Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a5413967-cfab-3feb-9334-fd2435264e72.roa
File:                     a5413967-cfab-3feb-9334-fd2435264e72.roa (raw, json)
Hash identifier:          kR3lCSawMnutZBiLPSW7gi1I2EsjO/2VQCiGaQkvHlM=
Subject key identifier:   0B:54:C3:6B:CB:58:C3:28:97:FE:93:32:62:31:BA:87:50:44:0F:27
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DC48DA8C9DCF613AFD9BEA600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a5413967-cfab-3feb-9334-fd2435264e72.roa
Signing time:             Fri 08 May 2026 17:45:26 +0000
ROA not before:           Fri 08 May 2026 17:45:26 +0000
ROA not after:            Thu 06 Aug 2026 17:45:26 +0000
asID:                     30036
IP address blocks:        2604:2d81:8400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:8d:a8:c9:dc:f6:13:af:d9:be:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May  8 17:45:26 2026 GMT
            Not After : Aug  6 17:45:26 2026 GMT
        Subject: CN=2bb2eb6d-23cb-4708-808a-bb4713008c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:29:74:8e:4f:c7:aa:e6:9e:f2:12:e0:7e:c7:
                    68:90:12:2e:64:68:12:95:d5:65:df:24:ea:79:66:
                    78:a2:2c:ae:11:1a:8f:44:40:51:3f:97:ca:0f:60:
                    b7:18:90:d6:21:d6:f2:eb:08:b2:1f:bd:9b:62:84:
                    9b:95:d7:90:1e:bd:fe:bc:17:a7:f8:fc:58:31:79:
                    22:95:19:c6:2b:02:89:fb:2c:a8:0d:5b:68:92:d3:
                    35:b2:03:96:e5:cb:09:d5:53:28:8d:4f:da:ec:fd:
                    95:74:2e:cd:1c:8b:37:fd:b1:62:45:3f:d1:6c:09:
                    1e:08:04:d0:38:e0:a3:38:21:25:32:5c:3e:8a:fa:
                    45:49:10:6b:2a:1c:6b:75:3a:73:1f:76:80:6d:59:
                    af:14:bf:73:20:b4:d6:f7:76:99:b6:77:8e:48:96:
                    ca:8f:ed:7e:c4:12:3b:43:da:d4:1c:68:a1:83:f0:
                    f7:5a:d5:e4:15:56:43:84:12:19:13:81:c9:58:4e:
                    db:a4:bd:de:ab:82:41:54:21:ba:7d:6d:d2:d9:47:
                    d6:d3:b2:b2:81:6b:06:2e:cd:a3:bb:4c:f5:1d:bd:
                    70:ec:e5:0a:90:72:fb:45:4f:e6:d6:ba:1a:f0:bb:
                    79:e0:83:90:5a:ed:31:5c:20:2e:d6:7b:21:09:5e:
                    5e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:54:C3:6B:CB:58:C3:28:97:FE:93:32:62:31:BA:87:50:44:0F:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a5413967-cfab-3feb-9334-fd2435264e72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:8400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:49:7d:7c:f4:10:ef:cc:63:2f:39:62:90:22:65:fa:95:19:
         68:d9:64:5a:5e:da:c9:fa:e4:2b:9e:4e:27:09:d6:96:69:ab:
         d8:3c:6e:a6:80:1c:f5:84:f7:05:2c:88:99:2f:5e:44:c5:92:
         1c:be:f2:30:99:11:c1:83:77:66:18:7a:2e:79:74:56:f3:66:
         c9:05:c0:fa:b5:e1:21:6a:87:bb:ff:a9:04:51:e9:6e:ea:8b:
         f9:1e:06:07:69:3d:6e:51:39:1f:ab:03:cd:8b:b4:a6:b7:e8:
         83:8b:3e:25:f6:84:07:33:5f:2f:f8:11:8f:50:6a:db:7b:3e:
         97:bd:11:c3:e3:0d:d3:57:ea:4c:b2:51:0e:ec:1b:fe:de:6e:
         56:68:d4:3c:fd:27:d0:a7:fe:c4:e4:4b:ca:9c:d6:23:8b:1f:
         d5:58:f0:b7:c8:b0:dc:c2:86:6e:98:f2:95:00:38:b6:39:d4:
         26:d5:56:f3:1d:36:46:55:81:99:1c:77:11:f0:26:58:02:d8:
         1b:86:a2:53:39:5e:6b:54:98:b9:4e:9b:45:56:51:62:fe:54:
         88:74:b0:df:57:04:ad:05:6b:ca:fa:ef:a5:b9:13:6a:59:53:
         17:ab:19:6b:77:2e:f6:9c:30:75:37:bb:9c:75:cc:11:e5:62:
         66:1d:96:a1
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE3EjajJ3PYTr9m+pgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDUwODE3NDUyNloXDTI2MDgwNjE3NDUyNlowLzEtMCsGA1UEAxMk
MmJiMmViNmQtMjNjYi00NzA4LTgwOGEtYmI0NzEzMDA4YzZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhil0jk/Hquae8hLgfsdokBIuZGgSldVl3yTq
eWZ4oiyuERqPREBRP5fKD2C3GJDWIdby6wiyH72bYoSbldeQHr3+vBen+PxYMXki
lRnGKwKJ+yyoDVtoktM1sgOW5csJ1VMojU/a7P2VdC7NHIs3/bFiRT/RbAkeCATQ
OOCjOCElMlw+ivpFSRBrKhxrdTpzH3aAbVmvFL9zILTW93aZtneOSJbKj+1+xBI7
Q9rUHGihg/D3WtXkFVZDhBIZE4HJWE7bpL3eq4JBVCG6fW3S2UfW07KygWsGLs2j
u0z1Hb1w7OUKkHL7RU/m1roa8Lt54IOQWu0xXCAu1nshCV5elwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAtUw2vLWMMol/6TMmIxuodQRA8nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTU0MTM5NjctY2ZhYi0z
ZmViLTkzMzQtZmQyNDM1MjY0ZTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgYQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAI0l9fPQQ78xjLzlikCJl+pUZaNlkWl7ayfrkK55OJwnWlmmr2Dxu
poAc9YT3BSyImS9eRMWSHL7yMJkRwYN3Zhh6Lnl0VvNmyQXA+rXhIWqHu/+pBFHp
buqL+R4GB2k9blE5H6sDzYu0prfog4s+JfaEBzNfL/gRj1Bq23s+l70Rw+MN01fq
TLJRDuwb/t5uVmjUPP0n0Kf+xORLypzWI4sf1Vjwt8iw3MKGbpjylQA4tjnUJtVW
8x02RlWBmRx3EfAmWALYG4aiUzlea1SYuU6bRVZRYv5UiHSw31cErQVryvrvpbkT
allTF6sZa3cu9pwwdTe7nHXMEeViZh2WoQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:56:17 2026 by rpki-client