Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d00d59a-0ca1-3c7e-ba46-c715a0fa065e.roa
File:                     5d00d59a-0ca1-3c7e-ba46-c715a0fa065e.roa (raw, json)
Hash identifier:          B1MpFqcNN1AfVzeY86Q2n5MIvDI5ZbeL8qQcRVon2v4=
Subject key identifier:   49:44:4C:89:FE:D5:86:D6:7B:F9:63:03:A8:A3:66:9A:EF:39:85:61
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4973541075D6CFD9180BEC00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d00d59a-0ca1-3c7e-ba46-c715a0fa065e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:5280::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:54:10:75:d6:cf:d9:18:0b:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=aea5df17-0425-44a0-9b46-87451be17a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c1:27:de:5b:4c:2c:88:10:7d:05:40:4f:63:
                    f0:a3:a2:13:76:99:5a:0f:a1:87:00:34:ea:54:c3:
                    c9:c2:3f:f5:0a:07:83:99:01:6c:ba:e6:6b:4b:98:
                    ca:d6:08:c2:35:4c:83:da:92:4a:3e:7b:52:b6:48:
                    a3:20:28:44:ee:97:82:33:05:af:89:93:cd:94:3e:
                    c7:1c:73:df:d7:4c:08:17:7c:e0:d8:0d:4b:1c:ce:
                    4b:c5:99:33:9d:b9:ea:d9:d6:37:c1:51:66:6a:3f:
                    76:a9:18:d6:8f:01:7b:20:4d:2e:3c:0d:52:c7:97:
                    8b:d2:ea:2e:09:1f:db:10:02:bd:70:e3:f3:33:d5:
                    ee:a7:58:39:97:5d:d2:fc:60:c9:7f:d7:40:06:5b:
                    b8:2c:be:eb:0c:35:fb:2b:cd:45:69:26:38:a8:8a:
                    0e:d4:2e:be:24:e2:00:61:d2:df:04:cc:fc:39:28:
                    a1:6f:b0:ae:1d:66:a9:81:09:06:83:7e:c9:a4:c5:
                    5a:b2:60:00:4e:e2:a3:3b:81:00:62:c7:65:ef:31:
                    28:a3:22:f0:bc:2b:ba:44:a5:72:38:fc:53:ff:72:
                    64:b2:05:db:47:f5:7a:a8:6d:70:fa:4d:db:d7:2d:
                    6f:0c:b9:28:25:6c:08:01:29:45:0b:86:08:22:60:
                    dd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:44:4C:89:FE:D5:86:D6:7B:F9:63:03:A8:A3:66:9A:EF:39:85:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d00d59a-0ca1-3c7e-ba46-c715a0fa065e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:5280::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:74:1f:45:a9:ad:cd:10:ad:12:9c:05:29:32:3e:fd:77:5a:
         3a:f1:ec:55:8a:9c:3d:ac:cb:2e:55:04:ca:97:3a:59:5c:3f:
         0e:42:f9:26:8a:05:a4:f0:7b:97:93:aa:5b:00:a1:2e:39:65:
         aa:fb:aa:03:79:a8:c9:3d:23:d8:3b:26:99:dd:94:2b:26:83:
         92:d6:3e:fa:c3:eb:37:2d:7c:a9:04:23:99:dd:2f:b8:c3:75:
         b2:db:eb:f2:b3:e0:07:4f:d2:36:9b:4f:e8:ad:d0:25:00:98:
         b0:d9:28:db:35:d1:c5:f5:8a:9e:da:67:99:92:2b:30:5d:30:
         30:63:b9:47:3b:75:17:c7:b2:3f:c0:6f:6a:f8:9c:fa:03:d3:
         0f:ef:9a:a7:f7:14:a2:4d:52:93:80:0a:5c:cf:6d:34:a7:44:
         13:6b:37:f5:51:61:9d:30:b6:ee:41:2d:e7:41:25:a4:b1:99:
         a2:ec:79:2b:65:2d:89:82:90:25:70:33:7d:7a:3a:cd:af:d9:
         c4:53:ca:72:d4:8d:2b:70:d8:65:95:a0:c5:9e:e6:19:3b:c5:
         fa:51:fa:42:59:79:dd:7e:70:54:88:d0:58:88:82:7f:7f:67:
         4e:19:4c:55:d1:e5:66:7b:b8:65:02:50:1e:be:a4:a7:05:3d:
         fc:25:e3:0f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc1QQddbP2RgL7AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YWVhNWRmMTctMDQyNS00NGEwLTliNDYtODc0NTFiZTE3YTIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcEn3ltMLIgQfQVAT2Pwo6ITdplaD6GHADTq
VMPJwj/1CgeDmQFsuuZrS5jK1gjCNUyD2pJKPntStkijIChE7peCMwWviZPNlD7H
HHPf10wIF3zg2A1LHM5LxZkznbnq2dY3wVFmaj92qRjWjwF7IE0uPA1Sx5eL0uou
CR/bEAK9cOPzM9Xup1g5l13S/GDJf9dABlu4LL7rDDX7K81FaSY4qIoO1C6+JOIA
YdLfBMz8OSihb7CuHWapgQkGg37JpMVasmAATuKjO4EAYsdl7zEooyLwvCu6RKVy
OPxT/3JksgXbR/V6qG1w+k3b1y1vDLkoJWwIASlFC4YIImDdMwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFElETIn+1YbWe/ljA6ijZprvOYVhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWQwMGQ1OWEtMGNhMS0z
YzdlLWJhNDYtYzcxNWEwZmEwNjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgFKA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEN0H0Wprc0QrRKcBSkyPv13Wjrx7FWKnD2syy5VBMqXOllcPw5C
+SaKBaTwe5eTqlsAoS45Zar7qgN5qMk9I9g7JpndlCsmg5LWPvrD6zctfKkEI5nd
L7jDdbLb6/Kz4AdP0jabT+it0CUAmLDZKNs10cX1ip7aZ5mSKzBdMDBjuUc7dRfH
sj/Ab2r4nPoD0w/vmqf3FKJNUpOAClzPbTSnRBNrN/VRYZ0wtu5BLedBJaSxmaLs
eStlLYmCkCVwM316Os2v2cRTynLUjStw2GWVoMWe5hk7xfpR+kJZed1+cFSI0FiI
gn9/Z04ZTFXR5WZ7uGUCUB6+pKcFPfwl4w8=
-----END CERTIFICATE-----
Generated at Sun Sep 27 16:41:19 2026 by rpki-client