Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f8532346-1a0f-3fd5-859f-6f53abeb8a5d.roa
File:                     f8532346-1a0f-3fd5-859f-6f53abeb8a5d.roa (raw, json)
Hash identifier:          Q0erXe8gmu0AF1OWs6h190cu8wAmP9dnvgOLlI1QJSk=
Subject key identifier:   70:2E:CA:5B:26:B0:54:B2:D0:FB:ED:5F:F3:33:FD:FB:A9:59:39:D6
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F498A4C2B49D34DE650D5EF80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f8532346-1a0f-3fd5-859f-6f53abeb8a5d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8e:cc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:4c:2b:49:d3:4d:e6:50:d5:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=49a5fc00-d430-41bf-b0e1-66618a718063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7d:26:80:94:cb:3e:f7:79:dd:11:37:b1:54:
                    d3:9c:65:a5:85:b0:b8:58:58:6d:30:8d:81:f9:d7:
                    56:29:07:4a:9b:95:bb:49:42:6b:68:0a:82:66:f5:
                    93:ef:16:e7:15:8b:43:91:30:70:82:03:78:b8:11:
                    cc:9a:1d:50:b8:0b:4f:22:3d:03:96:fe:53:39:c9:
                    35:92:65:4a:a6:4e:d2:76:0e:27:d2:19:6e:01:43:
                    ad:9a:28:76:8f:4f:92:e2:89:a0:41:67:96:ab:76:
                    a5:27:8e:96:6a:22:94:59:aa:e3:26:dd:ad:7d:2b:
                    66:e2:0d:0f:e1:2f:97:e5:60:9b:9e:bc:50:0a:7e:
                    a0:03:21:53:04:99:66:d9:37:fd:15:09:43:bb:d0:
                    14:dd:ae:35:a3:f4:cf:ef:83:d8:98:c8:70:52:0c:
                    6c:83:8b:73:b2:fc:96:32:3c:cc:3f:ac:48:0b:ad:
                    23:87:fe:ce:bf:a4:92:a4:4e:1a:a4:22:16:96:af:
                    3a:c6:8b:eb:9b:f3:a0:aa:e7:5e:46:8d:55:d0:87:
                    9e:65:b9:c9:a8:f1:a5:a8:81:35:2f:72:1f:74:bf:
                    cd:1c:7b:7a:bf:9d:8b:49:7f:a1:3f:07:08:5e:f0:
                    3d:70:1b:67:d1:ce:2d:76:11:6a:20:95:a5:94:20:
                    97:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2E:CA:5B:26:B0:54:B2:D0:FB:ED:5F:F3:33:FD:FB:A9:59:39:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f8532346-1a0f-3fd5-859f-6f53abeb8a5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:cc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:e6:57:5f:08:9f:75:cd:33:0e:52:b5:6b:42:04:e3:1e:e2:
         27:f4:73:2e:97:b8:69:2d:72:70:1c:b6:28:e9:67:76:11:3b:
         75:8e:8e:e8:45:a5:c5:cc:5c:eb:ef:d1:ee:e2:bf:ff:30:14:
         ad:94:fd:3e:d5:c1:38:c8:37:b8:6b:42:14:76:24:5e:f2:8f:
         8d:eb:47:91:c3:67:cc:6f:a5:fe:a0:14:8c:28:c3:a4:9c:2c:
         4e:66:61:55:54:5f:97:2a:3c:2b:b1:b6:b4:b7:11:4b:a1:b9:
         ee:ab:b4:dd:ed:e2:c6:6c:97:94:89:0e:e7:e9:ba:23:4d:32:
         0e:7f:d3:b5:d8:59:6a:9f:00:71:8f:5a:52:e6:10:7b:02:28:
         af:c2:d8:8f:84:6c:bb:9f:34:5b:4f:b0:53:34:dc:4f:3f:c3:
         2a:2c:10:d1:02:f6:fe:d7:1e:3a:6b:e0:70:0e:1d:13:29:d9:
         77:3e:38:4a:95:1c:58:aa:a5:9d:d8:5b:f6:44:6d:87:29:b6:
         21:e7:e6:3d:ae:45:34:00:28:5b:95:5c:a9:1b:67:68:25:e3:
         9e:9c:eb:9f:8f:44:0d:e1:22:17:80:61:59:28:95:9e:6d:3b:
         40:c4:09:17:c1:a0:c0:50:82:07:c2:6c:3e:11:11:f9:81:07:
         5a:d5:54:f1
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JikwrSdNN5lDV74AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NDlhNWZjMDAtZDQzMC00MWJmLWIwZTEtNjY2MThhNzE4MDYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX0mgJTLPvd53RE3sVTTnGWlhbC4WFhtMI2B
+ddWKQdKm5W7SUJraAqCZvWT7xbnFYtDkTBwggN4uBHMmh1QuAtPIj0Dlv5TOck1
kmVKpk7Sdg4n0hluAUOtmih2j0+S4omgQWeWq3alJ46WaiKUWarjJt2tfStm4g0P
4S+X5WCbnrxQCn6gAyFTBJlm2Tf9FQlDu9AU3a41o/TP74PYmMhwUgxsg4tzsvyW
MjzMP6xIC60jh/7Ov6SSpE4apCIWlq86xovrm/OgqudeRo1V0IeeZbnJqPGlqIE1
L3IfdL/NHHt6v52LSX+hPwcIXvA9cBtn0c4tdhFqIJWllCCXUQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHAuylsmsFSy0PvtX/Mz/fupWTnWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZjg1MzIzNDYtMWEwZi0z
ZmQ1LTg1OWYtNmY1M2FiZWI4YTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujsww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEALuZXXwifdc0zDlK1a0IE4x7iJ/RzLpe4aS1ycBy2KOlndhE7dY6O
6EWlxcxc6+/R7uK//zAUrZT9PtXBOMg3uGtCFHYkXvKPjetHkcNnzG+l/qAUjCjD
pJwsTmZhVVRflyo8K7G2tLcRS6G57qu03e3ixmyXlIkO5+m6I00yDn/TtdhZap8A
cY9aUuYQewIor8LYj4Rsu580W0+wUzTcTz/DKiwQ0QL2/tceOmvgcA4dEynZdz44
SpUcWKqlndhb9kRthym2IefmPa5FNAAoW5VcqRtnaCXjnpzrn49EDeEiF4BhWSiV
nm07QMQJF8GgwFCCB8JsPhER+YEHWtVU8Q==
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:44:47 2026 by rpki-client