Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d5a4791-0867-39ae-aad3-f703055da2e1.roa
File:                     3d5a4791-0867-39ae-aad3-f703055da2e1.roa (raw, json)
Hash identifier:          VvhW3eqohEPDyXdIqQOiycYwLDOglHVfKkTTufanoVc=
Subject key identifier:   0F:21:00:9E:72:F9:A5:32:36:8C:A6:EC:12:10:12:0F:27:E5:40:F1
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E0435F8243A85BBA9E7A9DD00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d5a4791-0867-39ae-aad3-f703055da2e1.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     30036
IP address blocks:        2604:2e8c:5400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:f8:24:3a:85:bb:a9:e7:a9:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=e2edab86-f4e7-4932-82e5-c4c47bf70a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c2:d7:3e:11:fc:bf:e8:51:2c:39:07:53:d4:
                    7f:fc:8c:7b:62:30:1e:da:f9:77:01:67:82:06:b6:
                    47:65:2f:35:e5:ac:4c:ea:1a:0c:a8:b0:95:85:3e:
                    73:2e:43:85:30:5a:b5:a8:cb:43:fc:6b:42:97:6a:
                    82:d6:24:4b:6f:2e:d6:e6:0f:51:34:f7:3c:d9:76:
                    d2:2b:07:67:4c:79:a6:f4:ad:8c:99:5d:77:11:1d:
                    73:4e:36:4c:00:fc:e2:b5:18:71:94:56:14:a5:8d:
                    5b:9b:72:09:31:af:09:89:c3:e7:9a:27:5d:72:c4:
                    78:6c:1a:8a:8f:c1:2a:89:13:f3:de:96:57:92:ac:
                    d1:c4:1e:14:ee:9a:ad:d2:dd:22:49:f1:af:e2:9b:
                    a6:d4:d9:ce:07:95:1f:9f:db:6d:a3:a3:6d:1b:ea:
                    aa:80:e9:97:bf:22:73:55:b9:12:dd:91:21:03:95:
                    9f:58:1c:e5:75:2f:81:e6:ed:be:8b:09:1e:bb:2c:
                    82:98:2f:32:b1:90:2e:e3:e2:a7:de:65:62:46:a2:
                    3c:6e:a1:ac:92:b7:cf:49:7a:c3:08:40:e4:eb:f3:
                    17:be:c2:eb:c1:37:d3:0e:86:14:ee:f7:ca:20:b4:
                    6f:87:e3:c7:59:95:bf:a0:01:f0:8e:43:0c:aa:41:
                    61:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:21:00:9E:72:F9:A5:32:36:8C:A6:EC:12:10:12:0F:27:E5:40:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d5a4791-0867-39ae-aad3-f703055da2e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:5400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:c9:5e:4a:b1:78:3a:6e:98:8c:78:cf:80:1b:52:88:4f:f3:
         7c:72:46:b5:40:5c:fd:40:9f:08:66:09:e8:ea:c8:a9:d5:98:
         8d:74:93:b3:cc:9e:87:11:af:c9:dc:37:28:1f:a6:e9:29:5c:
         8f:07:ab:94:ee:e6:10:e8:ad:8d:f6:8a:09:5a:a9:2c:9a:21:
         f2:ee:5b:e2:42:9f:c9:5a:70:ba:f7:f8:f2:35:1f:af:f2:d1:
         87:56:f0:50:63:47:f5:e7:60:35:5b:bc:a0:da:93:ca:d6:c4:
         ac:38:1b:0d:2e:c9:8a:e1:dd:07:f7:5d:53:57:df:5a:62:cb:
         d2:6c:26:8f:be:8a:9c:cb:ae:fc:39:38:95:ba:6b:2d:1a:8e:
         a0:03:06:22:4e:c3:b5:48:92:36:b5:a6:b0:5c:1d:d2:62:6a:
         a2:ba:43:70:b5:d0:64:42:fb:3e:d3:29:50:eb:1b:38:97:1d:
         c8:f7:19:c2:f0:86:b4:1a:18:f4:5d:d9:a0:c4:b3:be:90:f6:
         59:92:87:99:41:bf:74:ef:51:56:0d:16:f6:43:92:dc:d0:55:
         db:f5:43:77:9a:5e:34:36:b3:5e:99:8e:96:99:6e:3e:5a:fd:
         4b:01:fd:d8:af:ef:7f:83:af:2f:98:9b:16:60:16:42:5a:60:
         b3:e0:eb:84
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE4ENfgkOoW7qeep3QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk
ZTJlZGFiODYtZjRlNy00OTMyLTgyZTUtYzRjNDdiZjcwYTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcLXPhH8v+hRLDkHU9R//Ix7YjAe2vl3AWeC
BrZHZS815axM6hoMqLCVhT5zLkOFMFq1qMtD/GtCl2qC1iRLby7W5g9RNPc82XbS
KwdnTHmm9K2MmV13ER1zTjZMAPzitRhxlFYUpY1bm3IJMa8JicPnmiddcsR4bBqK
j8EqiRPz3pZXkqzRxB4U7pqt0t0iSfGv4pum1NnOB5Ufn9tto6NtG+qqgOmXvyJz
VbkS3ZEhA5WfWBzldS+B5u2+iwkeuyyCmC8ysZAu4+Kn3mViRqI8bqGskrfPSXrD
CEDk6/MXvsLrwTfTDoYU7vfKILRvh+PHWZW/oAHwjkMMqkFhIwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFA8hAJ5y+aUyNoym7BIQEg8n5UDxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2Q1YTQ3OTEtMDg2Ny0z
OWFlLWFhZDMtZjcwMzA1NWRhMmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujFQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAQsleSrF4Om6YjHjPgBtSiE/zfHJGtUBc/UCfCGYJ6OrIqdWYjXST
s8yehxGvydw3KB+m6SlcjwerlO7mEOitjfaKCVqpLJoh8u5b4kKfyVpwuvf48jUf
r/LRh1bwUGNH9edgNVu8oNqTytbErDgbDS7JiuHdB/ddU1ffWmLL0mwmj76KnMuu
/Dk4lbprLRqOoAMGIk7DtUiSNrWmsFwd0mJqorpDcLXQZEL7PtMpUOsbOJcdyPcZ
wvCGtBoY9F3ZoMSzvpD2WZKHmUG/dO9RVg0W9kOS3NBV2/VDd5peNDazXpmOlplu
Plr9SwH92K/vf4OvL5ibFmAWQlpgs+DrhA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:42:25 2026 by rpki-client