Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/94b3319a-658a-3317-bf87-91c877d6dd90.roa
File:                     94b3319a-658a-3317-bf87-91c877d6dd90.roa (raw, json)
Hash identifier:          n0useUMXOvI0E234CoDwHmC31bHRZYqV0J7q8M5xxBk=
Subject key identifier:   E2:83:AD:AB:51:FC:1B:D7:A8:CC:2F:07:AD:43:7C:13:9F:00:4B:AC
Certificate issuer:       /CN=3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02
Certificate serial:       010D0C9F4328584E561A0644F835C2DE0AB11180
Authority key identifier: B4:70:B6:11:7A:C8:5F:02:8A:BE:94:C6:6D:5C:9C:24:BA:C6:FA:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/94b3319a-658a-3317-bf87-91c877d6dd90.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     396350
IP address blocks:        2602:f950::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:1a:06:44:f8:35:c2:de:0a:b1:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=fd28d961-39a3-461a-8bec-62c7f14f19fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:aa:3c:a2:8d:5a:c8:41:f3:cd:65:78:5e:7d:
                    2d:57:e1:ab:8a:51:bc:48:38:26:8e:b2:25:3a:c7:
                    25:61:26:a5:0e:0c:68:51:7b:9d:4a:cd:f4:bd:3f:
                    85:20:82:c2:c5:b0:b0:2e:b2:f8:13:7a:c3:1d:69:
                    6a:00:cf:e8:db:43:73:73:12:63:49:e8:b7:6f:76:
                    07:30:34:db:74:85:b4:09:9d:8f:79:42:3b:db:b6:
                    b1:1a:34:a5:88:e3:86:1c:e2:57:85:85:8d:c5:e1:
                    60:c2:04:e0:df:55:6b:42:4e:b0:4e:fc:e4:9e:47:
                    0b:b2:4c:ee:75:a5:63:fd:59:40:c9:38:c5:7b:0a:
                    de:d2:5a:bf:8d:c2:e5:c6:15:a6:8f:0f:99:dd:86:
                    d5:29:55:f1:db:39:52:03:39:13:29:85:c7:83:d7:
                    48:60:da:77:93:a3:de:6f:2b:d2:30:27:cd:4a:34:
                    ae:2e:e6:ea:51:25:a1:fd:ae:b6:28:50:9c:bd:3c:
                    a0:c2:fb:af:59:a8:85:0e:71:69:9c:86:99:6e:2f:
                    03:db:f8:71:d0:eb:c4:ec:c4:4f:6f:a2:bc:72:69:
                    39:34:4d:c4:35:9e:48:4b:01:06:f0:5a:40:c8:27:
                    0a:03:17:b6:12:d0:55:b1:4e:b4:94:cb:a9:56:2b:
                    78:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:83:AD:AB:51:FC:1B:D7:A8:CC:2F:07:AD:43:7C:13:9F:00:4B:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/94b3319a-658a-3317-bf87-91c877d6dd90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.crl

            X509v3 Authority Key Identifier:
                keyid:B4:70:B6:11:7A:C8:5F:02:8A:BE:94:C6:6D:5C:9C:24:BA:C6:FA:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f950::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:27:eb:da:c2:9a:bc:2f:dd:4f:8c:ae:9e:c9:61:f9:f8:fa:
