Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0d3d0e1b-430c-36bf-b244-febe71580340.roa
File:                     0d3d0e1b-430c-36bf-b244-febe71580340.roa (raw, json)
Hash identifier:          ZpIoNFIpAbQAQtcEfDYF+3CMWcvbYV7fNCe7c86EMLo=
Subject key identifier:   CD:C3:A8:0D:1C:76:59:25:7D:6F:4B:BC:55:90:9B:13:10:1D:F1:24
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E0005CF824F094639604ECF80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0d3d0e1b-430c-36bf-b244-febe71580340.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        2604:2e8f:8400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:cf:82:4f:09:46:39:60:4e:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=f7edd042-f173-4977-9a59-d3dcca6cd6f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ce:cf:78:62:3c:5c:8f:33:d6:69:3b:13:08:
                    ed:fe:b0:a9:27:f2:d6:55:6e:5b:e3:df:fc:12:08:
                    a8:fc:fb:bb:b1:0b:70:eb:77:d9:0c:63:05:bf:3f:
                    3b:92:39:de:0e:c5:99:86:ff:7d:1a:65:d6:76:4e:
                    4f:70:63:e6:f7:6a:b3:c7:fc:97:9f:ad:ac:f2:ae:
                    06:9b:d9:1d:64:c5:79:1d:b0:66:b3:b8:b0:91:ca:
                    2a:95:a0:eb:1b:ce:e2:0f:ca:e7:a2:9d:9b:d6:05:
                    15:03:7f:e9:c6:0f:47:1c:04:af:14:e9:3f:a1:b7:
                    20:da:c0:49:c0:3c:ad:9e:6f:0b:5b:0f:4b:54:b0:
                    80:6d:34:12:aa:1d:3d:95:68:ff:2f:59:77:84:70:
                    d9:66:4b:90:ee:de:f8:4c:a4:a9:b8:36:bb:14:ff:
                    b1:1e:3f:31:c8:9a:59:ef:9a:d5:c6:ee:16:fd:8b:
                    8f:b8:5e:77:72:65:94:9e:55:84:a9:48:6f:9b:5e:
                    82:e9:5b:ee:e6:ea:94:d3:67:7b:36:b6:e1:81:87:
                    52:6b:42:b6:21:c1:82:e6:5b:ac:50:2d:18:8c:22:
                    c3:23:81:17:c4:50:ed:f9:44:d7:e6:6d:ee:45:1a:
                    73:24:57:9d:7b:a2:18:e6:ba:1b:8c:1e:95:1f:98:
                    a6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C3:A8:0D:1C:76:59:25:7D:6F:4B:BC:55:90:9B:13:10:1D:F1:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0d3d0e1b-430c-36bf-b244-febe71580340.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:8400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:ee:9a:f1:8f:e9:65:b0:30:ae:87:b3:73:20:8a:0d:b5:93:
         70:34:82:d9:7d:3d:f4:b1:38:26:96:a8:bd:e2:9f:f0:d7:69:
         5e:ef:95:3e:b5:9f:84:96:f9:79:b4:47:24:88:78:d7:25:a1:
         26:33:8c:2d:50:a5:01:ba:6d:0c:19:ee:ec:86:9a:f3:81:0b:
         fa:a7:e6:33:35:30:23:86:db:d4:c2:dd:e4:95:4c:fd:b2:7d:
         c7:56:37:c9:aa:a8:df:bb:bd:73:07:18:eb:87:75:62:8b:62:
         b8:c5:9c:ab:a9:07:20:ce:a5:66:3c:a2:5e:77:79:f2:af:92:
         4f:f9:59:9b:01:d7:93:0b:d7:85:99:b7:48:6b:08:71:72:d8:
         c4:83:b8:63:d0:c9:10:37:8f:f9:b5:b6:b9:03:0a:5c:17:38:
         be:32:3c:05:76:24:ab:ba:f7:fe:aa:82:61:08:5b:1d:07:d6:
         ad:f9:a5:09:43:d2:e9:39:27:7e:49:e6:41:13:0f:db:2a:e7:
         c5:3c:aa:61:bf:8d:9d:d8:c3:a6:05:63:6e:28:c8:85:b8:8f:
         af:43:d5:2b:57:84:f3:98:65:b3:8c:04:f9:bf:32:7e:fb:7c:
         e1:53:8e:8a:7f:2b:9b:6c:79:f6:b0:86:76:5a:47:af:03:43:
         ba:a1:7d:68
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE4ABc+CTwlGOWBOz4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
ZjdlZGQwNDItZjE3My00OTc3LTlhNTktZDNkY2NhNmNkNmY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7c7PeGI8XI8z1mk7Ewjt/rCpJ/LWVW5b49/8
Egio/Pu7sQtw63fZDGMFvz87kjneDsWZhv99GmXWdk5PcGPm92qzx/yXn62s8q4G
m9kdZMV5HbBms7iwkcoqlaDrG87iD8rnop2b1gUVA3/pxg9HHASvFOk/obcg2sBJ
wDytnm8LWw9LVLCAbTQSqh09lWj/L1l3hHDZZkuQ7t74TKSpuDa7FP+xHj8xyJpZ
75rVxu4W/YuPuF53cmWUnlWEqUhvm16C6Vvu5uqU02d7NrbhgYdSa0K2IcGC5lus
UC0YjCLDI4EXxFDt+UTX5m3uRRpzJFede6IY5robjB6VH5imQQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFM3DqA0cdlklfW9LvFWQmxMQHfEkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGQzZDBlMWItNDMwYy0z
NmJmLWIyNDQtZmViZTcxNTgwMzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj4Qw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAnu6a8Y/pZbAwroezcyCKDbWTcDSC2X099LE4JpaoveKf8NdpXu+V
PrWfhJb5ebRHJIh41yWhJjOMLVClAbptDBnu7Iaa84EL+qfmMzUwI4bb1MLd5JVM
/bJ9x1Y3yaqo37u9cwcY64d1YotiuMWcq6kHIM6lZjyiXnd58q+ST/lZmwHXkwvX
hZm3SGsIcXLYxIO4Y9DJEDeP+bW2uQMKXBc4vjI8BXYkq7r3/qqCYQhbHQfWrfml
CUPS6TknfknmQRMP2yrnxTyqYb+NndjDpgVjbijIhbiPr0PVK1eE85hls4wE+b8y
fvt84VOOin8rm2x59rCGdlpHrwNDuqF9aA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:04:39 2026 by rpki-client