12 22:03:33 2026 by rpki-client