         32:fd:d5:d9:bc:b4:5b:f1:72:2b:5b:7b:e8:5c:b7:34:78:f4:
         7c:4e:f0:47:8e:54:5b:83:fe:6e:51:76:15:70:92:b3:15:ad:
         71:34:12:a3:43:63:9e:3e:e7:50:81:11:5e:cd:16:27:3d:ee:
         65:77:d4:1c:84:d3:da:04:30:d1:d1:a3:a9:8b:98:10:94:35:
         3b:4f:22:74:ab:71:ad:b4:d6:37:75:ce:71:4f:c2:67:03:26:
         9f:34:fd:1b:48:ee:9a:d5:38:3a:d5:1b:bd:0e:0a:24:06:4d:
         0b:dc:6d:86:9a:ae:3b:95:ab:97:cf:94:c3:91:37:d7:42:5e:
         f6:8d:c0:c7:f0:51:c6:2b:2d:fc:60:fb:7c:8d:c6:72:04:ce:
         bc:f4:a9:d0:7b:86:d0:7f:86:62:cd:79:bb:0d:d9:49:2e:bc:
         67:98:bb:7f:eb:b8:58:b9:a3:ac:aa:a1:0f:38:0a:7e:7e:af:
         c6:96:9d:48:1e:63:b8:e8:26:a8:31:64:79:fa:4a:92:e9:7f:
         b6:21:36:bb:fe:aa:7b:5c:5b:fb:97:79:7c:ff:76:2a:a2:52:
         f1:9f:e6:fc:41:d3:63:d4:5c:39:0c:74:ee:e7:f2:50:46:fd:
         0a:4d:9e:52
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5WGgZE+DXC3gqxEYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2UzYjUyYzctYjdhNS00NWIwLWEyYTQtZjgyNDJiMmI2
ZTAyMB4XDTI2MDYyOTIxMDAxMloXDTI2MDkyNzIxMDAxMlowLzEtMCsGA1UEAxMk
ZmQyOGQ5NjEtMzlhMy00NjFhLThiZWMtNjJjN2YxNGYxOWZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKo8oo1ayEHzzWV4Xn0tV+GrilG8SDgmjrIl
OsclYSalDgxoUXudSs30vT+FIILCxbCwLrL4E3rDHWlqAM/o20NzcxJjSei3b3YH
MDTbdIW0CZ2PeUI727axGjSliOOGHOJXhYWNxeFgwgTg31VrQk6wTvzknkcLskzu
daVj/VlAyTjFewre0lq/jcLlxhWmjw+Z3YbVKVXx2zlSAzkTKYXHg9dIYNp3k6Pe
byvSMCfNSjSuLubqUSWh/a62KFCcvTygwvuvWaiFDnFpnIaZbi8D2/hx0OvE7MRP
b6K8cmk5NE3ENZ5ISwEG8FpAyCcKAxe2EtBVsU60lMupVit4zQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOKDratR/BvXqMwvB61DfBOfAEusMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZTNi
NTJjNy1iN2E1LTQ1YjAtYTJhNC1mODI0MmIyYjZlMDIvOTRiMzMxOWEtNjU4YS0z
MzE3LWJmODctOTFjODc3ZDZkZDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2UzYjUyYzctYjdhNS00NWIwLWEy
YTQtZjgyNDJiMmI2ZTAyLzNlM2I1MmM3LWI3YTUtNDViMC1hMmE0LWY4MjQyYjJi
NmUwMi5jcmwwHwYDVR0jBBgwFoAUtHC2EXrIXwKKvpTGbVycJLrG+u4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zZTNiNTJjNy1iN2E1LTQ1YjAtYTJhNC1mODI0
MmIyYjZlMDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL5UAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAIyfr2sKavC/dT4yunslh+fj6Mv3V2by0W/FyK1t76Fy3NHj0fE7w
R45UW4P+blF2FXCSsxWtcTQSo0Njnj7nUIERXs0WJz3uZXfUHITT2gQw0dGjqYuY
EJQ1O08idKtxrbTWN3XOcU/CZwMmnzT9G0jumtU4OtUbvQ4KJAZNC9xthpquO5Wr
l8+Uw5E310Je9o3Ax/BRxist/GD7fI3GcgTOvPSp0HuG0H+GYs15uw3ZSS68Z5i7
f+u4WLmjrKqhDzgKfn6vxpadSB5juOgmqDFkefpKkul/tiE2u/6qe1xb+5d5fP92
KqJS8Z/m/EHTY9RcOQx07ufyUEb9Ck2eUg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:44:02 2026 by rpki-client