Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3231c3c1-4857-36df-80df-f14462b7c80c.roa
File:                     3231c3c1-4857-36df-80df-f14462b7c80c.roa (raw, json)
Hash identifier:          +BKFGmfxjsc0CJTzOSP2H/pCsI5AfaFwg6/uKSV1D/E=
Subject key identifier:   FC:39:7E:58:0B:12:78:BE:E6:45:C9:96:A5:DE:42:48:BE:88:EB:2D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E7D2F7C4AB3DFE46FC8BC0600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3231c3c1-4857-36df-80df-f14462b7c80c.roa
Signing time:             Mon 13 Jul 2026 21:00:12 +0000
ROA not before:           Mon 13 Jul 2026 21:00:12 +0000
ROA not after:            Sun 11 Oct 2026 21:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d81:1b80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7d:2f:7c:4a:b3:df:e4:6f:c8:bc:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 21:00:12 2026 GMT
            Not After : Oct 11 21:00:12 2026 GMT
        Subject: CN=d42705c9-ce34-4a99-9a2e-f53854a3ec30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:96:d7:62:48:62:b8:59:fb:6b:d1:4a:7a:d0:
                    63:0f:43:ab:e9:02:d0:8e:1b:37:79:a3:61:a1:15:
                    ae:9b:fe:45:b7:21:9c:73:0a:06:83:87:b2:8b:24:
                    a2:88:7b:e1:6c:3a:0e:bf:1e:87:69:6d:64:73:18:
                    d1:58:4b:2d:f7:71:15:fe:e5:44:6c:0a:41:b3:39:
                    e9:6b:f9:23:98:5f:6a:52:f1:a9:9c:a5:95:8b:66:
                    11:31:2e:e9:69:4e:c0:53:d3:5b:e6:dc:ed:d8:d4:
                    69:5c:82:c4:8c:70:66:1a:e4:a0:54:79:4a:42:9a:
                    52:d5:2e:0f:54:9a:28:f3:9b:29:fa:7f:f4:6b:cb:
                    f0:ab:0f:01:1b:4e:6b:22:72:63:36:03:d0:31:66:
                    7c:03:5c:49:77:93:a0:c2:8f:10:a8:e2:86:b6:37:
                    f9:9e:ca:fc:50:2f:c5:54:e1:0b:03:fa:79:e6:76:
                    71:ec:6e:48:e9:80:4e:07:1a:1f:e5:08:94:77:98:
                    7a:0d:2a:40:25:5c:85:30:4e:c6:c8:d9:f5:7d:f2:
                    49:de:31:05:ae:e9:5c:20:f8:c6:5e:8b:21:04:fe:
                    13:5d:f1:99:51:28:1c:9c:a7:3e:13:9c:00:a7:07:
                    9e:07:1c:84:18:ea:cf:87:8e:14:50:13:f1:ae:3d:
                    1e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:39:7E:58:0B:12:78:BE:E6:45:C9:96:A5:DE:42:48:BE:88:EB:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3231c3c1-4857-36df-80df-f14462b7c80c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1b80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:f0:05:81:81:93:57:01:f5:4c:f2:9c:ca:95:2d:51:33:0a:
         a8:3c:fc:dc:51:d3:85:ba:9a:eb:eb:2d:68:59:3a:c3:61:de:
         02:e9:ca:5d:99:3e:3b:f8:ba:30:70:a4:d8:d1:be:b9:5c:27:
         38:ab:f6:5b:b6:fd:81:7a:1b:91:83:4d:de:76:25:20:74:41:
         92:44:91:26:f5:6c:48:68:3e:b8:9a:32:a1:20:bc:27:bf:ee:
         d2:d6:1e:5e:e0:a5:6d:cc:70:52:b2:fe:e2:85:fb:35:a1:f5:
         cd:c6:02:93:5c:3e:d2:1e:de:ff:02:18:2b:b2:74:21:84:22:
         65:73:66:68:f0:aa:1b:6b:52:d4:29:cd:69:7b:ca:f3:0d:f1:
         6a:f5:cd:6f:ca:5b:c1:22:06:ce:ce:8f:37:47:d2:3f:92:a0:
         bf:03:36:45:68:f1:2c:15:28:48:4f:dc:1d:fe:97:74:22:67:
         5c:8e:fd:19:de:e8:1d:41:e8:d4:4d:9d:98:db:e4:b6:cc:49:
         66:f0:0c:cb:42:12:60:0f:d4:d7:ce:e2:e7:ac:5b:4c:3b:69:
         17:3e:47:18:11:66:9b:75:78:27:b8:e9:3b:e6:5c:cd:71:e0:
         db:3b:16:ba:f9:e5:71:fd:0d:5a:32:15:d9:38:dd:b8:98:a2:
         12:2e:60:53
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE59L3xKs9/kb8i8BgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcxMzIxMDAxMloXDTI2MTAxMTIxMDAxMlowLzEtMCsGA1UEAxMk
ZDQyNzA1YzktY2UzNC00YTk5LTlhMmUtZjUzODU0YTNlYzMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJbXYkhiuFn7a9FKetBjD0Or6QLQjhs3eaNh
oRWum/5FtyGccwoGg4eyiySiiHvhbDoOvx6HaW1kcxjRWEst93EV/uVEbApBsznp
a/kjmF9qUvGpnKWVi2YRMS7paU7AU9Nb5tzt2NRpXILEjHBmGuSgVHlKQppS1S4P
VJoo85sp+n/0a8vwqw8BG05rInJjNgPQMWZ8A1xJd5Ogwo8QqOKGtjf5nsr8UC/F
VOELA/p55nZx7G5I6YBOBxof5QiUd5h6DSpAJVyFME7GyNn1ffJJ3jEFrulcIPjG
XoshBP4TXfGZUSgcnKc+E5wApweeBxyEGOrPh44UUBPxrj0eOwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPw5flgLEni+5kXJlqXeQki+iOstMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzIzMWMzYzEtNDg1Ny0z
NmRmLTgwZGYtZjE0NDYyYjdjODBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgRuA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH/wBYGBk1cB9UzynMqVLVEzCqg8/NxR04W6muvrLWhZOsNh3gLp
yl2ZPjv4ujBwpNjRvrlcJzir9lu2/YF6G5GDTd52JSB0QZJEkSb1bEhoPriaMqEg
vCe/7tLWHl7gpW3McFKy/uKF+zWh9c3GApNcPtIe3v8CGCuydCGEImVzZmjwqhtr
UtQpzWl7yvMN8Wr1zW/KW8EiBs7OjzdH0j+SoL8DNkVo8SwVKEhP3B3+l3QiZ1yO
/Rne6B1B6NRNnZjb5LbMSWbwDMtCEmAP1NfO4uesW0w7aRc+RxgRZpt1eCe46Tvm
XM1x4Ns7Frr55XH9DVoyFdk43biYohIuYFM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:05:46 2026 by rpki-client