Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/81e521b1-7564-31d5-b771-02a09b358955.roa
File:                     81e521b1-7564-31d5-b771-02a09b358955.roa (raw, json)
Hash identifier:          XHcr0IqI0CdO6zkeGQUPzkdvdKecrrFhmFrTKVV4KSE=
Subject key identifier:   15:D1:23:F3:4A:AD:B7:06:9A:99:36:55:78:93:E8:83:5E:E9:8C:AE
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F4C3D7393B37335D17B29C740
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/81e521b1-7564-31d5-b771-02a09b358955.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     30036
IP address blocks:        2604:2e8e:b000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:73:93:b3:73:35:d1:7b:29:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=42c1af19-728f-4f9d-b3df-64d4c8d7a804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:12:c8:cc:a1:d8:87:4d:ff:3a:9a:cc:2e:40:
                    34:19:09:bf:77:56:81:82:ec:a4:42:a2:72:4d:e4:
                    ee:a4:0d:aa:a1:83:14:f6:a3:87:44:af:26:96:9d:
                    40:f1:04:2f:f7:29:ad:6f:63:d1:7a:22:e2:8c:3d:
                    bb:6b:b5:36:2b:ad:94:c3:58:56:e3:0b:6f:d7:bb:
                    42:e6:0f:91:b9:bd:ea:d6:c3:83:bf:a9:a7:7b:0c:
                    e1:c8:34:d3:4a:14:24:f9:c2:2b:f8:5a:94:ba:db:
                    8d:d3:06:cc:e5:59:a2:c0:3b:d0:f7:73:63:cb:b4:
                    49:a2:72:0a:86:03:5b:c1:61:ea:76:c9:b4:bb:76:
                    84:e4:85:d0:17:36:73:d7:65:8f:b4:24:87:65:f8:
                    f4:68:01:0d:7b:fe:14:28:61:18:f2:c0:bb:b4:31:
                    55:17:c8:8e:fc:7f:43:06:ac:bd:12:69:81:16:b3:
                    66:94:39:bd:12:f2:f0:e7:50:68:66:3e:7b:3e:ec:
                    64:61:e0:d3:a7:5d:42:85:58:af:27:57:f2:0a:3c:
                    d2:94:ba:9d:d3:87:a9:ab:47:ee:80:da:83:cd:6d:
                    96:36:8a:24:51:da:e5:ac:28:d6:13:14:5e:b7:dd:
                    09:ef:64:e3:c5:06:7a:03:d9:9a:ab:20:1c:41:3f:
                    af:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D1:23:F3:4A:AD:B7:06:9A:99:36:55:78:93:E8:83:5E:E9:8C:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/81e521b1-7564-31d5-b771-02a09b358955.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:b000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:0b:b1:52:09:88:1b:de:24:d7:b9:6a:9d:9c:9a:e1:72:6a:
         4b:22:a0:38:6b:6b:a3:c6:3e:97:49:26:cb:87:62:e7:24:2a:
         ab:78:b8:66:50:07:b9:57:a5:87:53:51:2c:63:4e:9b:57:c8:
         02:34:83:9f:67:67:f6:05:70:da:1d:a0:84:13:44:a7:fc:16:
         ae:8a:5c:34:7d:1a:0d:76:7e:37:3d:fb:c0:3f:e1:c5:5e:64:
         2e:b5:bc:c5:ef:91:94:4a:48:2f:bd:7e:43:67:f2:1c:6e:1c:
         26:d3:f4:e1:80:09:a8:44:74:f3:9b:ff:d3:43:d5:c7:35:7f:
         5b:d6:f9:0a:8c:00:4d:72:f7:24:89:0c:16:3c:26:8b:85:0f:
         52:c7:c2:b8:d0:17:05:43:39:23:f4:6d:b9:e0:0c:b6:cc:ff:
         25:8b:fe:c7:9f:3c:79:66:22:9c:86:12:9c:47:d8:f7:7a:b4:
         8b:10:96:c9:9f:c2:6b:e1:08:a1:cd:5e:34:8f:2a:6f:19:12:
         9a:44:43:6f:fe:90:74:41:b8:95:18:10:ad:f7:6e:4b:98:42:
         cb:98:d8:72:68:ce:89:5b:fb:41:bd:e1:db:e1:f8:6a:ec:78:
         5a:43:7a:b1:0d:5e:03:98:cd:81:35:0b:9d:fe:c4:54:37:00:
         be:38:1f:72
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9MPXOTs3M10Xspx0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
NDJjMWFmMTktNzI4Zi00ZjlkLWIzZGYtNjRkNGM4ZDdhODA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxLIzKHYh03/OprMLkA0GQm/d1aBguykQqJy
TeTupA2qoYMU9qOHRK8mlp1A8QQv9ymtb2PReiLijD27a7U2K62Uw1hW4wtv17tC
5g+Rub3q1sODv6mnewzhyDTTShQk+cIr+FqUutuN0wbM5VmiwDvQ93Njy7RJonIK
hgNbwWHqdsm0u3aE5IXQFzZz12WPtCSHZfj0aAENe/4UKGEY8sC7tDFVF8iO/H9D
Bqy9EmmBFrNmlDm9EvLw51BoZj57PuxkYeDTp11ChVivJ1fyCjzSlLqd04epq0fu
gNqDzW2WNookUdrlrCjWExRet90J72TjxQZ6A9maqyAcQT+vJQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBXRI/NKrbcGmpk2VXiT6INe6YyuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODFlNTIxYjEtNzU2NC0z
MWQ1LWI3NzEtMDJhMDliMzU4OTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujrAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAcAuxUgmIG94k17lqnZya4XJqSyKgOGtro8Y+l0kmy4di5yQqq3i4
ZlAHuVelh1NRLGNOm1fIAjSDn2dn9gVw2h2ghBNEp/wWropcNH0aDXZ+Nz37wD/h
xV5kLrW8xe+RlEpIL71+Q2fyHG4cJtP04YAJqER085v/00PVxzV/W9b5CowATXL3
JIkMFjwmi4UPUsfCuNAXBUM5I/RtueAMtsz/JYv+x588eWYinIYSnEfY93q0ixCW
yZ/Ca+EIoc1eNI8qbxkSmkRDb/6QdEG4lRgQrfduS5hCy5jYcmjOiVv7Qb3h2+H4
aux4WkN6sQ1eA5jNgTULnf7EVDcAvjgfcg==
-----END CERTIFICATE-----
Generated at Tue Oct 6 22:58:03 2026 by rpki-client