Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/06d47dc6-7f64-3ada-a205-116713668133.roa
File:                     06d47dc6-7f64-3ada-a205-116713668133.roa (raw, json)
Hash identifier:          9r/dBhUyJ06GeeFQYjyQ/h+EoaeaZJOBHwJN9ckKddQ=
Subject key identifier:   C1:74:F4:65:2D:E5:94:6C:1A:68:17:EC:A7:B0:7C:53:3A:63:4B:99
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F497419D19EBBCD8E423BE520
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/06d47dc6-7f64-3ada-a205-116713668133.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8b:8c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:19:d1:9e:bb:cd:8e:42:3b:e5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a6a0f806-0c54-4b79-99ef-e4005c37a23e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3b:63:26:96:dd:1b:29:43:b2:5e:ca:41:bb:
                    bd:57:3f:b0:7d:70:0f:4d:a0:af:b3:d7:68:0b:52:
                    7c:2b:c1:ee:43:3c:02:61:79:1d:93:c9:05:ab:0c:
                    b8:48:34:6b:1e:5e:53:13:c2:49:36:82:2f:98:66:
                    fc:81:0b:55:1f:12:11:2f:86:69:d7:7b:28:12:f3:
                    15:92:17:5a:6d:78:3f:7f:2f:70:ed:19:35:97:fe:
                    b8:b9:88:26:64:18:07:60:bb:7d:d3:0c:b9:8b:bd:
                    e6:30:12:de:94:47:b9:23:94:32:2a:bd:44:d6:70:
                    b1:6d:03:9f:af:09:34:0d:d5:55:f7:7c:43:54:10:
                    bb:71:28:46:0e:ed:93:a1:63:bd:ce:fd:7e:47:79:
                    d0:87:e6:ba:8b:64:e9:b2:1e:a5:d0:c9:17:ec:98:
                    ad:4b:a8:94:6a:ad:69:69:d1:f0:da:20:41:1b:f8:
                    64:2d:49:d5:8d:73:58:f6:53:95:3a:b3:a6:00:73:
                    62:d5:87:bd:dc:c4:be:6f:1c:67:25:58:83:6e:d8:
                    c8:ee:11:84:3d:e7:2c:c6:fa:9e:3e:85:10:ac:99:
                    4d:4b:c6:5d:39:fe:2d:59:c1:ba:49:8a:86:b9:b0:
                    cf:c5:4e:f2:c8:bd:b6:d5:d0:48:12:bb:be:84:19:
                    24:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:74:F4:65:2D:E5:94:6C:1A:68:17:EC:A7:B0:7C:53:3A:63:4B:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/06d47dc6-7f64-3ada-a205-116713668133.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:8c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:22:08:7d:31:40:e1:0f:d5:53:86:68:45:f5:5e:10:9a:4c:
         10:b8:d9:d1:4a:b7:ea:87:09:e3:25:e0:e7:d2:02:55:35:66:
         41:da:17:de:11:76:a8:c9:a5:2f:7c:9f:fd:14:7f:00:dd:de:
         51:58:dd:c0:23:85:35:c6:b4:73:bb:ce:1d:d2:7d:08:5f:fe:
         4f:d4:10:ba:50:7e:13:96:35:28:7e:8f:6d:3a:db:9c:3c:5e:
         24:45:8e:fd:26:47:61:9a:3e:64:74:a5:6a:ed:a7:d4:8e:2c:
         eb:66:80:ce:32:77:fb:30:25:cb:f2:23:37:f0:64:b2:75:d3:
         41:60:1a:ae:11:53:53:90:bc:43:29:20:69:82:0b:c9:4a:b4:
         5a:18:f0:0e:45:e2:70:12:87:14:ed:f6:79:6a:39:e7:a3:be:
         7c:d3:aa:74:86:bb:8a:a5:14:08:72:51:db:3c:87:bf:9f:b3:
         30:b1:b5:8f:78:d2:27:83:14:0b:83:6d:fb:ff:68:5c:ba:12:
         42:11:26:eb:7f:36:0d:d2:21:40:73:58:ea:50:12:70:0c:d1:
         a3:b5:08:5d:c8:9c:75:a3:cf:1e:08:36:4c:ae:36:86:a2:9b:
         91:d6:6d:46:61:6d:db:c6:33:2f:3a:f9:5a:10:d1:ad:29:75:
         08:d3:91:5b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JdBnRnrvNjkI75SAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YTZhMGY4MDYtMGM1NC00Yjc5LTk5ZWYtZTQwMDVjMzdhMjNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojtjJpbdGylDsl7KQbu9Vz+wfXAPTaCvs9do
C1J8K8HuQzwCYXkdk8kFqwy4SDRrHl5TE8JJNoIvmGb8gQtVHxIRL4Zp13soEvMV
khdabXg/fy9w7Rk1l/64uYgmZBgHYLt90wy5i73mMBLelEe5I5QyKr1E1nCxbQOf
rwk0DdVV93xDVBC7cShGDu2ToWO9zv1+R3nQh+a6i2Tpsh6l0MkX7JitS6iUaq1p
adHw2iBBG/hkLUnVjXNY9lOVOrOmAHNi1Ye93MS+bxxnJViDbtjI7hGEPecsxvqe
PoUQrJlNS8ZdOf4tWcG6SYqGubDPxU7yyL221dBIEru+hBkkDQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMF09GUt5ZRsGmgX7KewfFM6Y0uZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMDZkNDdkYzYtN2Y2NC0z
YWRhLWEyMDUtMTE2NzEzNjY4MTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui4ww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAfiIIfTFA4Q/VU4ZoRfVeEJpMELjZ0Uq36ocJ4yXg59ICVTVmQdoX
3hF2qMmlL3yf/RR/AN3eUVjdwCOFNca0c7vOHdJ9CF/+T9QQulB+E5Y1KH6PbTrb
nDxeJEWO/SZHYZo+ZHSlau2n1I4s62aAzjJ3+zAly/IjN/BksnXTQWAarhFTU5C8
QykgaYILyUq0WhjwDkXicBKHFO32eWo556O+fNOqdIa7iqUUCHJR2zyHv5+zMLG1
j3jSJ4MUC4Nt+/9oXLoSQhEm6382DdIhQHNY6lAScAzRo7UIXcicdaPPHgg2TK42
hqKbkdZtRmFt28YzLzr5WhDRrSl1CNORWw==
-----END CERTIFICATE-----
Generated at Sat Oct 10 02:12:03 2026 by rpki-client