Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5d0283e3-9e28-3ff4-a027-ebcfb191780f.roa
File:                     5d0283e3-9e28-3ff4-a027-ebcfb191780f.roa (raw, json)
Hash identifier:          VDp0Gi9iGhsi+L0Hydt/Ki2B+gjFnWMqksJTeyJ5Ass=
Subject key identifier:   17:62:A1:DE:D5:98:8B:87:BD:F7:D2:65:B0:A0:FA:49:EE:44:87:55
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B64CCAFEE9AF05C796C047FC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5d0283e3-9e28-3ff4-a027-ebcfb191780f.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e8a:c800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:af:ee:9a:f0:5c:79:6c:04:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=0508af47-6f99-4bbe-82fe-78a08f8c1726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6a:0c:bb:66:f1:98:e7:55:65:90:1c:c3:88:
                    d9:0f:ea:51:3e:e8:ae:c8:d0:32:aa:bc:fe:f3:5c:
                    dc:0d:59:00:0c:94:d0:ef:0b:71:2a:00:e3:2e:a6:
                    5c:a5:bb:25:6b:83:b1:00:3e:30:8f:e3:7c:a0:a1:
                    6c:1e:d5:98:b3:f6:e8:8d:e2:e6:f5:43:fa:29:75:
                    ff:d5:ba:ea:8f:a0:34:86:94:4e:57:d0:b9:e1:76:
                    aa:cb:73:b5:1b:19:f1:f5:9d:b1:1e:66:21:f7:32:
                    ab:8a:97:75:29:02:6f:61:ff:0c:72:c1:4f:62:d7:
                    dc:22:88:de:45:8e:15:b2:c8:b2:d2:5b:b1:90:e8:
                    95:24:fc:14:00:4c:63:98:df:cd:85:78:2e:72:31:
                    1c:c3:16:00:58:ae:04:76:76:5d:dd:fe:32:d6:b9:
                    d9:d1:10:18:05:27:70:7e:34:56:4a:68:63:7c:0c:
                    f5:a1:0e:c9:65:c0:66:13:17:60:46:86:c0:74:8a:
                    fa:c0:ed:26:d0:36:d0:83:0b:f9:8b:da:6b:24:92:
                    79:a4:dd:27:e9:24:2f:ee:86:c9:e2:27:a6:ea:7f:
                    52:4e:de:0d:98:f8:64:70:4f:c9:33:f6:b5:73:97:
                    20:a2:f6:ed:a2:82:63:ac:26:93:d6:ab:3f:a5:d4:
                    46:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:62:A1:DE:D5:98:8B:87:BD:F7:D2:65:B0:A0:FA:49:EE:44:87:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5d0283e3-9e28-3ff4-a027-ebcfb191780f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:c800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:53:d7:a8:df:ab:c5:45:36:7d:46:fd:19:4c:1b:7a:f7:65:
         35:6c:58:05:f6:2c:a3:7a:5a:c6:df:2b:1b:ea:de:50:e1:25:
         0e:4b:97:9c:82:ab:aa:59:9d:b5:08:1d:fb:55:e5:89:d1:b4:
         af:c1:62:4f:0c:50:2f:af:7e:ff:dc:65:1b:4f:b9:ef:14:7a:
         02:26:5d:07:33:3a:05:90:e5:55:83:7a:02:82:d5:ea:86:42:
         73:1c:ab:e9:55:4b:05:e1:23:3d:33:4c:de:d0:be:73:91:0f:
         5d:02:8a:56:ca:65:83:63:1e:14:72:b9:a1:db:44:d5:6f:11:
         41:c4:f4:98:12:44:40:b7:23:a6:9b:11:58:15:7b:f1:54:a6:
         2a:a1:15:b4:dd:17:e0:54:2f:b9:01:31:b4:66:77:f4:cb:b6:
         e0:f6:5e:f1:05:d8:8e:8f:e7:ed:90:3a:ef:61:c6:8c:ba:2e:
         18:d0:ce:d7:da:f0:31:3b:c7:6b:b3:0f:f3:ce:54:29:21:65:
         f3:43:6d:65:b6:ed:ce:01:29:f8:1a:1a:84:03:ef:13:10:a8:
         89:fc:d5:15:12:5d:96:a7:0c:13:0e:11:e9:ff:58:d1:4c:63:
         b7:d4:cb:de:34:85:46:67:75:2c:fc:ee:72:db:50:38:eb:55:
         b3:c1:0a:c0
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtkzK/umvBceWwEf8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MDUwOGFmNDctNmY5OS00YmJlLTgyZmUtNzhhMDhmOGMxNzI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWoMu2bxmOdVZZAcw4jZD+pRPuiuyNAyqrz+
81zcDVkADJTQ7wtxKgDjLqZcpbsla4OxAD4wj+N8oKFsHtWYs/bojeLm9UP6KXX/
1brqj6A0hpROV9C54Xaqy3O1Gxnx9Z2xHmYh9zKripd1KQJvYf8McsFPYtfcIoje
RY4Vssiy0luxkOiVJPwUAExjmN/NhXgucjEcwxYAWK4EdnZd3f4y1rnZ0RAYBSdw
fjRWSmhjfAz1oQ7JZcBmExdgRobAdIr6wO0m0DbQgwv5i9prJJJ5pN0n6SQv7obJ
4iem6n9STt4NmPhkcE/JM/a1c5cgovbtooJjrCaT1qs/pdRG/QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBdiod7VmIuHvffSZbCg+knuRIdVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNWQwMjgzZTMtOWUyOC0z
ZmY0LWEwMjctZWJjZmIxOTE3ODBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuisgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAfVPXqN+rxUU2fUb9GUwbevdlNWxYBfYso3paxt8rG+reUOElDkuX
nIKrqlmdtQgd+1XlidG0r8FiTwxQL69+/9xlG0+57xR6AiZdBzM6BZDlVYN6AoLV
6oZCcxyr6VVLBeEjPTNM3tC+c5EPXQKKVsplg2MeFHK5odtE1W8RQcT0mBJEQLcj
ppsRWBV78VSmKqEVtN0X4FQvuQExtGZ39Mu24PZe8QXYjo/n7ZA672HGjLouGNDO
19rwMTvHa7MP885UKSFl80NtZbbtzgEp+BoahAPvExCoifzVFRJdlqcMEw4R6f9Y
0Uxjt9TL3jSFRmd1LPzucttQOOtVs8EKwA==
-----END CERTIFICATE-----
Generated at Sat Oct 11 07:20:19 2025 by rpki-client