Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf4b30e2-d7f4-34f3-bb08-48378d28c182.roa
File:                     cf4b30e2-d7f4-34f3-bb08-48378d28c182.roa (raw, json)
Hash identifier:          q6XP83xs0ZAHWWYUxgTq5QlsGClCkpAG54vjUt6PX5M=
Subject key identifier:   0F:4E:97:A9:9D:3F:66:7C:62:CB:DF:99:FD:45:BB:CE:C0:52:05:9A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584ED2F781E7DC27E4338DCA05C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf4b30e2-d7f4-34f3-bb08-48378d28c182.roa
Signing time:             Thu 13 Aug 2026 14:26:58 +0000
ROA not before:           Thu 13 Aug 2026 14:26:58 +0000
ROA not after:            Wed 11 Nov 2026 15:26:58 +0000
asID:                     30036
IP address blocks:        2604:2d81:8900::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d2:f7:81:e7:dc:27:e4:33:8d:ca:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 13 14:26:58 2026 GMT
            Not After : Nov 11 15:26:58 2026 GMT
        Subject: CN=9a862675-5361-40ee-a024-17c31e933e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bd:70:ce:f2:01:e7:26:fa:5f:16:2a:15:3f:
                    be:b5:e9:17:f0:87:54:ee:90:9e:a2:34:30:a6:aa:
                    f0:95:bc:bc:ca:69:8d:00:53:b1:6d:6c:da:57:9d:
                    21:fb:74:db:cc:7a:6f:89:e6:0c:13:7f:fc:26:a6:
                    2f:9b:fc:7b:12:8a:16:83:90:c6:f5:8c:67:f5:dd:
                    f2:7f:82:49:0b:7b:d5:06:1c:8f:4f:dc:a2:95:0e:
                    0b:e9:6c:cc:3c:6a:22:32:fe:31:60:73:e7:9d:99:
                    de:d7:e0:08:1f:93:3b:19:41:82:17:bf:bf:90:04:
                    06:0b:ca:0c:f9:f3:b4:8a:22:ef:b3:7f:46:ae:57:
                    3f:37:bb:1d:51:3d:df:c2:d0:99:b2:49:1a:98:51:
                    70:37:87:db:06:75:c1:75:18:ae:a8:0a:2a:51:20:
                    9a:a9:df:bd:c5:50:d9:1d:e5:07:23:da:5b:8d:eb:
                    97:5f:dd:3a:03:37:da:40:79:f5:ec:9b:a5:8a:21:
                    01:08:ec:92:54:52:40:15:4a:a8:d1:56:8f:cd:19:
                    9d:21:d2:0c:fa:cc:59:22:ef:c1:72:61:9a:fb:58:
                    1b:ae:bc:5d:39:2a:0d:82:ee:4e:f7:3d:09:1a:b0:
                    25:db:1e:92:23:41:11:77:b3:f6:67:b0:a5:1b:9c:
                    b9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4E:97:A9:9D:3F:66:7C:62:CB:DF:99:FD:45:BB:CE:C0:52:05:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf4b30e2-d7f4-34f3-bb08-48378d28c182.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:8900::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:e6:f2:a5:93:91:7c:7d:a1:10:af:5c:41:41:74:25:df:f0:
         d0:47:e5:34:fa:53:cf:88:9b:7a:02:90:59:78:a7:d3:0a:6f:
         f6:e4:f6:79:10:5f:98:84:ba:75:ce:a6:07:12:d6:97:49:7a:
         a2:5f:b2:d7:d4:e8:e2:86:71:17:f1:60:f9:fd:c7:7c:04:13:
         a7:4d:eb:3e:87:bd:07:94:6d:42:b7:9d:16:13:96:ef:e4:53:
         3a:fc:a3:6b:7e:1a:01:3b:aa:10:61:f3:76:be:18:79:ba:06:
         10:56:b4:24:6a:63:fa:4f:ea:08:3c:d2:43:c1:a5:f7:dd:00:
         8e:1c:97:c0:2c:1d:d1:b1:6c:d6:87:b4:94:28:82:06:73:21:
         77:a9:93:37:01:d2:e8:0f:d5:95:01:e1:d5:e5:4b:d0:28:b7:
         b8:ac:da:8f:5f:5f:75:7d:fc:56:d9:7e:29:64:b3:78:61:1c:
         3b:af:04:25:be:7d:1f:b6:ca:a9:ca:cd:04:ad:9a:1b:80:d6:
         a0:ca:49:88:dc:a7:48:54:0a:95:4e:e5:fb:19:a8:2f:2f:35:
         03:a7:50:21:1a:22:f1:7f:0c:25:7e:ca:46:d9:d6:21:54:b0:
         48:a6:13:f5:5e:77:1a:19:4d:cd:2b:2e:2b:30:d0:76:53:d4:
         e4:07:1c:49
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7S94Hn3CfkM43KBcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDgxMzE0MjY1OFoXDTI2MTExMTE1MjY1OFowLzEtMCsGA1UEAxMk
OWE4NjI2NzUtNTM2MS00MGVlLWEwMjQtMTdjMzFlOTMzZTRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr1wzvIB5yb6XxYqFT++tekX8IdU7pCeojQw
pqrwlby8ymmNAFOxbWzaV50h+3TbzHpvieYME3/8JqYvm/x7EooWg5DG9Yxn9d3y
f4JJC3vVBhyPT9yilQ4L6WzMPGoiMv4xYHPnnZne1+AIH5M7GUGCF7+/kAQGC8oM
+fO0iiLvs39Grlc/N7sdUT3fwtCZskkamFFwN4fbBnXBdRiuqAoqUSCaqd+9xVDZ
HeUHI9pbjeuXX906AzfaQHn17JuliiEBCOySVFJAFUqo0VaPzRmdIdIM+sxZIu/B
cmGa+1gbrrxdOSoNgu5O9z0JGrAl2x6SI0ERd7P2Z7ClG5y5DQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA9Ol6mdP2Z8Ysvfmf1Fu87AUgWaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2Y0YjMwZTItZDdmNC0z
NGYzLWJiMDgtNDgzNzhkMjhjMTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgYkA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAnm8qWTkXx9oRCvXEFBdCXf8NBH5TT6U8+Im3oCkFl4p9MKb/bk
9nkQX5iEunXOpgcS1pdJeqJfstfU6OKGcRfxYPn9x3wEE6dN6z6HvQeUbUK3nRYT
lu/kUzr8o2t+GgE7qhBh83a+GHm6BhBWtCRqY/pP6gg80kPBpffdAI4cl8AsHdGx
bNaHtJQoggZzIXepkzcB0ugP1ZUB4dXlS9Aot7is2o9fX3V9/FbZfilks3hhHDuv
BCW+fR+2yqnKzQStmhuA1qDKSYjcp0hUCpVO5fsZqC8vNQOnUCEaIvF/DCV+ykbZ
1iFUsEimE/VedxoZTc0rLisw0HZT1OQHHEk=
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:00:00 2026 by rpki-client