Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/83690d8a-b915-3978-9716-d915eb171770.roa
File:                     83690d8a-b915-3978-9716-d915eb171770.roa (raw, json)
Hash identifier:          skc9WZqEVaWtS0PX1Qb566eAqrME8YYWQhVOOfuwNFw=
Subject key identifier:   FE:80:1C:AA:D2:7E:4B:EB:0D:83:94:5F:63:46:22:6E:59:BC:73:14
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584C7C16AA37F6BABD0C21F6CEA6
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/83690d8a-b915-3978-9716-d915eb171770.roa
Signing time:             Sun 11 Jan 2026 02:00:30 +0000
ROA not before:           Sun 11 Jan 2026 02:00:30 +0000
ROA not after:            Sat 11 Apr 2026 01:00:30 +0000
asID:                     30036
IP address blocks:        2604:2e8f:9800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:7c:16:aa:37:f6:ba:bd:0c:21:f6:ce:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jan 11 02:00:30 2026 GMT
            Not After : Apr 11 01:00:30 2026 GMT
        Subject: CN=54c7dada-55fd-444c-967b-433e5c8c6661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:36:09:64:c7:b7:2e:b9:b0:7a:b3:6b:43:2d:
                    1f:57:d7:9d:02:22:b2:c1:49:ef:a2:78:e7:57:a7:
                    d1:9f:82:74:0c:fc:cd:cf:61:6f:62:cf:e1:95:7f:
                    32:04:41:f4:d0:41:b6:73:ac:a0:86:18:a4:3a:a5:
                    8c:df:71:54:73:7d:a0:98:53:d8:be:9e:27:db:60:
                    44:23:87:e8:7f:8d:8d:57:61:2c:f3:66:d9:df:69:
                    12:01:23:67:d3:f4:6a:64:c1:b2:59:8d:2d:35:89:
                    d4:ab:0d:5a:59:72:1e:71:a3:e2:82:e6:b5:b7:c2:
                    55:3d:23:05:98:2a:28:e9:4b:00:20:27:0e:ac:7d:
                    b0:bf:7c:33:b0:fb:f1:97:85:90:a0:5f:2c:4a:db:
                    a9:08:74:52:ef:36:48:a0:12:df:ad:ff:c8:ec:d0:
                    f1:9a:3f:df:1a:03:09:cf:e0:0d:46:72:2b:9c:15:
                    7a:d6:eb:dc:fa:36:5b:50:c8:43:06:12:f2:ff:18:
                    39:2e:31:78:d8:f1:28:df:16:50:b8:b3:1a:4d:95:
                    5b:ac:cc:ca:44:5f:26:ad:42:1a:f4:9f:0f:2d:b5:
                    e9:f1:04:62:dd:80:1f:34:0a:70:f6:45:b8:3e:99:
                    98:ed:68:ef:3a:fc:ee:e2:8d:86:ed:b0:31:39:95:
                    45:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:80:1C:AA:D2:7E:4B:EB:0D:83:94:5F:63:46:22:6E:59:BC:73:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/83690d8a-b915-3978-9716-d915eb171770.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:9800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:b6:65:c4:f5:02:42:3f:ac:70:3b:df:0b:bc:aa:e6:23:9c:
         f8:48:87:10:2c:7a:c6:1e:6f:79:c2:71:cc:75:4b:2c:2d:36:
         11:5f:70:cb:2e:7e:11:e5:c0:1b:a8:bb:45:67:56:3a:37:38:
         72:f6:dc:43:96:30:06:9b:f8:b3:cb:bd:90:0a:89:93:e3:1e:
         5c:1f:aa:91:7c:ca:0f:00:27:33:71:d7:c8:29:79:ac:f1:ab:
         e9:49:cc:21:41:2a:69:86:41:a9:f0:e7:22:3c:ef:c7:f6:83:
         85:7a:23:c8:d7:e2:4c:d7:d8:d9:1b:b9:49:47:19:2b:e7:ee:
         4c:b3:99:cd:1e:53:8b:f1:10:87:c3:84:ad:bc:19:ef:4b:87:
         25:7a:e7:f1:48:81:7d:ad:4e:a7:e2:d9:c9:7a:8f:cc:8f:94:
         3b:83:c9:9a:b5:72:ba:17:8c:4a:ad:14:3b:3b:aa:61:56:48:
         d7:af:ba:7d:89:fd:03:12:b7:72:bb:3c:17:39:46:9c:3c:34:
         a1:d6:b8:ff:49:32:77:d7:48:5b:0f:29:ff:30:ba:10:34:e9:
         59:90:96:ce:af:2f:a2:1c:48:8f:98:63:b4:e2:6f:b8:8b:eb:
         da:80:c4:23:d2:ec:7d:3a:d7:07:56:f2:35:a6:f0:f7:e2:3d:
         81:3f:58:e7
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEx8Fqo39rq9DCH2zqYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDExMTAyMDAzMFoXDTI2MDQxMTAxMDAzMFowLzEtMCsGA1UEAxMk
NTRjN2RhZGEtNTVmZC00NDRjLTk2N2ItNDMzZTVjOGM2NjYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TYJZMe3LrmwerNrQy0fV9edAiKywUnvonjn
V6fRn4J0DPzNz2FvYs/hlX8yBEH00EG2c6yghhikOqWM33FUc32gmFPYvp4n22BE
I4fof42NV2Es82bZ32kSASNn0/RqZMGyWY0tNYnUqw1aWXIecaPigua1t8JVPSMF
mCoo6UsAICcOrH2wv3wzsPvxl4WQoF8sStupCHRS7zZIoBLfrf/I7NDxmj/fGgMJ
z+ANRnIrnBV61uvc+jZbUMhDBhLy/xg5LjF42PEo3xZQuLMaTZVbrMzKRF8mrUIa
9J8PLbXp8QRi3YAfNApw9kW4PpmY7WjvOvzu4o2G7bAxOZVFdQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFP6AHKrSfkvrDYOUX2NGIm5ZvHMUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODM2OTBkOGEtYjkxNS0z
OTc4LTk3MTYtZDkxNWViMTcxNzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj5gw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAbLZlxPUCQj+scDvfC7yq5iOc+EiHECx6xh5vecJxzHVLLC02EV9w
yy5+EeXAG6i7RWdWOjc4cvbcQ5YwBpv4s8u9kAqJk+MeXB+qkXzKDwAnM3HXyCl5
rPGr6UnMIUEqaYZBqfDnIjzvx/aDhXojyNfiTNfY2Ru5SUcZK+fuTLOZzR5Ti/EQ
h8OErbwZ70uHJXrn8UiBfa1Op+LZyXqPzI+UO4PJmrVyuheMSq0UOzuqYVZI16+6
fYn9AxK3crs8FzlGnDw0oda4/0kyd9dIWw8p/zC6EDTpWZCWzq8vohxIj5hjtOJv
uIvr2oDEI9LsfTrXB1byNabw9+I9gT9Y5w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:43:57 2026 by rpki-client