Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e811a19d-bb03-3d77-8027-49d6713a912a.roa
File:                     e811a19d-bb03-3d77-8027-49d6713a912a.roa (raw, json)
Hash identifier:          cWlNiU1OOT/T2bMAScOEWWGN85XaaAAXXDOj9XvYKX4=
Subject key identifier:   84:CF:AC:8F:99:1A:28:5A:9D:4B:9E:C5:BC:3D:2E:81:EA:6B:86:07
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E059C6F18030F195349AE6400
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e811a19d-bb03-3d77-8027-49d6713a912a.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        2604:2e8e:2800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:6f:18:03:0f:19:53:49:ae:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=a6b4f32e-e65d-40d3-b595-bc606274a296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:53:8d:71:1b:ff:c3:3f:56:03:5c:75:85:a3:
                    a4:33:f0:47:df:ff:9d:4b:7b:e6:63:b1:f6:8e:b8:
                    af:17:5e:90:20:b0:6e:38:fd:4e:4b:86:20:fc:7a:
                    49:33:06:c8:64:4d:4a:cc:d7:be:2d:80:ae:8b:02:
                    c0:c2:82:af:fd:6e:0c:9a:a6:f6:85:19:52:9c:85:
                    55:c7:6c:68:8b:16:51:8e:1d:8d:9a:06:fd:d6:b8:
                    c2:77:fd:27:23:ce:53:8c:32:fb:82:28:30:7f:4a:
                    77:a1:b4:1d:89:49:0c:e3:a4:d8:db:14:f0:43:51:
                    60:d2:83:99:4b:0f:13:59:3d:e1:25:7f:e4:f5:58:
                    f4:67:f0:7f:bb:d3:0a:0a:ce:31:44:d0:35:47:04:
                    6b:c8:af:3b:2c:28:f5:ec:56:41:08:2f:e5:a8:0a:
                    98:19:65:42:d8:99:a8:49:45:8e:8a:46:51:79:7f:
                    a3:06:81:91:f4:c4:b0:25:b6:f5:51:ec:b7:7f:55:
                    2b:76:91:33:75:9f:4c:27:6e:aa:a0:10:75:e2:9f:
                    50:0e:c1:c6:f1:d1:5c:16:2b:78:26:85:3a:0a:4d:
                    2c:1f:d9:5f:85:a7:44:ad:4f:95:63:fd:48:f8:41:
                    b0:ac:3e:bd:1b:2a:ba:b6:4d:85:02:b7:67:c7:b7:
                    84:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CF:AC:8F:99:1A:28:5A:9D:4B:9E:C5:BC:3D:2E:81:EA:6B:86:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e811a19d-bb03-3d77-8027-49d6713a912a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:2800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:b2:5e:be:13:a0:4e:52:1f:7f:b8:16:f2:77:f1:58:fd:b3:
         5f:83:71:b0:c9:03:dd:37:e0:7e:c4:b8:7e:53:6c:9f:55:05:
         6a:c3:a5:50:24:b3:19:d4:8f:35:61:e2:51:9c:5c:04:f8:52:
         a0:9e:9a:ad:42:53:a7:9b:55:85:fb:a2:be:cf:34:3e:23:41:
         e6:18:99:1c:e0:91:cb:58:88:db:57:82:2d:88:81:75:17:c2:
         9d:6b:46:db:61:30:6e:92:c0:ae:72:5b:f6:42:b4:c6:6d:db:
         a8:8c:a6:91:c4:6a:61:fd:96:fa:2f:26:9b:18:3e:51:7c:4c:
         55:7d:d4:48:d0:a5:6c:f6:84:da:a3:a0:26:d2:e1:6b:66:d3:
         89:b1:1f:bb:0c:09:df:47:a7:e8:ac:7d:3b:fb:67:ec:f9:34:
         5b:05:8e:80:9e:d8:d9:7a:7c:56:75:a7:9b:2c:81:22:9d:c0:
         4f:98:c9:a7:6e:ac:96:2c:60:3f:37:a9:97:c1:e1:04:72:c3:
         45:a6:44:9a:98:53:bd:26:8a:44:a8:e7:26:1d:07:b4:59:a0:
         9c:cb:44:f2:34:24:f7:9e:7c:9d:23:e4:90:a5:da:06:ba:15:
         94:cd:d4:c3:c8:75:ed:d9:02:d2:4f:5e:26:43:ed:fb:40:a9:
         2d:74:5a:e6
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE4FnG8YAw8ZU0muZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
YTZiNGYzMmUtZTY1ZC00MGQzLWI1OTUtYmM2MDYyNzRhMjk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVONcRv/wz9WA1x1haOkM/BH3/+dS3vmY7H2
jrivF16QILBuOP1OS4Yg/HpJMwbIZE1KzNe+LYCuiwLAwoKv/W4Mmqb2hRlSnIVV
x2xoixZRjh2Nmgb91rjCd/0nI85TjDL7gigwf0p3obQdiUkM46TY2xTwQ1Fg0oOZ
Sw8TWT3hJX/k9Vj0Z/B/u9MKCs4xRNA1RwRryK87LCj17FZBCC/lqAqYGWVC2Jmo
SUWOikZReX+jBoGR9MSwJbb1Uey3f1UrdpEzdZ9MJ26qoBB14p9QDsHG8dFcFit4
JoU6Ck0sH9lfhadErU+VY/1I+EGwrD69Gyq6tk2FArdnx7eEWQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFITPrI+ZGihanUuexbw9LoHqa4YHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZTgxMWExOWQtYmIwMy0z
ZDc3LTgwMjctNDlkNjcxM2E5MTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujigw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAYrJevhOgTlIff7gW8nfxWP2zX4NxsMkD3TfgfsS4flNsn1UFasOl
UCSzGdSPNWHiUZxcBPhSoJ6arUJTp5tVhfuivs80PiNB5hiZHOCRy1iI21eCLYiB
dRfCnWtG22EwbpLArnJb9kK0xm3bqIymkcRqYf2W+i8mmxg+UXxMVX3USNClbPaE
2qOgJtLha2bTibEfuwwJ30en6Kx9O/tn7Pk0WwWOgJ7Y2Xp8VnWnmyyBIp3AT5jJ
p26slixgPzepl8HhBHLDRaZEmphTvSaKRKjnJh0HtFmgnMtE8jQk9558nSPkkKXa
BroVlM3Uw8h17dkC0k9eJkPt+0CpLXRa5g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:21:17 2026 by rpki-client