Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/151a19fb-0b82-30da-88a1-aaa2dd3db85f.roa
File:                     151a19fb-0b82-30da-88a1-aaa2dd3db85f.roa (raw, json)
Hash identifier:          BKKIcnqI/tZU2fsWoDiO5cV/XYGT1y9lDhHNXdnn2AQ=
Subject key identifier:   CC:FE:C3:FF:57:D5:32:A9:1B:5A:32:2C:19:5A:9D:83:BE:22:1F:F9
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584CCD0CB27009A660B096153880
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/151a19fb-0b82-30da-88a1-aaa2dd3db85f.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     30036
IP address blocks:        2604:2e8d:6c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:b2:70:09:a6:60:b0:96:15:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=79ddb964-3b95-4ab2-84f9-5540f76ae9df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:82:0d:b7:90:1e:2b:c8:39:8c:db:aa:28:12:
                    83:4d:3d:bb:12:f4:66:a4:27:48:27:e7:37:f5:f3:
                    5d:1a:e3:5d:a5:42:c9:5b:3f:98:2f:f8:e9:8c:77:
                    1e:b0:97:75:2b:43:97:f1:52:6e:28:90:e0:69:67:
                    ae:ac:1a:99:86:ae:c2:db:56:3d:de:8b:a8:45:71:
                    ec:58:29:a5:b8:f1:8b:16:dc:ab:f2:ff:a8:ac:82:
                    a5:d3:4e:91:a1:f9:82:6f:56:0e:7d:6b:dd:44:4d:
                    b4:d6:14:37:fe:c8:d9:0d:36:e7:90:de:bb:ac:ba:
                    b1:28:c1:bd:39:04:51:2e:64:b4:1f:c9:f4:60:1d:
                    c9:2e:fd:41:cd:a8:da:40:ed:10:3f:6c:fe:09:3e:
                    08:4c:78:31:a4:7e:63:d6:e3:e9:51:d7:e1:52:9d:
                    0c:dc:01:fe:f7:76:ea:d9:0f:4f:1b:19:8f:57:0e:
                    d6:73:f8:b3:05:2a:8d:ac:c1:67:8e:d6:f3:90:4f:
                    df:5e:ff:9f:6d:91:4a:44:af:8d:0e:da:be:3b:0f:
                    a4:2c:5b:e6:c1:11:28:3d:d9:9b:e3:84:fa:2b:0f:
                    45:54:f1:38:e6:cb:4a:92:68:cf:aa:0c:b3:3e:2f:
                    82:40:39:62:42:da:59:bb:35:62:b6:d2:b8:59:57:
                    01:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FE:C3:FF:57:D5:32:A9:1B:5A:32:2C:19:5A:9D:83:BE:22:1F:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/151a19fb-0b82-30da-88a1-aaa2dd3db85f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:6c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:f2:59:b9:5a:1f:84:06:bf:db:11:84:fb:7d:5a:82:00:4a:
         15:95:9e:34:4f:6f:c7:70:0b:22:e2:e2:16:ef:e9:87:15:60:
         04:45:58:29:2c:3d:f5:ad:f8:96:6d:cc:3f:0f:89:3b:fe:75:
         ee:d4:bc:a8:e4:a2:e8:ab:4c:77:5b:e5:94:33:ae:bc:0d:80:
         f6:a1:b2:61:03:b5:50:4c:8f:db:6d:89:78:55:55:a4:51:6b:
         c2:53:54:88:8e:8a:ac:9b:49:63:09:d6:1d:8d:81:90:a3:78:
         7e:ed:07:60:2a:df:79:4c:de:5a:c4:ba:db:b6:74:45:78:1c:
         09:8b:14:95:d7:b5:23:5e:f7:c7:13:fa:f6:9d:79:86:0d:c8:
         70:b7:f5:a0:06:3f:85:80:40:31:78:25:5c:cc:a9:21:42:45:
         29:5e:d3:d1:7e:43:7f:24:e1:82:ba:ab:e4:3b:09:ec:fb:47:
         5d:5e:a6:18:1a:e8:ce:f7:aa:44:02:58:b1:62:43:82:ea:d0:
         10:4f:a3:90:fb:48:16:d2:45:e7:13:89:ba:07:db:78:a7:3e:
         04:89:be:15:db:34:0a:95:33:15:c5:6a:35:ba:4c:c6:c0:29:
         4a:46:c7:e1:2a:c5:a6:3c:a9:9e:30:e9:90:91:24:0e:45:e6:
         f5:80:52:e9
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEzNDLJwCaZgsJYVOIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk
NzlkZGI5NjQtM2I5NS00YWIyLTg0ZjktNTU0MGY3NmFlOWRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4INt5AeK8g5jNuqKBKDTT27EvRmpCdIJ+c3
9fNdGuNdpULJWz+YL/jpjHcesJd1K0OX8VJuKJDgaWeurBqZhq7C21Y93ouoRXHs
WCmluPGLFtyr8v+orIKl006RofmCb1YOfWvdRE201hQ3/sjZDTbnkN67rLqxKMG9
OQRRLmS0H8n0YB3JLv1BzajaQO0QP2z+CT4ITHgxpH5j1uPpUdfhUp0M3AH+93bq
2Q9PGxmPVw7Wc/izBSqNrMFnjtbzkE/fXv+fbZFKRK+NDtq+Ow+kLFvmwREoPdmb
44T6Kw9FVPE45stKkmjPqgyzPi+CQDliQtpZuzVittK4WVcB5QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMz+w/9X1TKpG1oyLBlanYO+Ih/5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMTUxYTE5ZmItMGI4Mi0z
MGRhLTg4YTEtYWFhMmRkM2RiODVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujWww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAVfJZuVofhAa/2xGE+31aggBKFZWeNE9vx3ALIuLiFu/phxVgBEVY
KSw99a34lm3MPw+JO/517tS8qOSi6KtMd1vllDOuvA2A9qGyYQO1UEyP222JeFVV
pFFrwlNUiI6KrJtJYwnWHY2BkKN4fu0HYCrfeUzeWsS627Z0RXgcCYsUlde1I173
xxP69p15hg3IcLf1oAY/hYBAMXglXMypIUJFKV7T0X5DfyThgrqr5DsJ7PtHXV6m
GBrozveqRAJYsWJDgurQEE+jkPtIFtJF5xOJugfbeKc+BIm+Fds0CpUzFcVqNbpM
xsApSkbH4SrFpjypnjDpkJEkDkXm9YBS6Q==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:37:05 2026 by rpki-client