Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ee8a8701-9d7a-3c94-815c-00e50c9615ad.roa
File:                     ee8a8701-9d7a-3c94-815c-00e50c9615ad.roa (raw, json)
Hash identifier:          OQP6qfLkvnW62D4prgGgGx3GxVxBZnIA7QjYikLhzWY=
Subject key identifier:   D3:53:51:58:25:AA:9F:38:21:D1:01:64:59:6C:1F:8F:59:10:D7:4D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F498871F49B5A599758686280
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ee8a8701-9d7a-3c94-815c-00e50c9615ad.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8a:1800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:71:f4:9b:5a:59:97:58:68:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6f0e27e4-f202-4ebd-a75c-e19a6c98ad0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3a:51:f0:8e:ae:ea:54:69:b3:fb:09:89:e4:
                    80:22:99:a8:4d:a4:1e:9d:a4:df:d2:c7:0c:6f:11:
                    26:56:57:f7:6c:42:8e:1b:7b:78:2e:9c:b1:eb:40:
                    8f:ea:4c:8f:9d:49:cf:6b:a0:da:cb:94:78:c0:fd:
                    3d:dd:b8:ed:93:31:22:a0:a6:80:88:1b:f0:fe:0e:
                    20:9e:9a:69:90:ed:df:57:0f:59:90:91:5d:4b:65:
                    e1:e5:d2:64:ef:8f:6e:a5:59:84:89:e6:ba:44:e2:
                    93:39:97:ef:95:75:27:43:60:ad:c3:35:12:df:ca:
                    9b:96:e8:aa:21:86:76:4e:27:14:aa:5d:c2:f8:49:
                    7b:af:41:a1:28:db:45:fa:3b:23:86:8a:a8:4d:63:
                    46:0a:d8:61:aa:d1:03:90:3b:07:39:79:fa:b3:60:
                    84:70:9b:20:b0:13:d1:a1:9f:c4:dc:60:f8:91:15:
                    ee:ac:17:32:52:48:fc:c3:e7:db:27:63:76:63:a8:
                    3e:15:a8:53:04:76:b4:8d:51:8e:8c:8e:55:a6:64:
                    2e:a4:d5:01:d8:84:a2:f7:84:24:1f:20:24:93:0e:
                    98:dd:26:ba:25:d7:17:d7:ad:ed:18:ac:4b:a1:83:
                    3a:b6:dc:32:a9:21:88:e2:8f:28:d9:d9:75:f5:28:
                    ed:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:53:51:58:25:AA:9F:38:21:D1:01:64:59:6C:1F:8F:59:10:D7:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ee8a8701-9d7a-3c94-815c-00e50c9615ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:1800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:0b:30:31:3f:97:16:f6:0d:23:9d:d7:d4:1e:27:a8:39:cd:
         58:e4:22:95:c1:d4:94:70:57:f0:d2:70:15:06:03:8e:ab:8b:
         0e:b3:89:f9:87:3f:d7:3b:7a:a4:c2:f6:94:5f:36:81:c1:01:
         0c:c3:60:83:7b:5e:3a:e2:38:9a:6c:0e:3b:19:7c:7a:b3:b1:
         f7:dc:6d:57:73:50:d6:58:e7:70:e3:d7:27:e7:b7:16:2d:73:
         01:00:87:8a:9a:0e:66:98:92:c3:ce:82:83:7c:b6:27:cb:26:
         9d:51:66:7b:f1:68:24:0c:65:ff:9b:68:e9:e2:f4:0d:2a:4a:
         7e:f0:61:59:5b:fb:08:4e:3c:0c:0f:4f:bc:cd:e4:ad:03:e6:
         5c:2e:17:b8:08:f3:82:62:98:5f:ce:43:2e:11:e3:c8:4e:ee:
         f0:d3:8c:81:02:65:40:c3:59:4e:51:5c:4a:44:a9:23:b5:8f:
         83:f0:53:b1:19:95:83:09:c1:a4:35:09:52:63:b1:9a:e4:22:
         3e:76:9c:95:89:c4:67:b1:32:a7:fc:70:e1:8b:b2:17:be:4f:
         9a:10:ab:1d:a3:07:93:30:87:e5:55:9c:e4:f6:2e:61:19:49:
         99:8b:41:4f:bf:9b:20:fd:5b:b3:6c:64:a5:50:f8:91:32:0a:
         b9:a8:3e:ed
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JiHH0m1pZl1hoYoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NmYwZTI3ZTQtZjIwMi00ZWJkLWE3NWMtZTE5YTZjOThhZDBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzpR8I6u6lRps/sJieSAIpmoTaQenaTf0scM
bxEmVlf3bEKOG3t4Lpyx60CP6kyPnUnPa6Day5R4wP093bjtkzEioKaAiBvw/g4g
npppkO3fVw9ZkJFdS2Xh5dJk749upVmEiea6ROKTOZfvlXUnQ2CtwzUS38qbluiq
IYZ2TicUql3C+El7r0GhKNtF+jsjhoqoTWNGCthhqtEDkDsHOXn6s2CEcJsgsBPR
oZ/E3GD4kRXurBcyUkj8w+fbJ2N2Y6g+FahTBHa0jVGOjI5VpmQupNUB2ISi94Qk
HyAkkw6Y3Sa6JdcX163tGKxLoYM6ttwyqSGI4o8o2dl19Sjt7QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNNTUVglqp84IdEBZFlsH49ZENdNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZWU4YTg3MDEtOWQ3YS0z
Yzk0LTgxNWMtMDBlNTBjOTYxNWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuihgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAjAswMT+XFvYNI53X1B4nqDnNWOQilcHUlHBX8NJwFQYDjquLDrOJ
+Yc/1zt6pML2lF82gcEBDMNgg3teOuI4mmwOOxl8erOx99xtV3NQ1ljncOPXJ+e3
Fi1zAQCHipoOZpiSw86Cg3y2J8smnVFme/FoJAxl/5to6eL0DSpKfvBhWVv7CE48
DA9PvM3krQPmXC4XuAjzgmKYX85DLhHjyE7u8NOMgQJlQMNZTlFcSkSpI7WPg/BT
sRmVgwnBpDUJUmOxmuQiPnaclYnEZ7Eyp/xw4YuyF75PmhCrHaMHkzCH5VWc5PYu
YRlJmYtBT7+bIP1bs2xkpVD4kTIKuag+7Q==
-----END CERTIFICATE-----
Generated at Sat Sep 26 22:47:57 2026 by rpki-client