Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b1d52741-a2d7-326c-99b7-b99135a190cc.roa
File:                     b1d52741-a2d7-326c-99b7-b99135a190cc.roa (raw, json)
Hash identifier:          DGAQOucuyim1NR0H6eaK5rcxusGBWADUXPNT6D/Gu7U=
Subject key identifier:   FC:81:81:21:A8:99:8A:3F:05:4F:F7:A4:22:99:0B:26:E6:03:EB:AA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E90BA42C06CC2BE52BD841140
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b1d52741-a2d7-326c-99b7-b99135a190cc.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     30036
IP address blocks:        2604:2d80:f380::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:42:c0:6c:c2:be:52:bd:84:11:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=d4f20930-0991-45ab-b4a6-485e3b4c3792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:91:93:4b:e8:2f:0c:b1:8f:95:cc:35:7d:1c:
                    dc:fb:32:74:c5:aa:7f:ac:d8:d6:49:50:c4:f1:f8:
                    28:16:ce:d1:05:8e:85:de:d2:01:ce:2b:5d:46:46:
                    7c:bb:ff:6b:33:95:df:82:64:ef:9f:bd:5f:13:38:
                    d3:03:f3:d3:2f:d0:0a:7b:5e:4c:78:0e:61:3e:70:
                    bd:80:6a:ec:5d:b9:a1:23:54:b3:2c:6d:98:ea:68:
                    2d:9b:4a:9f:57:64:fc:8a:db:0a:ab:79:8b:4a:01:
                    1f:74:93:dc:d1:bd:31:7d:0d:53:9e:4d:59:1c:e8:
                    4b:86:6f:5d:0c:a2:15:10:bc:1f:0b:de:6f:8e:90:
                    df:c5:65:9e:2b:17:b7:f7:a0:e2:e7:a5:b3:ba:05:
                    3d:39:c4:67:56:6e:6d:aa:b2:10:15:20:fd:b3:61:
                    c0:9a:c0:ed:a2:65:26:05:78:83:35:c2:78:3c:8e:
                    14:24:f0:d3:8c:19:d7:67:d6:da:77:89:9f:16:95:
                    83:43:92:2c:3a:96:01:91:54:3b:d2:2b:3b:36:9d:
                    cc:4d:1c:55:75:63:fc:6a:ce:e0:52:13:4e:d9:89:
                    9d:0b:c1:59:c6:56:94:6d:f6:0f:12:2f:8f:d0:6d:
                    fc:81:22:bb:0f:22:5a:4d:46:c8:68:22:07:d0:f2:
                    98:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:81:81:21:A8:99:8A:3F:05:4F:F7:A4:22:99:0B:26:E6:03:EB:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b1d52741-a2d7-326c-99b7-b99135a190cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:f380::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:31:73:72:ea:9a:2d:71:d3:ca:14:2a:84:b7:0b:ca:c8:e4:
         27:86:44:b8:88:98:25:10:19:21:82:5b:e1:25:26:99:8a:32:
         12:82:73:8e:78:07:87:2e:61:a5:eb:38:46:28:c5:4c:c6:55:
         a2:d6:cc:3a:dc:e8:37:a6:54:b6:2d:17:b2:26:3c:12:da:e4:
         bc:8d:49:ab:1d:e8:38:70:f1:bf:c0:98:24:8b:e3:b8:2b:c6:
         f2:60:b5:96:aa:1e:a9:f9:bd:a9:b7:00:b9:43:48:41:fa:28:
         74:db:8e:0a:bf:53:3c:0d:87:f5:51:74:ea:39:f3:1f:a6:20:
         9f:9f:74:93:d7:b5:79:83:e3:57:3e:55:f1:bd:7b:85:3a:96:
         6a:ae:d3:56:a7:1d:71:d1:e1:15:07:87:d5:f6:e6:1b:30:7e:
         d5:1a:fe:a7:05:51:5f:5f:cc:df:ed:cd:13:e4:4f:6d:67:99:
         9f:82:35:11:30:59:f8:7a:bd:12:5c:b7:40:fb:bc:de:24:38:
         88:84:d4:89:c2:e2:9f:84:0d:74:83:63:b2:4d:2d:66:1c:2a:
         33:8f:52:20:78:d7:72:de:7c:a1:cf:0f:c4:21:36:da:83:f8:
         99:6a:05:0c:06:17:20:e6:d7:fe:9c:6e:ab:3a:dd:9e:79:65:
         69:86:d6:cd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6QukLAbMK+Ur2EEUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcyMDIxMDAxMVoXDTI2MTAxODIxMDAxMVowLzEtMCsGA1UEAxMk
ZDRmMjA5MzAtMDk5MS00NWFiLWI0YTYtNDg1ZTNiNGMzNzkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZGTS+gvDLGPlcw1fRzc+zJ0xap/rNjWSVDE
8fgoFs7RBY6F3tIBzitdRkZ8u/9rM5XfgmTvn71fEzjTA/PTL9AKe15MeA5hPnC9
gGrsXbmhI1SzLG2Y6mgtm0qfV2T8itsKq3mLSgEfdJPc0b0xfQ1Tnk1ZHOhLhm9d
DKIVELwfC95vjpDfxWWeKxe396Di56WzugU9OcRnVm5tqrIQFSD9s2HAmsDtomUm
BXiDNcJ4PI4UJPDTjBnXZ9bad4mfFpWDQ5IsOpYBkVQ70is7Np3MTRxVdWP8as7g
UhNO2YmdC8FZxlaUbfYPEi+P0G38gSK7DyJaTUbIaCIH0PKY5QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPyBgSGomYo/BU/3pCKZCybmA+uqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjFkNTI3NDEtYTJkNy0z
MjZjLTk5YjctYjk5MTM1YTE5MGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgPOA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADsxc3Lqmi1x08oUKoS3C8rI5CeGRLiImCUQGSGCW+ElJpmKMhKC
c454B4cuYaXrOEYoxUzGVaLWzDrc6DemVLYtF7ImPBLa5LyNSasd6Dhw8b/AmCSL
47grxvJgtZaqHqn5vam3ALlDSEH6KHTbjgq/UzwNh/VRdOo58x+mIJ+fdJPXtXmD
41c+VfG9e4U6lmqu01anHXHR4RUHh9X25hswftUa/qcFUV9fzN/tzRPkT21nmZ+C
NREwWfh6vRJct0D7vN4kOIiE1InC4p+EDXSDY7JNLWYcKjOPUiB413LefKHPD8Qh
NtqD+JlqBQwGFyDm1/6cbqs63Z55ZWmG1s0=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:02:53 2026 by rpki-client