Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1a46810d-be24-3d34-add3-0fb2df7ae360.roa
File:                     1a46810d-be24-3d34-add3-0fb2df7ae360.roa (raw, json)
Hash identifier:          Roc0dRlXbtOOBTV3kzA7t9PjKhKqtsypT+iCRAfIEVM=
Subject key identifier:   8F:B1:BB:00:E9:3E:ED:18:3A:29:63:03:71:EC:5E:18:89:A7:CA:00
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A8410D8EF03EE0A0364B57A80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1a46810d-be24-3d34-add3-0fb2df7ae360.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e8b:ec00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:d8:ef:03:ee:0a:03:64:b5:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=ef0c8beb-de82-4bbc-bcc3-3212bedea79a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:07:a3:74:32:b9:9e:48:41:b8:93:2b:24:62:
                    0e:66:22:f5:ce:41:90:19:35:08:d7:b4:27:35:a9:
                    0a:0d:d5:8a:c4:eb:ef:23:64:ea:b5:fc:54:85:c1:
                    d1:59:16:31:d9:96:07:4b:04:e7:b2:e5:37:83:ca:
                    a3:b7:c0:83:6e:78:ba:6b:52:64:f1:28:ef:c9:f3:
                    09:2e:34:c2:13:ec:45:e9:bb:8a:f4:d4:a0:f4:6e:
                    3d:ab:c0:e6:b2:be:26:3f:51:45:90:ea:f5:30:fd:
                    93:8f:31:04:37:8c:9a:27:fb:fd:ae:90:53:d0:2c:
                    b4:68:23:44:03:27:a3:82:27:af:61:30:58:15:2c:
                    34:fc:8d:91:4c:29:cb:be:77:81:f4:59:d2:54:27:
                    95:33:0f:47:58:30:3d:9b:f2:fc:c8:3c:49:a3:5d:
                    82:cf:07:6f:78:da:ec:50:81:2e:f6:e5:35:0f:72:
                    16:3e:c6:31:5c:28:9e:dd:5c:80:e2:28:31:01:c9:
                    6c:71:c7:50:56:20:2a:c1:4c:8c:e9:f0:9f:1c:a8:
                    b7:b0:a7:2c:a3:4b:95:ae:3b:b1:16:65:42:60:93:
                    3b:76:08:ed:ae:e8:09:b7:0a:4e:7c:96:bc:75:9a:
                    fd:da:4a:ee:fd:14:e6:5a:ec:0d:78:46:e6:22:ec:
                    e4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B1:BB:00:E9:3E:ED:18:3A:29:63:03:71:EC:5E:18:89:A7:CA:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1a46810d-be24-3d34-add3-0fb2df7ae360.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:ec00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:a0:c7:85:e9:7e:99:e1:26:6d:e5:ad:21:3e:57:eb:98:d4:
         e0:46:b0:e0:d7:c3:53:ec:9c:3d:cf:52:a8:0f:39:47:ce:8f:
         a4:66:cd:95:d1:21:ae:20:e7:5e:14:38:7b:d0:b6:2b:54:31:
         d3:0a:a0:38:5b:6a:70:bb:f9:1e:a6:bc:7c:d5:3b:f0:2c:85:
         1d:3b:db:ab:11:1f:ca:8f:1f:cf:0b:6f:5a:5a:bd:4a:c1:7a:
         43:6f:5e:b3:06:20:53:c5:b7:2f:8b:b2:3a:3a:7c:f1:8e:f8:
         8f:36:5b:d9:80:3a:2e:b2:79:32:d6:9d:44:f3:4e:2c:fd:be:
         8a:a7:b9:17:09:5f:94:ac:a2:b9:fd:c8:4c:66:8d:ef:08:23:
         ba:a8:29:66:89:68:e6:f7:0e:db:3a:fd:d8:11:07:4d:cf:00:
         f6:2a:7c:b5:34:58:f5:b0:28:3b:d9:ac:fd:1d:26:03:8d:f9:
         2f:76:35:2b:77:83:90:ab:97:46:73:e6:a6:bb:6e:b6:a6:f3:
         d6:d3:f1:73:b1:66:4f:7d:96:5a:65:56:79:c4:09:b3:1d:2d:
         08:53:e2:bd:ec:fe:00:61:c2:91:c5:1c:b5:46:70:cc:2b:ec:
         60:53:18:65:a9:27:27:b0:e0:30:9a:2a:09:f8:fc:27:7c:30:
         e3:08:73:6c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqEENjvA+4KA2S1eoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
ZWYwYzhiZWItZGU4Mi00YmJjLWJjYzMtMzIxMmJlZGVhNzlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwejdDK5nkhBuJMrJGIOZiL1zkGQGTUI17Qn
NakKDdWKxOvvI2TqtfxUhcHRWRYx2ZYHSwTnsuU3g8qjt8CDbni6a1Jk8SjvyfMJ
LjTCE+xF6buK9NSg9G49q8Dmsr4mP1FFkOr1MP2TjzEEN4yaJ/v9rpBT0Cy0aCNE
AyejgievYTBYFSw0/I2RTCnLvneB9FnSVCeVMw9HWDA9m/L8yDxJo12CzwdveNrs
UIEu9uU1D3IWPsYxXCie3VyA4igxAclsccdQViAqwUyM6fCfHKi3sKcso0uVrjux
FmVCYJM7dgjtrugJtwpOfJa8dZr92kru/RTmWuwNeEbmIuzk5wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFI+xuwDpPu0YOiljA3HsXhiJp8oAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMWE0NjgxMGQtYmUyNC0z
ZDM0LWFkZDMtMGZiMmRmN2FlMzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui+ww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAJqDHhel+meEmbeWtIT5X65jU4Eaw4NfDU+ycPc9SqA85R86PpGbN
ldEhriDnXhQ4e9C2K1Qx0wqgOFtqcLv5Hqa8fNU78CyFHTvbqxEfyo8fzwtvWlq9
SsF6Q29eswYgU8W3L4uyOjp88Y74jzZb2YA6LrJ5MtadRPNOLP2+iqe5FwlflKyi
uf3ITGaN7wgjuqgpZolo5vcO2zr92BEHTc8A9ip8tTRY9bAoO9ms/R0mA435L3Y1
K3eDkKuXRnPmprtutqbz1tPxc7FmT32WWmVWecQJsx0tCFPivez+AGHCkcUctUZw
zCvsYFMYZaknJ7DgMJoqCfj8J3ww4whzbA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:42:50 2025 by rpki-client