Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/525a8858-0ad9-37d9-901c-8c74bef96b29.roa
File:                     525a8858-0ad9-37d9-901c-8c74bef96b29.roa (raw, json)
Hash identifier:          dA4iJugHh2xMXeRzK1PYjg0mEretOS+Rr/xHr/C3yC4=
Subject key identifier:   8D:2D:33:57:41:BF:16:88:E3:F9:0E:D6:C5:A1:DD:F0:4F:D3:B8:21
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D7CCFC423424DBCDF0BA61240
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/525a8858-0ad9-37d9-901c-8c74bef96b29.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     30036
IP address blocks:        2604:2e8d:7800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:c4:23:42:4d:bc:df:0b:a6:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=90120b3b-7e76-4549-9d05-6df9926cd81f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:66:19:22:e0:3b:5d:12:50:db:0f:61:24:20:
                    f3:55:48:7a:41:1b:8d:7b:ca:9f:03:be:4d:6d:e2:
                    39:71:8a:08:75:3c:68:d5:ca:d4:fe:f0:5f:b0:11:
                    b9:a1:61:1c:ee:d5:91:1b:2d:17:ee:15:4f:75:bb:
                    30:6d:0f:73:e3:88:73:a9:f5:46:10:a9:04:b4:7d:
                    6f:34:55:e3:bb:6e:02:cc:e4:67:98:83:aa:db:f3:
                    8f:d3:9a:39:eb:71:a4:cd:0b:56:6f:2a:c7:6a:dc:
                    04:69:3e:db:39:e2:51:e4:bb:78:35:64:dd:03:aa:
                    e5:99:89:22:b2:6b:04:da:c9:3f:f4:85:9f:e2:94:
                    f4:16:05:03:01:f4:7e:0a:82:70:75:59:1f:7f:06:
                    55:4f:9f:53:59:15:b0:39:ae:57:a8:66:db:51:11:
                    cf:42:dd:20:1c:f8:2c:72:48:55:28:c0:cc:66:32:
                    96:80:48:b1:f7:25:ef:32:88:5c:4b:3b:24:aa:f7:
                    33:b1:53:47:a2:1c:98:9e:6e:5e:cd:e4:a0:0d:6c:
                    67:1f:e5:d4:9d:ce:82:14:4e:70:70:bd:f2:af:4e:
                    b1:35:8b:48:cc:7f:e5:01:6a:7b:14:c4:2b:79:43:
                    1f:f0:d3:4d:b7:7a:fb:cd:3a:df:47:1f:c6:fc:c7:
                    dd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2D:33:57:41:BF:16:88:E3:F9:0E:D6:C5:A1:DD:F0:4F:D3:B8:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/525a8858-0ad9-37d9-901c-8c74bef96b29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:7800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:3e:e1:f6:19:b6:d9:a2:f0:c3:aa:7d:3b:4b:11:82:7a:dd:
         e5:d2:c1:e7:ba:50:c3:76:42:40:ab:b8:61:57:c7:e0:19:2c:
         ea:8b:e2:63:b5:f0:21:c8:36:d5:c0:c0:5c:ae:0c:a5:d4:ee:
         bc:83:20:84:cf:00:9c:ce:97:e4:86:23:66:a4:fa:c9:b4:80:
         53:01:53:03:80:86:17:0b:3e:01:09:27:df:34:28:35:97:c3:
         d9:cb:28:56:ef:b5:54:33:27:04:81:7d:af:69:33:20:ab:2a:
         f6:7a:55:d3:59:74:0a:e8:ac:45:87:3b:f8:d5:c2:99:71:58:
         6d:05:59:01:e5:4f:32:a8:f3:82:9b:46:c7:c4:c8:f1:65:89:
         31:ed:21:67:7e:d1:16:91:ee:67:e0:71:8e:66:bd:b6:bb:53:
         7d:04:07:1d:92:4b:dd:5d:db:c6:f6:8c:0a:c0:b9:c0:7a:b4:
         b0:49:0e:20:01:3f:09:da:60:07:87:d5:18:b8:30:b2:80:e6:
         f4:a3:69:79:6a:33:ce:58:2f:cc:b4:7a:29:35:36:0e:6e:cc:
         87:aa:19:3d:da:1d:76:66:01:c4:1e:31:97:6a:7a:c7:57:72:
         90:5a:a3:04:9b:3d:50:d0:e6:a3:cd:d0:74:4b:84:f4:7f:cf:
         7c:2f:2b:40
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE18z8QjQk283wumEkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk
OTAxMjBiM2ItN2U3Ni00NTQ5LTlkMDUtNmRmOTkyNmNkODFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2YZIuA7XRJQ2w9hJCDzVUh6QRuNe8qfA75N
beI5cYoIdTxo1crU/vBfsBG5oWEc7tWRGy0X7hVPdbswbQ9z44hzqfVGEKkEtH1v
NFXju24CzORnmIOq2/OP05o563GkzQtWbyrHatwEaT7bOeJR5Lt4NWTdA6rlmYki
smsE2sk/9IWf4pT0FgUDAfR+CoJwdVkffwZVT59TWRWwOa5XqGbbURHPQt0gHPgs
ckhVKMDMZjKWgEix9yXvMohcSzskqvczsVNHohyYnm5ezeSgDWxnH+XUnc6CFE5w
cL3yr06xNYtIzH/lAWp7FMQreUMf8NNNt3r7zTrfRx/G/MfdRwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFI0tM1dBvxaI4/kO1sWh3fBP07ghMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNTI1YTg4NTgtMGFkOS0z
N2Q5LTkwMWMtOGM3NGJlZjk2YjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujXgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAcj7h9hm22aLww6p9O0sRgnrd5dLB57pQw3ZCQKu4YVfH4Bks6ovi
Y7XwIcg21cDAXK4MpdTuvIMghM8AnM6X5IYjZqT6ybSAUwFTA4CGFws+AQkn3zQo
NZfD2csoVu+1VDMnBIF9r2kzIKsq9npV01l0CuisRYc7+NXCmXFYbQVZAeVPMqjz
gptGx8TI8WWJMe0hZ37RFpHuZ+Bxjma9trtTfQQHHZJL3V3bxvaMCsC5wHq0sEkO
IAE/CdpgB4fVGLgwsoDm9KNpeWozzlgvzLR6KTU2Dm7Mh6oZPdoddmYBxB4xl2p6
x1dykFqjBJs9UNDmo83QdEuE9H/PfC8rQA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:39:59 2026 by rpki-client