Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd20f333-1672-36f7-a4ff-fdb050bc77cd.roa
File:                     cd20f333-1672-36f7-a4ff-fdb050bc77cd.roa (raw, json)
Hash identifier:          NJvbkJthGI41x0YfYurp7GlaWOjHf2bnUYZt0xPEBBY=
Subject key identifier:   CE:E2:1D:DE:CD:86:60:57:7D:AD:65:77:F1:DF:BC:24:43:E7:BB:A4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D3F64D93654E538D9C0FEBD20
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd20f333-1672-36f7-a4ff-fdb050bc77cd.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d81:2800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:d9:36:54:e5:38:d9:c0:fe:bd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=72a8db58-5e5c-42a1-811b-ba4ca03921bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cf:42:b8:5a:a0:c2:ce:49:39:e6:89:0e:e7:
                    c3:9d:08:30:9d:45:c2:10:dd:d8:bf:99:ba:24:7d:
                    8a:33:79:d9:61:e8:61:c3:b5:cc:be:5f:e4:ac:39:
                    ff:ec:77:9e:a8:7e:88:0d:c1:64:76:ff:07:31:b7:
                    17:cb:76:c3:1d:ca:02:0a:f7:f1:19:d4:35:53:81:
                    78:9c:c1:3d:29:bb:35:d6:7e:3e:3c:d6:d1:15:53:
                    b5:df:62:ec:69:5f:9b:7a:ce:b1:87:9e:85:fb:86:
                    32:a4:b4:78:ec:05:a6:a1:8a:ae:05:a0:f8:7d:dc:
                    e9:14:10:d8:2c:3d:55:d2:46:51:be:bf:15:e3:9c:
                    a8:72:c6:06:3d:ae:fa:e9:bf:27:4f:3b:cb:cf:67:
                    4d:b2:54:0a:9e:c7:01:66:b1:74:b0:47:2c:d0:62:
                    c6:ef:9c:a1:70:77:62:1e:e2:2c:46:03:da:6c:a7:
                    28:b3:d5:eb:70:88:bd:a3:b4:d5:ad:c0:84:4e:f6:
                    18:38:b9:6f:50:6c:c5:9c:79:f2:47:a6:23:99:39:
                    0e:20:55:ab:36:3e:6d:bd:de:b1:da:26:6a:e1:51:
                    08:21:36:37:7e:de:61:6b:dc:94:98:a2:a5:25:78:
                    c0:fc:be:07:dd:0a:16:18:f3:2c:a3:d1:dd:3d:b9:
                    3b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E2:1D:DE:CD:86:60:57:7D:AD:65:77:F1:DF:BC:24:43:E7:BB:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd20f333-1672-36f7-a4ff-fdb050bc77cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:2800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:b5:1f:38:6a:6e:68:b9:8e:e1:11:12:89:83:2b:43:47:66:
         7b:10:ca:82:10:c2:14:77:10:56:cc:16:e2:fb:49:42:d9:7c:
         ff:e9:7f:b3:f8:ba:02:8e:6e:d9:8a:ac:f8:24:36:c8:0f:76:
         ef:95:97:6b:ba:35:68:8b:d4:9e:ec:06:ae:b3:46:6b:45:a7:
         14:0c:ab:1e:bf:fb:bd:cd:f0:6d:d5:02:f5:f1:7f:86:b5:91:
         8b:ec:3a:bc:b2:38:84:05:84:ff:c6:ce:3e:71:ca:a0:36:0f:
         3d:65:59:dd:ed:d2:2a:50:08:98:65:92:e3:6e:e7:63:f5:78:
         c7:6a:13:e8:08:ee:da:64:75:66:7f:ba:b0:e1:96:04:04:78:
         4a:21:7a:8a:45:40:c5:0a:9f:76:15:f5:16:15:96:42:a7:4c:
         f2:0a:f7:9f:23:5c:06:1e:87:a9:e0:18:d2:8e:a1:c3:0c:e5:
         c8:10:bd:30:8e:77:a5:1e:10:a2:bb:36:d8:4e:db:bb:fc:8f:
         a3:41:b2:06:19:b7:4f:2d:1b:aa:f6:ea:8c:44:6a:97:51:41:
         01:74:74:46:d5:e2:db:85:da:8e:04:a1:9b:79:7c:37:25:be:
         1d:83:83:a0:de:3f:f8:28:67:26:a3:a7:82:cd:7c:05:da:d2:
         59:e8:d6:0f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0/ZNk2VOU42cD+vSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk
NzJhOGRiNTgtNWU1Yy00MmExLTgxMWItYmE0Y2EwMzkyMWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM9CuFqgws5JOeaJDufDnQgwnUXCEN3Yv5m6
JH2KM3nZYehhw7XMvl/krDn/7HeeqH6IDcFkdv8HMbcXy3bDHcoCCvfxGdQ1U4F4
nME9Kbs11n4+PNbRFVO132LsaV+bes6xh56F+4YypLR47AWmoYquBaD4fdzpFBDY
LD1V0kZRvr8V45yocsYGPa766b8nTzvLz2dNslQKnscBZrF0sEcs0GLG75yhcHdi
HuIsRgPabKcos9XrcIi9o7TVrcCETvYYOLlvUGzFnHnyR6YjmTkOIFWrNj5tvd6x
2iZq4VEIITY3ft5ha9yUmKKlJXjA/L4H3QoWGPMso9HdPbk7EwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFM7iHd7NhmBXfa1ld/HfvCRD57ukMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2QyMGYzMzMtMTY3Mi0z
NmY3LWE0ZmYtZmRiMDUwYmM3N2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgSgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAZbUfOGpuaLmO4RESiYMrQ0dmexDKghDCFHcQVswW4vtJQtl8/+l/
s/i6Ao5u2Yqs+CQ2yA9275WXa7o1aIvUnuwGrrNGa0WnFAyrHr/7vc3wbdUC9fF/
hrWRi+w6vLI4hAWE/8bOPnHKoDYPPWVZ3e3SKlAImGWS427nY/V4x2oT6Aju2mR1
Zn+6sOGWBAR4SiF6ikVAxQqfdhX1FhWWQqdM8gr3nyNcBh6HqeAY0o6hwwzlyBC9
MI53pR4Qors22E7bu/yPo0GyBhm3Ty0bqvbqjERql1FBAXR0RtXi24XajgShm3l8
NyW+HYODoN4/+ChnJqOngs18BdrSWejWDw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:03:07 2026 by rpki-client