Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9cd093a-d969-3e0d-9a23-a2e018c7c252.roa
File:                     a9cd093a-d969-3e0d-9a23-a2e018c7c252.roa (raw, json)
Hash identifier:          HAq/Wu/y29nZpYHW8v8p3t2df/lSNXM3ZJhxcrf0RK4=
Subject key identifier:   D8:BE:7F:80:41:50:F4:08:9D:1F:05:95:68:EF:DA:FA:95:89:A0:62
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F498B8A6753E43A88D3D40480
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9cd093a-d969-3e0d-9a23-a2e018c7c252.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:2780::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:8a:67:53:e4:3a:88:d3:d4:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2719df9d-e4f0-45e4-8128-3b26b4265b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7d:6e:01:5f:8a:fe:8f:f1:d5:90:17:3d:c8:
                    37:a8:68:7b:d3:c2:eb:45:26:23:bd:54:6e:0e:94:
                    e0:ef:54:28:6f:06:2b:9f:60:7e:0a:20:5d:95:3e:
                    6b:49:25:34:38:78:c0:8e:3b:62:34:ca:e1:6b:83:
                    63:e5:3a:bc:9b:8b:f1:f3:ed:bb:33:c1:c7:54:65:
                    38:1c:9e:93:2a:6f:69:01:ea:12:77:35:59:0b:4b:
                    3b:51:69:95:8c:4f:86:82:54:39:d5:cd:c6:73:7d:
                    b9:32:5f:49:dd:2d:0b:d4:c8:aa:ae:a6:45:23:0c:
                    6c:a5:30:23:86:0e:d4:e6:0e:80:fe:f5:fb:85:fb:
                    e5:ad:d1:5a:de:5c:09:16:32:e5:99:24:bb:42:75:
                    a1:c6:79:1b:77:62:ab:f5:cc:9e:66:b2:f3:38:0d:
                    df:42:43:c2:5b:df:16:62:26:13:c8:ea:72:1b:4c:
                    9f:c3:ae:95:50:43:4f:2c:0d:4b:5f:22:e0:f4:39:
                    4f:75:57:0a:21:1e:ec:d5:63:e7:01:7b:1d:3b:bb:
                    51:0c:5f:bf:e3:66:22:64:16:53:1f:a1:55:bf:18:
                    24:96:19:dc:ad:7d:07:65:c2:3e:c7:63:8d:ae:8a:
                    3e:1d:6c:5b:1f:6f:63:ae:29:a4:93:81:75:61:75:
                    ee:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:BE:7F:80:41:50:F4:08:9D:1F:05:95:68:EF:DA:FA:95:89:A0:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9cd093a-d969-3e0d-9a23-a2e018c7c252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:2780::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ee:a3:e8:98:4d:c5:2e:da:13:2b:4a:c3:81:13:e4:69:26:
         ed:7b:64:59:25:0e:22:da:e5:7b:74:a6:5f:33:67:72:94:67:
         9e:a1:f9:98:1b:dc:a9:85:7a:60:e5:a3:4a:1a:31:4b:4e:b4:
         92:d6:e6:c2:2c:de:39:74:b6:27:7a:dd:30:f8:bc:8b:eb:fc:
         d4:33:74:bb:ed:ae:96:e9:e8:27:03:e7:a5:34:f6:7b:8b:a9:
         c2:a0:99:3c:9a:c9:28:a0:25:de:52:93:48:59:78:a8:5e:33:
         96:e4:5d:4b:cc:2a:e1:a6:b8:aa:17:78:b3:ad:7a:67:0d:ea:
         31:94:fc:c1:52:d3:3f:e5:b4:37:15:b7:df:c1:57:72:f4:0f:
         ac:d5:cd:b8:02:13:9c:33:6e:4e:34:e7:53:ab:2d:a0:e1:e0:
         0b:5f:eb:81:35:b3:0d:0f:80:cf:13:aa:fc:d3:43:54:b2:8c:
         b3:da:3f:77:d4:66:74:30:8e:0a:11:9c:30:66:f5:39:60:91:
         16:d0:09:e5:c9:be:5a:ae:d0:00:ab:3e:5f:77:6c:d6:b3:82:
         a3:5b:f7:03:82:a9:66:9c:a6:6f:22:51:5a:5f:f9:74:3e:e5:
         23:45:a6:51:bc:de:87:27:0d:e2:a5:34:b3:9a:6a:cb:95:5b:
         90:d7:f1:20
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Ji4pnU+Q6iNPUBIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MjcxOWRmOWQtZTRmMC00NWU0LTgxMjgtM2IyNmI0MjY1Yjc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4H1uAV+K/o/x1ZAXPcg3qGh708LrRSYjvVRu
DpTg71QobwYrn2B+CiBdlT5rSSU0OHjAjjtiNMrha4Nj5Tq8m4vx8+27M8HHVGU4
HJ6TKm9pAeoSdzVZC0s7UWmVjE+GglQ51c3Gc325Ml9J3S0L1MiqrqZFIwxspTAj
hg7U5g6A/vX7hfvlrdFa3lwJFjLlmSS7QnWhxnkbd2Kr9cyeZrLzOA3fQkPCW98W
YiYTyOpyG0yfw66VUENPLA1LXyLg9DlPdVcKIR7s1WPnAXsdO7tRDF+/42YiZBZT
H6FVvxgklhncrX0HZcI+x2ONroo+HWxbH29jrimkk4F1YXXuSwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNi+f4BBUPQInR8FlWjv2vqViaBiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTljZDA5M2EtZDk2OS0z
ZTBkLTlhMjMtYTJlMDE4YzdjMjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgCeA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEruo+iYTcUu2hMrSsOBE+RpJu17ZFklDiLa5Xt0pl8zZ3KUZ56h
+Zgb3KmFemDlo0oaMUtOtJLW5sIs3jl0tid63TD4vIvr/NQzdLvtrpbp6CcD56U0
9nuLqcKgmTyaySigJd5Sk0hZeKheM5bkXUvMKuGmuKoXeLOtemcN6jGU/MFS0z/l
tDcVt9/BV3L0D6zVzbgCE5wzbk4051OrLaDh4Atf64E1sw0PgM8TqvzTQ1SyjLPa
P3fUZnQwjgoRnDBm9TlgkRbQCeXJvlqu0ACrPl93bNazgqNb9wOCqWacpm8iUVpf
+XQ+5SNFplG83ocnDeKlNLOaasuVW5DX8SA=
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:49:44 2026 by rpki-client