Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/326747cc-762d-3eae-8bad-859def62ee1a.roa
File:                     326747cc-762d-3eae-8bad-859def62ee1a.roa (raw, json)
Hash identifier:          zgIAEfHThUbLLOLxmwL7pPpfZYgJWIiomTM8NXYhiAo=
Subject key identifier:   FC:21:24:98:52:FA:4D:F9:33:C3:FE:D0:F4:E6:E9:F9:A8:AA:7E:14
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F497364226DF96D3AD9073920
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/326747cc-762d-3eae-8bad-859def62ee1a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:500::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:64:22:6d:f9:6d:3a:d9:07:39:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=017c4901-8983-493f-8386-3e3cc64bdbb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0d:d8:c8:d1:4e:6b:d6:f3:bb:f1:5e:26:00:
                    49:8a:62:76:91:63:cb:14:e0:00:8e:c9:4b:81:d7:
                    b8:2f:a7:c7:4b:58:b7:cb:60:44:23:47:cb:34:57:
                    95:92:ae:fd:be:9b:63:0d:97:64:7d:91:63:5c:97:
                    08:14:24:da:25:08:fd:30:0e:ee:2a:f1:5f:74:bc:
                    87:98:a5:ba:e7:53:f5:13:78:26:95:60:3f:8c:2d:
                    92:a8:c0:b1:33:3c:85:c0:cd:98:90:c7:f2:40:cd:
                    43:4a:60:15:34:7a:3b:52:78:d1:79:f6:50:0e:ea:
                    16:66:05:bf:6a:27:dd:ee:4c:7d:92:8e:d5:b4:c3:
                    69:63:ed:0f:3c:6c:08:8f:c4:f1:5e:58:9a:59:4d:
                    1a:cc:b8:34:d9:d9:b8:f3:ca:fe:c4:c4:da:3b:ce:
                    11:b5:08:6f:9d:36:7b:d8:6e:2e:26:cd:5f:e8:ac:
                    3e:eb:51:86:04:46:92:bb:6e:43:b6:48:4b:fd:2b:
                    ab:b0:7a:d4:d2:d1:84:a2:38:2e:39:1b:86:8a:8d:
                    b1:d2:9f:84:9b:94:0f:a1:96:38:d8:39:18:4e:4b:
                    33:93:fc:b9:38:32:60:e0:b4:1b:4a:55:8c:bf:eb:
                    ed:69:74:06:9c:c2:9c:21:b5:57:28:57:0c:36:89:
                    fb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:21:24:98:52:FA:4D:F9:33:C3:FE:D0:F4:E6:E9:F9:A8:AA:7E:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/326747cc-762d-3eae-8bad-859def62ee1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:500::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:33:18:28:6b:08:d1:0c:1b:c4:e4:08:68:8d:9b:4f:b7:5f:
         e8:e5:1f:0d:77:e2:43:d0:e0:ce:1c:80:c1:8e:a1:93:a9:0e:
         b4:c5:41:ea:a1:a8:60:65:52:22:96:6e:31:ea:d9:66:ea:ab:
         8f:e1:43:c6:56:c9:af:46:14:47:79:c9:15:d5:d8:30:ee:7a:
         1d:91:4f:ba:c7:60:b1:1e:19:17:58:b2:b8:9c:b8:ec:33:e1:
         a1:55:a6:9d:66:37:16:04:87:fa:3f:ba:46:2b:71:c7:17:19:
         c1:1d:2c:cc:3c:0a:a8:66:92:d0:2c:23:d6:6c:9c:48:ea:8a:
         8c:5b:d8:37:5e:1f:b2:1f:56:74:72:84:78:2b:7c:a3:b3:95:
         b7:57:28:a9:c3:ae:5b:c8:9a:4e:df:d5:9c:ac:3d:4c:ab:56:
         5f:9b:57:e1:4f:a2:7d:7b:59:0e:b2:68:7a:c2:a5:10:86:0b:
         10:10:01:d4:e2:42:09:29:97:bb:8a:32:c0:27:81:0e:72:7d:
         d6:b0:e2:79:93:6c:a7:25:3e:24:62:fb:45:fb:27:0a:a7:e0:
         b0:ca:d5:6c:56:1d:43:6e:53:04:e8:06:e3:a1:67:6a:dd:8c:
         06:37:4d:8c:3d:98:d4:01:c5:20:dd:f9:88:7b:98:81:09:4d:
         7c:02:80:c5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc2QibfltOtkHOSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MDE3YzQ5MDEtODk4My00OTNmLTgzODYtM2UzY2M2NGJkYmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ3YyNFOa9bzu/FeJgBJimJ2kWPLFOAAjslL
gde4L6fHS1i3y2BEI0fLNFeVkq79vptjDZdkfZFjXJcIFCTaJQj9MA7uKvFfdLyH
mKW651P1E3gmlWA/jC2SqMCxMzyFwM2YkMfyQM1DSmAVNHo7UnjRefZQDuoWZgW/
aifd7kx9ko7VtMNpY+0PPGwIj8TxXliaWU0azLg02dm488r+xMTaO84RtQhvnTZ7
2G4uJs1f6Kw+61GGBEaSu25DtkhL/SursHrU0tGEojguORuGio2x0p+Em5QPoZY4
2DkYTkszk/y5ODJg4LQbSlWMv+vtaXQGnMKcIbVXKFcMNon7FwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPwhJJhS+k35M8P+0PTm6fmoqn4UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzI2NzQ3Y2MtNzYyZC0z
ZWFlLThiYWQtODU5ZGVmNjJlZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgAUA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGMzGChrCNEMG8TkCGiNm0+3X+jlHw134kPQ4M4cgMGOoZOpDrTF
QeqhqGBlUiKWbjHq2Wbqq4/hQ8ZWya9GFEd5yRXV2DDueh2RT7rHYLEeGRdYsric
uOwz4aFVpp1mNxYEh/o/ukYrcccXGcEdLMw8CqhmktAsI9ZsnEjqioxb2DdeH7If
VnRyhHgrfKOzlbdXKKnDrlvImk7f1ZysPUyrVl+bV+FPon17WQ6yaHrCpRCGCxAQ
AdTiQgkpl7uKMsAngQ5yfdaw4nmTbKclPiRi+0X7Jwqn4LDK1WxWHUNuUwToBuOh
Z2rdjAY3TYw9mNQBxSDd+Yh7mIEJTXwCgMU=
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:46:40 2026 by rpki-client