Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e408f9b1-0149-30b5-b4e7-b26d31d24fab.roa
File:                     e408f9b1-0149-30b5-b4e7-b26d31d24fab.roa (raw, json)
Hash identifier:          7nkMguquA7pKNrOgmamdUwnMkY5zHymOkaHRsMiPKo0=
Subject key identifier:   91:9E:71:31:34:D3:B1:AE:DD:FC:56:B7:6F:4D:B0:D3:9C:2B:4C:AA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E48247DF1C0CF8BA273CA0C00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e408f9b1-0149-30b5-b4e7-b26d31d24fab.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     30036
IP address blocks:        2604:2d81:2980::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:7d:f1:c0:cf:8b:a2:73:ca:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=e66dfc52-c840-4b45-b73e-57a1c00b7ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b1:71:20:c9:b2:15:f6:bc:05:78:89:48:59:
                    3e:6a:a3:66:13:12:53:72:50:0f:37:87:39:e0:48:
                    14:49:cd:58:36:43:de:60:64:4f:b0:5e:e2:68:85:
                    55:57:b6:95:48:d0:d8:58:f7:7f:84:65:2e:79:3c:
                    77:9f:71:df:a5:c0:86:a5:45:09:71:d7:23:35:84:
                    bf:92:7d:c5:61:eb:e1:93:e0:ab:55:a4:44:75:26:
                    10:4d:bf:81:95:4e:d5:d2:b4:2a:d8:4b:4e:31:7a:
                    39:da:f2:50:c4:17:26:c8:79:ef:3d:dd:5a:e5:9a:
                    f0:ba:91:2d:ef:18:b4:49:f6:72:32:20:f8:bd:12:
                    3c:18:10:38:25:e7:28:f8:2a:cd:a2:7d:fe:54:f9:
                    0a:11:4d:9d:e2:2c:ad:f4:09:4f:db:64:04:00:87:
                    44:15:ed:a1:4d:94:97:9c:d9:4c:ae:27:58:dd:0a:
                    d5:03:cb:33:27:62:09:b7:e3:f2:fb:63:a0:ea:46:
                    8d:9b:97:11:3f:54:35:88:e1:47:f2:21:70:7b:50:
                    84:e6:bf:92:2f:31:c0:4d:ba:15:1a:fc:e9:c9:6e:
                    c0:71:87:27:56:95:2c:af:72:37:8c:b8:4b:49:e6:
                    a6:95:e9:7e:12:c7:7b:1f:b1:7a:4b:e1:6b:58:9f:
                    ec:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9E:71:31:34:D3:B1:AE:DD:FC:56:B7:6F:4D:B0:D3:9C:2B:4C:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e408f9b1-0149-30b5-b4e7-b26d31d24fab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:2980::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ae:da:94:73:b3:36:72:8b:54:1f:51:43:44:ac:f4:b4:c1:
         4e:f8:71:f5:39:2c:de:79:df:81:06:60:80:af:18:b9:b7:55:
         d5:9e:ad:52:93:28:f5:89:fc:fe:67:cb:56:aa:ea:7d:33:19:
         f7:8b:a2:cd:52:ff:84:cc:0d:2d:9a:b5:2c:3c:75:4a:71:48:
         60:4f:5a:df:f7:05:75:e0:b1:2a:a2:d5:bd:8b:71:af:17:70:
         34:ef:ee:35:d4:be:cb:e2:f7:b7:69:80:85:44:17:2d:88:2d:
         a1:6c:c7:7e:3e:b1:42:95:a6:d8:dd:10:35:8f:3b:b1:69:42:
         fe:0a:0d:18:59:a9:a9:e7:ed:c0:aa:9a:21:60:fb:91:a1:20:
         8a:d0:c3:f0:eb:48:41:ea:12:10:25:43:27:d3:06:fa:83:2c:
         67:19:d2:52:37:44:47:a1:98:2f:05:92:25:8c:a9:22:69:c8:
         3d:ce:a7:30:e4:8f:66:a4:75:72:2a:53:83:d1:d0:ef:dc:4e:
         d7:c5:fd:8f:19:68:75:37:ba:b7:89:9e:74:9d:4d:a6:4f:97:
         91:a3:d4:de:96:a5:8f:cf:1b:20:11:2b:59:53:19:38:c6:2f:
         7a:69:d6:c0:74:8c:ba:04:85:be:04:f1:1f:75:87:00:bc:34:
         7e:db:ee:cf
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5IJH3xwM+LonPKDAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk
ZTY2ZGZjNTItYzg0MC00YjQ1LWI3M2UtNTdhMWMwMGI3ZmZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibFxIMmyFfa8BXiJSFk+aqNmExJTclAPN4c5
4EgUSc1YNkPeYGRPsF7iaIVVV7aVSNDYWPd/hGUueTx3n3HfpcCGpUUJcdcjNYS/
kn3FYevhk+CrVaREdSYQTb+BlU7V0rQq2EtOMXo52vJQxBcmyHnvPd1a5ZrwupEt
7xi0SfZyMiD4vRI8GBA4Jeco+CrNon3+VPkKEU2d4iyt9AlP22QEAIdEFe2hTZSX
nNlMridY3QrVA8szJ2IJt+Py+2Og6kaNm5cRP1Q1iOFH8iFwe1CE5r+SLzHATboV
GvzpyW7AcYcnVpUsr3I3jLhLSeamlel+Esd7H7F6S+FrWJ/sHQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJGecTE007Gu3fxWt29NsNOcK0yqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTQwOGY5YjEtMDE0OS0z
MGI1LWI0ZTctYjI2ZDMxZDI0ZmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgSmA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABuu2pRzszZyi1QfUUNErPS0wU74cfU5LN5534EGYICvGLm3VdWe
rVKTKPWJ/P5ny1aq6n0zGfeLos1S/4TMDS2atSw8dUpxSGBPWt/3BXXgsSqi1b2L
ca8XcDTv7jXUvsvi97dpgIVEFy2ILaFsx34+sUKVptjdEDWPO7FpQv4KDRhZqann
7cCqmiFg+5GhIIrQw/DrSEHqEhAlQyfTBvqDLGcZ0lI3REehmC8FkiWMqSJpyD3O
pzDkj2akdXIqU4PR0O/cTtfF/Y8ZaHU3ureJnnSdTaZPl5Gj1N6WpY/PGyARK1lT
GTjGL3pp1sB0jLoEhb4E8R91hwC8NH7b7s8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:38:01 2026 by rpki-client