Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb76e5e5-90cd-3772-b590-6b1405a26307.roa
File:                     cb76e5e5-90cd-3772-b590-6b1405a26307.roa (raw, json)
Hash identifier:          5iusGCrc5r4oyqR+HYoHEe+KFoMiGlpTy1irgs93FPY=
Subject key identifier:   D9:D6:02:0C:F4:61:8F:CF:B2:4C:B3:25:79:EF:84:B8:B5:5D:04:DF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F498B1F72DB671B1C2E8C7560
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb76e5e5-90cd-3772-b590-6b1405a26307.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:7f80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:1f:72:db:67:1b:1c:2e:8c:75:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7209da52-e7dc-4ea4-b0a1-500a6c22f472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:bc:38:4b:b1:39:c9:c4:0a:e8:4c:b3:9d:a0:
                    f7:a8:17:22:56:b5:13:75:37:2e:02:d7:26:8a:86:
                    35:e7:93:19:38:d5:8b:d9:7b:60:a7:a9:12:7c:78:
                    31:e7:c7:c9:48:e7:ed:f8:5b:4b:d4:5f:f2:af:d7:
                    4c:e8:fd:06:b6:1a:a4:fd:c2:4b:ab:31:f9:a1:e9:
                    a8:3c:4e:eb:57:e7:e4:ad:64:f5:4c:43:e8:27:73:
                    96:b6:65:84:70:00:55:9e:37:21:06:c8:ee:d7:ec:
                    86:2b:6c:1f:1d:3c:98:7f:77:13:9a:10:f5:a6:4e:
                    cb:ec:2d:25:22:cc:42:41:6c:f0:75:07:0f:0a:ff:
                    40:88:c1:a9:ac:ce:08:82:2f:fd:56:17:55:fe:e4:
                    fe:57:ce:b4:55:f1:17:aa:1f:2b:1d:95:f3:4b:97:
                    2c:46:bf:5f:8f:8f:26:e7:b7:47:ad:be:7e:4f:18:
                    f9:5b:6c:a0:f0:0f:49:63:c9:31:b8:23:11:60:49:
                    c3:a0:d1:5b:e2:8a:5a:77:c3:c6:5e:b1:60:9c:c2:
                    81:5a:52:04:61:fa:e5:d3:4e:e1:97:5c:a7:d9:5c:
                    7e:42:2e:2a:3b:2b:37:88:ab:c0:25:df:a2:e4:66:
                    aa:28:a8:84:5c:7e:5b:f3:93:6b:94:8a:53:e5:2c:
                    cf:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D6:02:0C:F4:61:8F:CF:B2:4C:B3:25:79:EF:84:B8:B5:5D:04:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb76e5e5-90cd-3772-b590-6b1405a26307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7f80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:4e:94:05:4b:37:0d:85:10:cd:fd:50:c9:1d:af:7d:8c:4e:
         50:0b:1e:86:e9:22:24:da:4d:a7:b0:3f:fe:ac:89:23:bf:06:
         24:6c:09:4f:88:88:3c:60:ab:48:36:1c:01:fd:b7:91:c4:8f:
         e9:40:32:68:ef:24:01:96:97:a3:42:cf:e9:a8:fe:08:59:f7:
         a9:9e:0a:fb:5f:74:1e:4e:02:78:9e:cf:cb:b3:78:06:73:aa:
         3d:3e:ca:65:f3:4c:2f:97:b5:a5:0b:e3:c2:30:02:2e:ba:12:
         8f:99:78:89:ff:29:a1:6b:32:2f:66:5d:06:e7:a8:38:06:83:
         9f:62:06:f2:59:0c:6a:ce:7e:94:1a:b3:c9:36:f5:e2:2d:0e:
         6f:5f:ec:cf:e6:b0:de:c1:f3:9e:c3:b1:19:53:4d:8a:98:93:
         56:4a:e0:44:32:a9:3d:16:e9:27:28:73:c5:f9:ee:43:3b:a1:
         52:58:0e:4b:a9:85:b1:32:d8:f2:aa:03:44:43:2e:1d:e4:46:
         69:16:8a:90:50:cb:45:91:98:2d:9b:48:89:5f:c9:de:74:09:
         61:f1:d9:84:9a:4a:f5:1d:9d:fe:58:54:dd:63:75:13:2a:3d:
         01:ae:a8:58:d5:52:a3:0e:5f:54:a9:d7:c4:6d:b5:6b:97:5d:
         5b:64:f4:44
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jix9y22cbHC6MdWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NzIwOWRhNTItZTdkYy00ZWE0LWIwYTEtNTAwYTZjMjJmNDcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbw4S7E5ycQK6EyznaD3qBciVrUTdTcuAtcm
ioY155MZONWL2Xtgp6kSfHgx58fJSOft+FtL1F/yr9dM6P0Gthqk/cJLqzH5oemo
PE7rV+fkrWT1TEPoJ3OWtmWEcABVnjchBsju1+yGK2wfHTyYf3cTmhD1pk7L7C0l
IsxCQWzwdQcPCv9AiMGprM4Igi/9VhdV/uT+V860VfEXqh8rHZXzS5csRr9fj48m
57dHrb5+Txj5W2yg8A9JY8kxuCMRYEnDoNFb4opad8PGXrFgnMKBWlIEYfrl007h
l1yn2Vx+Qi4qOys3iKvAJd+i5GaqKKiEXH5b85NrlIpT5SzP5QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNnWAgz0YY/PskyzJXnvhLi1XQTfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2I3NmU1ZTUtOTBjZC0z
NzcyLWI1OTAtNmIxNDA1YTI2MzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgH+A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHNOlAVLNw2FEM39UMkdr32MTlALHobpIiTaTaewP/6siSO/BiRs
CU+IiDxgq0g2HAH9t5HEj+lAMmjvJAGWl6NCz+mo/ghZ96meCvtfdB5OAniez8uz
eAZzqj0+ymXzTC+XtaUL48IwAi66Eo+ZeIn/KaFrMi9mXQbnqDgGg59iBvJZDGrO
fpQas8k29eItDm9f7M/msN7B857DsRlTTYqYk1ZK4EQyqT0W6Scoc8X57kM7oVJY
DkuphbEy2PKqA0RDLh3kRmkWipBQy0WRmC2bSIlfyd50CWHx2YSaSvUdnf5YVN1j
dRMqPQGuqFjVUqMOX1Sp18RttWuXXVtk9EQ=
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:57:26 2026 by rpki-client