Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f7884a6-ed57-3fce-b2c0-5d8c64e4a1b0.roa
File:                     0f7884a6-ed57-3fce-b2c0-5d8c64e4a1b0.roa (raw, json)
Hash identifier:          a8Ot4eR1k0bCm3qrmpNwPLHYxxC9JUbJPgFeSG8BACc=
Subject key identifier:   B1:C3:75:48:0E:77:46:20:F0:22:EA:1F:02:23:26:63:CC:41:EB:0C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B64CCAD07F508E85913A67E00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f7884a6-ed57-3fce-b2c0-5d8c64e4a1b0.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e8a:2400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:ad:07:f5:08:e8:59:13:a6:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=7b827dc2-6ee8-4efd-92b4-9bca7410d05e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3b:1d:8f:dd:e3:90:f1:a5:ce:44:3e:97:6c:
                    ba:b6:44:c3:a3:d2:9e:ec:10:d0:ae:f1:55:2e:69:
                    07:43:dd:e2:2b:78:73:0b:6b:0f:d4:a5:d1:63:6e:
                    cb:eb:8c:ef:02:db:0f:fe:62:eb:5c:59:32:ce:16:
                    ca:c1:f8:76:04:39:5e:ee:75:7a:45:af:2f:e9:51:
                    e1:2e:7c:3d:9d:be:8b:66:f5:e5:b0:21:08:d9:fe:
                    2b:ba:6f:3a:d2:16:18:c1:d7:a9:87:c5:0b:6f:d3:
                    df:56:de:9c:9b:8f:24:0a:18:6f:7b:a4:b6:8f:2f:
                    cf:73:58:d4:81:82:2f:a2:c2:2a:82:be:66:ea:bd:
                    6d:f9:5a:76:c0:db:dd:fa:c7:72:d8:d7:46:33:e5:
                    5c:f6:00:ad:f0:a3:74:97:bd:f8:9f:07:16:a6:7a:
                    be:56:34:b2:4d:1c:9b:49:63:3e:30:53:35:4f:da:
                    79:6d:75:af:d4:f9:0f:e8:e8:06:42:95:fd:67:9c:
                    a0:14:8d:4f:58:d1:80:0e:c4:91:13:e9:b0:b6:21:
                    c6:88:f5:7d:ff:3c:47:29:c0:5e:dc:1f:32:06:fa:
                    37:20:94:35:9d:97:40:9a:95:3b:b7:37:ee:d0:71:
                    b7:3b:74:cd:fa:98:49:e7:da:38:19:d3:f2:cd:b3:
                    c2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C3:75:48:0E:77:46:20:F0:22:EA:1F:02:23:26:63:CC:41:EB:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f7884a6-ed57-3fce-b2c0-5d8c64e4a1b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:2400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:4b:3c:3f:47:9b:e0:b0:e0:4b:c9:e7:47:78:1b:df:04:3d:
         55:de:61:b4:fe:09:f4:51:31:28:c0:d2:11:7f:bd:f8:0b:18:
         75:f1:65:1c:da:a9:89:7f:64:10:8a:ec:87:f2:02:79:f4:60:
         c2:d1:86:21:a0:73:27:5c:23:81:8b:29:f0:98:11:36:03:86:
         a5:16:05:5f:74:ae:b3:8a:ec:d9:bb:8c:8a:e6:d6:c1:34:d6:
         29:6f:2f:04:29:dd:cb:4b:22:16:69:81:27:b6:03:83:f0:63:
         8b:d5:bf:f8:21:ed:bd:61:7c:cd:fa:14:c5:cd:bb:1d:91:3d:
         e4:44:0b:ed:6f:f8:2a:0c:1b:70:3c:75:d6:a4:c7:86:10:4b:
         ea:f9:ff:82:2f:9b:0e:1e:c6:9d:0a:c6:55:c0:fb:9d:46:f8:
         9f:7b:f7:f7:61:82:c6:88:26:6c:61:2a:0b:b2:34:7e:42:45:
         20:ad:6e:8a:dd:bf:b1:cd:7b:63:35:71:04:bc:a6:fa:f0:34:
         75:54:9f:03:4e:b2:27:24:07:cc:63:8f:9b:03:84:bc:31:88:
         b0:b1:8f:f1:3b:99:27:19:fb:15:dd:6b:e6:dd:48:65:a7:82:
         84:c4:f1:05:d9:d1:df:02:4d:86:04:88:8c:e9:5c:11:2f:db:
         73:1f:fd:00
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtkzK0H9QjoWROmfgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
N2I4MjdkYzItNmVlOC00ZWZkLTkyYjQtOWJjYTc0MTBkMDVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTsdj93jkPGlzkQ+l2y6tkTDo9Ke7BDQrvFV
LmkHQ93iK3hzC2sP1KXRY27L64zvAtsP/mLrXFkyzhbKwfh2BDle7nV6Ra8v6VHh
Lnw9nb6LZvXlsCEI2f4rum860hYYwdeph8ULb9PfVt6cm48kChhve6S2jy/Pc1jU
gYIvosIqgr5m6r1t+Vp2wNvd+sdy2NdGM+Vc9gCt8KN0l734nwcWpnq+VjSyTRyb
SWM+MFM1T9p5bXWv1PkP6OgGQpX9Z5ygFI1PWNGADsSRE+mwtiHGiPV9/zxHKcBe
3B8yBvo3IJQ1nZdAmpU7tzfu0HG3O3TN+phJ59o4GdPyzbPCWwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLHDdUgOd0Yg8CLqHwIjJmPMQesMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGY3ODg0YTYtZWQ1Ny0z
ZmNlLWIyYzAtNWQ4YzY0ZTRhMWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiiQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAFks8P0eb4LDgS8nnR3gb3wQ9Vd5htP4J9FExKMDSEX+9+AsYdfFl
HNqpiX9kEIrsh/ICefRgwtGGIaBzJ1wjgYsp8JgRNgOGpRYFX3Sus4rs2buMiubW
wTTWKW8vBCndy0siFmmBJ7YDg/Bji9W/+CHtvWF8zfoUxc27HZE95EQL7W/4Kgwb
cDx11qTHhhBL6vn/gi+bDh7GnQrGVcD7nUb4n3v392GCxogmbGEqC7I0fkJFIK1u
it2/sc17YzVxBLym+vA0dVSfA06yJyQHzGOPmwOEvDGIsLGP8TuZJxn7Fd1r5t1I
ZaeChMTxBdnR3wJNhgSIjOlcES/bcx/9AA==
-----END CERTIFICATE-----
Generated at Sat Oct 11 07:14:25 2025 by rpki-client