Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9f58e746-fc08-3bea-ac49-140fc48166a6.roa
File:                     9f58e746-fc08-3bea-ac49-140fc48166a6.roa (raw, json)
Hash identifier:          Tm7W3K+6c0BIDy3HCXTkX3mYrj/hNtoTr/EuMtEzpr8=
Subject key identifier:   3B:92:55:58:2B:64:49:E5:9C:7A:42:20:47:F5:9B:30:3E:43:A2:0E
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584C42DBFAD0872337CEC656F280
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9f58e746-fc08-3bea-ac49-140fc48166a6.roa
Signing time:             Sun 21 Dec 2025 14:00:40 +0000
ROA not before:           Sun 21 Dec 2025 14:00:40 +0000
ROA not after:            Sat 21 Mar 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2e8c:ac00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:42:db:fa:d0:87:23:37:ce:c6:56:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Dec 21 14:00:40 2025 GMT
            Not After : Mar 21 13:00:40 2026 GMT
        Subject: CN=df8e6ef9-0e54-4e10-9692-6bcca0dd4e6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d3:76:07:97:b6:b7:70:a7:8b:96:7c:05:ca:
                    38:6e:8e:84:3a:29:b0:24:dc:72:ae:5f:db:77:74:
                    a6:4a:6f:8f:82:a0:75:a9:d8:c3:8c:7e:c3:db:ef:
                    85:55:0a:15:2a:8b:ad:e6:de:db:63:98:e5:77:4c:
                    ae:c1:c3:99:fb:51:78:ea:21:61:0a:65:e3:e1:50:
                    60:a4:46:44:7e:89:b2:a5:82:6a:f4:a1:03:70:75:
                    e5:37:3b:bb:4a:a2:25:fb:80:c2:41:96:c8:56:a2:
                    a3:3a:c0:71:55:9d:cc:bd:61:76:c9:b2:4a:4b:d0:
                    e6:b1:cc:ec:fd:a6:b3:0f:ab:c9:7e:36:89:bb:ff:
                    d9:f1:52:27:c9:2b:4d:5d:f4:37:3b:a1:ab:6b:e0:
                    83:6d:ea:fa:e7:8b:a5:10:ad:43:b5:fd:54:de:21:
                    39:36:3c:1d:3f:24:07:7c:14:b8:fe:98:e1:6e:11:
                    37:95:72:d0:a0:99:78:da:3b:a6:2e:31:cd:5a:62:
                    12:c7:ff:43:5f:cb:39:1f:b5:86:8f:ba:37:3c:c7:
                    7e:dd:c5:61:5f:a9:45:71:bb:6a:71:bb:e8:de:e3:
                    9a:99:69:cf:5e:ba:53:6f:f4:55:50:95:f3:42:25:
                    e0:af:90:e0:35:a4:e5:c7:0f:63:c3:81:04:c5:27:
                    49:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:92:55:58:2B:64:49:E5:9C:7A:42:20:47:F5:9B:30:3E:43:A2:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9f58e746-fc08-3bea-ac49-140fc48166a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:ac00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:5a:76:04:6e:e9:58:d1:c9:da:21:d1:20:59:a0:15:c3:16:
         80:ab:71:4c:92:5e:06:0c:9e:f4:51:6d:7a:35:bc:65:72:93:
         37:1a:5c:7b:53:31:80:4f:06:22:95:fd:df:d1:a4:67:70:09:
         44:5f:e3:08:58:a3:cc:33:0b:c4:11:0b:58:46:74:bf:ff:12:
         ac:f3:ea:57:29:29:3d:c6:ee:c7:37:3f:03:4f:72:f2:0d:07:
         6f:7b:e7:a5:c9:af:45:12:41:47:22:ca:b4:a1:b6:94:31:c6:
         12:4a:fe:65:cd:cf:9f:ea:fd:54:94:17:44:9d:a7:a8:af:10:
         1b:34:1e:7c:13:9e:4e:6c:2e:bb:fe:44:1a:10:a7:84:74:0d:
         ce:a3:2f:f6:85:ec:14:be:59:2e:76:f6:d9:01:96:39:23:3c:
         cb:8a:30:77:8a:b5:3c:d1:1a:dc:18:06:b6:6a:50:34:e2:3f:
         a5:b6:42:59:c3:63:36:96:d5:2f:1c:b4:28:ba:d8:a1:56:63:
         94:32:63:c2:70:1e:c4:84:bd:c3:57:39:87:ae:55:ff:40:3a:
         50:6e:a6:6b:70:cf:2f:3c:cb:18:21:9e:99:9a:0c:f9:c0:4e:
         ee:ac:21:f8:5f:d2:29:bf:ba:73:c9:81:4e:74:1b:b2:e8:7a:
         a6:59:9b:a9
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExC2/rQhyM3zsZW8oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk
ZGY4ZTZlZjktMGU1NC00ZTEwLTk2OTItNmJjY2EwZGQ0ZTZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9N2B5e2t3Cni5Z8Bco4bo6EOimwJNxyrl/b
d3SmSm+PgqB1qdjDjH7D2++FVQoVKout5t7bY5jld0yuwcOZ+1F46iFhCmXj4VBg
pEZEfomypYJq9KEDcHXlNzu7SqIl+4DCQZbIVqKjOsBxVZ3MvWF2ybJKS9Dmsczs
/aazD6vJfjaJu//Z8VInyStNXfQ3O6Gra+CDber654ulEK1Dtf1U3iE5NjwdPyQH
fBS4/pjhbhE3lXLQoJl42jumLjHNWmISx/9DX8s5H7WGj7o3PMd+3cVhX6lFcbtq
cbvo3uOamWnPXrpTb/RVUJXzQiXgr5DgNaTlxw9jw4EExSdJswIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDuSVVgrZEnlnHpCIEf1mzA+Q6IOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOWY1OGU3NDYtZmMwOC0z
YmVhLWFjNDktMTQwZmM0ODE2NmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujKww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAVVp2BG7pWNHJ2iHRIFmgFcMWgKtxTJJeBgye9FFtejW8ZXKTNxpc
e1MxgE8GIpX939GkZ3AJRF/jCFijzDMLxBELWEZ0v/8SrPPqVykpPcbuxzc/A09y
8g0Hb3vnpcmvRRJBRyLKtKG2lDHGEkr+Zc3Pn+r9VJQXRJ2nqK8QGzQefBOeTmwu
u/5EGhCnhHQNzqMv9oXsFL5ZLnb22QGWOSM8y4owd4q1PNEa3BgGtmpQNOI/pbZC
WcNjNpbVLxy0KLrYoVZjlDJjwnAexIS9w1c5h65V/0A6UG6ma3DPLzzLGCGemZoM
+cBO7qwh+F/SKb+6c8mBTnQbsuh6plmbqQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:40:53 2026 by rpki-client