Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/046cf5fb-866a-3acd-b80a-0fee0c90c9e2.roa
File:                     046cf5fb-866a-3acd-b80a-0fee0c90c9e2.roa (raw, json)
Hash identifier:          w96S3msFT4y4yW+H7u7zvpmKqO1jxb1ZhQQLzTlPwmQ=
Subject key identifier:   F8:40:BE:53:D0:0D:69:99:26:AD:A1:68:16:98:EE:E4:2C:0E:39:B5
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584CBDB1F134D5D37CE87C586300
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/046cf5fb-866a-3acd-b80a-0fee0c90c9e2.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     30036
IP address blocks:        2604:2e8d:4800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:f1:34:d5:d3:7c:e8:7c:58:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=44e2c035-0821-4f84-9356-09ecb15b41c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f3:cc:93:24:4c:8d:da:8e:5f:c3:c5:40:d5:
                    cd:04:52:c5:3a:50:a2:13:f0:85:0f:93:57:3d:a9:
                    a5:bc:4b:5a:bf:06:ed:c6:83:bd:fb:94:0f:8b:2f:
                    25:e3:25:8a:4e:04:57:4d:5a:39:16:0e:2b:24:bc:
                    63:48:94:e0:40:df:15:e7:de:82:74:0c:2a:2c:a6:
                    27:50:72:16:fd:35:ba:32:b0:13:e3:db:40:2e:f3:
                    b5:e9:66:46:18:f8:4a:78:83:a5:64:06:53:ee:8b:
                    20:49:16:99:79:bb:2f:84:19:a6:52:1d:e2:6b:8c:
                    8b:79:b5:8d:db:6b:e6:be:3f:32:17:e1:2b:9f:d0:
                    23:7d:86:df:d4:8b:2a:90:cf:a9:28:03:32:fb:d3:
                    db:3f:e5:8e:fa:ac:4d:a2:ab:e4:ef:17:8c:79:a2:
                    a2:26:66:84:38:f0:28:c7:2a:46:2f:fd:fa:6f:95:
                    34:d1:51:d8:34:b2:ae:12:07:c9:b3:7e:46:05:95:
                    f6:38:52:55:d4:bf:a1:e3:72:9c:4c:ba:7b:a0:03:
                    13:fd:e7:9d:93:43:32:f5:62:e3:d9:60:0c:30:d2:
                    ca:b5:df:51:63:7b:3e:d9:4b:c7:98:c1:c4:42:d5:
                    d6:d1:f8:cc:1d:a3:9b:1e:e1:4d:73:a8:78:a6:5d:
                    2a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:40:BE:53:D0:0D:69:99:26:AD:A1:68:16:98:EE:E4:2C:0E:39:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/046cf5fb-866a-3acd-b80a-0fee0c90c9e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:4800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:05:e3:78:ed:8c:00:27:d5:ad:b8:f5:4d:f6:f6:5c:5c:7e:
         75:58:97:60:d1:af:72:b7:7e:59:e0:3a:ef:22:3f:3b:9d:7d:
         d9:23:da:6c:dc:cf:c7:c5:d5:30:4d:76:82:4d:69:70:46:dc:
         d4:5b:c0:03:15:08:ca:96:a1:f3:0a:56:2f:26:61:32:20:e3:
         3c:6d:62:38:af:c6:e0:16:a4:8c:66:e4:d6:21:84:d7:92:75:
         64:5d:b4:a9:6b:33:41:53:64:5b:be:79:ce:73:1c:b2:ac:9d:
         6c:8a:26:ca:5b:82:ec:84:75:de:a2:e2:66:55:ef:97:27:8f:
         5c:ed:05:a7:2d:fb:39:a0:42:9f:84:7b:40:8d:74:33:0a:0c:
         a1:62:a2:15:05:22:9f:54:31:34:85:dc:73:11:1f:66:a8:ae:
         99:c2:c7:da:59:4c:b9:ae:db:7f:f2:3f:72:67:40:a4:d8:1c:
         81:22:ed:bf:26:e9:38:4f:89:7c:41:fd:b0:16:31:df:0a:95:
         33:9c:a1:52:8a:4b:17:8d:ad:39:6c:a2:61:a2:3a:1e:5c:31:
         1e:a7:0f:32:f0:ad:9d:f4:3c:68:84:22:6f:fc:6a:07:60:2f:
         ee:7e:13:ef:7d:ba:23:53:29:58:6a:ac:a4:77:4a:89:62:b8:
         25:c7:41:6e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEy9sfE01dN86HxYYwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk
NDRlMmMwMzUtMDgyMS00Zjg0LTkzNTYtMDllY2IxNWI0MWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPPMkyRMjdqOX8PFQNXNBFLFOlCiE/CFD5NX
PamlvEtavwbtxoO9+5QPiy8l4yWKTgRXTVo5Fg4rJLxjSJTgQN8V596CdAwqLKYn
UHIW/TW6MrAT49tALvO16WZGGPhKeIOlZAZT7osgSRaZebsvhBmmUh3ia4yLebWN
22vmvj8yF+Ern9AjfYbf1IsqkM+pKAMy+9PbP+WO+qxNoqvk7xeMeaKiJmaEOPAo
xypGL/36b5U00VHYNLKuEgfJs35GBZX2OFJV1L+h43KcTLp7oAMT/eedk0My9WLj
2WAMMNLKtd9RY3s+2UvHmMHEQtXW0fjMHaObHuFNc6h4pl0qbwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPhAvlPQDWmZJq2haBaY7uQsDjm1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMDQ2Y2Y1ZmItODY2YS0z
YWNkLWI4MGEtMGZlZTBjOTBjOWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujUgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEANwXjeO2MACfVrbj1Tfb2XFx+dViXYNGvcrd+WeA67yI/O5192SPa
bNzPx8XVME12gk1pcEbc1FvAAxUIypah8wpWLyZhMiDjPG1iOK/G4BakjGbk1iGE
15J1ZF20qWszQVNkW755znMcsqydbIomyluC7IR13qLiZlXvlyePXO0Fpy37OaBC
n4R7QI10MwoMoWKiFQUin1QxNIXccxEfZqiumcLH2llMua7bf/I/cmdApNgcgSLt
vybpOE+JfEH9sBYx3wqVM5yhUopLF42tOWyiYaI6HlwxHqcPMvCtnfQ8aIQib/xq
B2Av7n4T7326I1MpWGqspHdKiWK4JcdBbg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:41:23 2026 by rpki-client