Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71ed72eb-12e4-302e-aa1f-3999cc3a1d7b.roa
File:                     71ed72eb-12e4-302e-aa1f-3999cc3a1d7b.roa (raw, json)
Hash identifier:          Pwc0/48dg1L0V/KC7fw1I+IBxRr7kDw7vmlnQYXoxsw=
Subject key identifier:   92:0A:A3:60:A5:90:04:16:EC:82:36:CE:FF:82:02:C7:1F:8E:6F:6D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E95855E2B7F6BC39E27AB18E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71ed72eb-12e4-302e-aa1f-3999cc3a1d7b.roa
Signing time:             Wed 22 Jul 2026 14:12:41 +0000
ROA not before:           Wed 22 Jul 2026 14:12:41 +0000
ROA not after:            Tue 20 Oct 2026 14:12:41 +0000
asID:                     30036
IP address blocks:        2604:2d81:8700::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:95:85:5e:2b:7f:6b:c3:9e:27:ab:18:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 22 14:12:41 2026 GMT
            Not After : Oct 20 14:12:41 2026 GMT
        Subject: CN=9f4cff4e-c311-452b-afd3-ec58d5e49f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:82:0e:d0:75:0d:7f:03:36:90:c0:35:f4:0f:
                    a0:bd:0a:4b:58:36:6d:26:08:de:69:93:71:6e:8a:
                    ba:2e:66:30:70:fa:cf:1c:7f:67:de:f5:b1:35:61:
                    83:ed:6a:88:32:bc:7a:44:bf:1b:30:2f:f5:f4:03:
                    e5:57:19:d0:e5:e7:d3:d2:21:1e:e5:aa:f5:84:d2:
                    1a:2e:d4:d3:b5:35:cb:6e:46:c1:a8:45:50:b4:97:
                    2b:3c:f3:22:83:6e:8c:48:e3:40:39:27:ac:15:ab:
                    f3:a5:cd:62:22:36:58:9d:4b:f1:8e:40:b6:28:1f:
                    a9:ce:6f:71:15:96:cd:2a:e1:11:68:14:0e:d5:24:
                    ea:be:49:b3:90:d9:a0:32:db:13:c9:4d:9c:1e:3b:
                    0e:94:31:93:d2:91:4a:83:e4:0d:e5:77:7d:92:f4:
                    25:62:37:a0:fd:88:91:36:e4:2f:ed:8b:19:d5:22:
                    d7:0c:5e:2a:10:03:dd:33:10:4b:b5:22:6a:5d:1c:
                    73:48:47:84:42:ef:d2:56:a6:c9:90:fc:4f:96:55:
                    19:d6:4d:81:42:ea:d6:d7:b5:82:c5:4d:6f:09:6a:
                    31:eb:76:59:63:a0:39:b8:e7:26:cf:92:ea:5c:82:
                    55:34:9d:14:37:5b:ea:78:f3:8e:3b:4f:32:d1:03:
                    b7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0A:A3:60:A5:90:04:16:EC:82:36:CE:FF:82:02:C7:1F:8E:6F:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71ed72eb-12e4-302e-aa1f-3999cc3a1d7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:8700::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:75:d5:e7:f7:e6:5c:b4:d9:8e:36:d2:7e:d4:8e:c3:83:43:
         16:50:ea:02:99:1e:26:4a:7e:ba:fc:9c:1b:54:da:20:94:f8:
         3d:f0:fc:c2:b4:ef:1f:4c:75:dc:c2:7d:34:cc:f3:91:11:72:
         bc:b2:31:bb:41:9f:97:2f:3f:f0:db:ff:30:76:be:32:d5:49:
         e5:a9:53:fc:6d:8c:b3:3e:a2:61:e9:d9:d4:3b:7a:06:c5:58:
         1c:4f:74:6f:80:e8:0f:e7:a8:00:08:ec:16:04:79:bb:de:63:
         ab:25:77:15:13:e8:ec:de:6a:0f:61:10:e5:6e:68:9d:8d:a1:
         11:0a:d8:93:5f:dc:3c:b4:ec:03:aa:51:1f:da:94:14:6b:47:
         e2:ec:25:58:da:91:28:2a:ed:e7:31:18:6a:59:fa:72:d8:0e:
         56:97:03:66:b5:91:3a:61:b1:e7:35:00:13:ae:39:b5:96:32:
         5b:96:d4:84:ef:30:4c:18:23:20:82:c2:7d:af:b0:17:9e:d9:
         6e:9b:d2:a2:71:bd:33:aa:6b:5b:64:02:94:ee:89:38:96:d5:
         cb:69:16:6c:de:b7:1f:72:c2:df:c4:89:ba:7c:fa:ed:03:b1:
         da:f4:4a:2c:d5:f6:35:fb:8d:d9:3b:31:0f:e7:5c:fc:d3:82:
         d9:8d:29:34
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6VhV4rf2vDnierGOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcyMjE0MTI0MVoXDTI2MTAyMDE0MTI0MVowLzEtMCsGA1UEAxMk
OWY0Y2ZmNGUtYzMxMS00NTJiLWFmZDMtZWM1OGQ1ZTQ5ZjM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIIO0HUNfwM2kMA19A+gvQpLWDZtJgjeaZNx
boq6LmYwcPrPHH9n3vWxNWGD7WqIMrx6RL8bMC/19APlVxnQ5efT0iEe5ar1hNIa
LtTTtTXLbkbBqEVQtJcrPPMig26MSONAOSesFavzpc1iIjZYnUvxjkC2KB+pzm9x
FZbNKuERaBQO1STqvkmzkNmgMtsTyU2cHjsOlDGT0pFKg+QN5Xd9kvQlYjeg/YiR
NuQv7YsZ1SLXDF4qEAPdMxBLtSJqXRxzSEeEQu/SVqbJkPxPllUZ1k2BQurW17WC
xU1vCWox63ZZY6A5uOcmz5LqXIJVNJ0UN1vqePOOO08y0QO3HQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJIKo2ClkAQW7II2zv+CAscfjm9tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzFlZDcyZWItMTJlNC0z
MDJlLWFhMWYtMzk5OWNjM2ExZDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgYcA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC511ef35ly02Y420n7UjsODQxZQ6gKZHiZKfrr8nBtU2iCU+D3w
/MK07x9MddzCfTTM85ERcryyMbtBn5cvP/Db/zB2vjLVSeWpU/xtjLM+omHp2dQ7
egbFWBxPdG+A6A/nqAAI7BYEebveY6sldxUT6Ozeag9hEOVuaJ2NoREK2JNf3Dy0
7AOqUR/alBRrR+LsJVjakSgq7ecxGGpZ+nLYDlaXA2a1kTphsec1ABOuObWWMluW
1ITvMEwYIyCCwn2vsBee2W6b0qJxvTOqa1tkApTuiTiW1ctpFmzetx9ywt/Eibp8
+u0Dsdr0SizV9jX7jdk7MQ/nXPzTgtmNKTQ=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:12 2026 by rpki-client