Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7991b3d4-102a-3e92-9a21-d22eda3d7344.roa
File:                     7991b3d4-102a-3e92-9a21-d22eda3d7344.roa (raw, json)
Hash identifier:          YmyKjWeYjiSYL4bzPJlh0uSWCWQ3SFXU+w+f4GYwn5k=
Subject key identifier:   A9:B0:3A:61:68:CE:00:BA:9E:B4:C2:01:64:A7:FA:3D:61:BD:68:CD
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B64CE5041DB15715A4A77FE00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7991b3d4-102a-3e92-9a21-d22eda3d7344.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e8a:7c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:50:41:db:15:71:5a:4a:77:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=67418f26-ed71-400a-a8e1-aaf1ea399389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:43:9e:ed:36:04:9a:52:65:61:7c:e7:19:0d:
                    c2:e0:f4:25:36:87:85:39:1b:1f:e6:d4:f8:69:f7:
                    49:27:37:01:cc:50:6e:02:9c:89:ce:3c:96:a6:31:
                    ee:6c:bc:7c:d9:89:b3:bb:2c:b9:6e:50:0e:3b:a8:
                    75:21:fe:eb:bb:db:3f:e4:15:37:04:ca:db:b3:4c:
                    96:f3:34:07:ac:69:a0:3f:46:5a:0b:31:56:f3:6b:
                    c0:12:1a:8b:a9:a8:92:0d:97:3c:fa:b8:e2:ab:60:
                    cf:d1:8a:2d:22:ae:83:6b:97:a5:da:ab:d3:6b:10:
                    8b:92:45:ba:38:09:58:29:f2:73:6e:b8:78:ba:bc:
                    f0:38:fc:7d:1e:f3:0e:04:07:fb:9f:2d:64:78:f0:
                    31:c8:5f:0e:dc:95:ab:be:ab:50:5f:3f:e8:59:80:
                    21:f3:cd:c9:26:2e:58:34:8c:d2:65:e1:1a:82:27:
                    17:15:42:4c:c4:bc:0b:b8:3c:b4:d6:8f:d3:13:7a:
                    1d:db:d3:de:c9:83:e9:db:bc:38:f5:43:af:6a:28:
                    04:63:4d:9f:07:37:c8:d8:89:4e:a7:2d:63:4f:9d:
                    e3:08:50:90:64:be:c1:39:ea:9b:dc:27:7b:bb:b4:
                    3d:67:00:ef:dd:62:fa:fc:ac:3b:f2:77:60:88:19:
                    b8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B0:3A:61:68:CE:00:BA:9E:B4:C2:01:64:A7:FA:3D:61:BD:68:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7991b3d4-102a-3e92-9a21-d22eda3d7344.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:7c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:41:1a:22:0a:76:d7:31:07:47:de:65:7a:ee:25:f7:b9:c6:
         f6:62:d4:ee:74:7c:78:f4:ca:8a:16:1f:f4:b0:92:0b:b7:57:
         ae:aa:eb:b5:0e:ce:63:0d:f6:c0:ae:97:54:40:9e:25:a7:5a:
         2f:19:7a:78:fa:79:7c:39:22:d3:78:c6:92:64:dc:82:dc:89:
         15:bc:77:9e:53:bc:40:80:13:41:f6:59:55:03:3c:c8:b0:93:
         31:4e:05:56:07:5e:3a:02:cc:3a:1a:2b:00:0d:82:6d:25:3d:
         13:3b:ca:61:1e:5c:12:e9:df:7a:2f:17:d9:48:d1:c9:3f:89:
         7b:95:64:43:90:3c:c5:5b:c9:ee:e2:fa:29:b0:4c:dd:24:bb:
         65:77:62:76:58:91:40:e7:b9:fb:a8:98:b6:ba:05:45:fb:80:
         aa:9b:4b:ad:5f:68:aa:28:f5:29:79:1b:b3:9a:1a:6f:73:0d:
         7b:32:fb:7c:cd:e7:f9:4d:be:5b:3b:c7:26:4d:eb:53:7d:3e:
         99:5d:33:f7:b8:4c:78:8d:41:39:51:c7:e5:56:2d:3c:ff:0d:
         b3:c9:ca:bd:ed:c1:48:02:30:cc:c4:ac:e5:f6:2f:3d:06:9a:
         81:3a:f6:df:48:f3:e6:29:99:71:a2:9e:b0:2c:e2:9b:13:1a:
         07:2c:5c:0b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtkzlBB2xVxWkp3/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
Njc0MThmMjYtZWQ3MS00MDBhLWE4ZTEtYWFmMWVhMzk5Mzg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEOe7TYEmlJlYXznGQ3C4PQlNoeFORsf5tT4
afdJJzcBzFBuApyJzjyWpjHubLx82Ymzuyy5blAOO6h1If7ru9s/5BU3BMrbs0yW
8zQHrGmgP0ZaCzFW82vAEhqLqaiSDZc8+rjiq2DP0YotIq6Da5el2qvTaxCLkkW6
OAlYKfJzbrh4urzwOPx9HvMOBAf7ny1kePAxyF8O3JWrvqtQXz/oWYAh883JJi5Y
NIzSZeEagicXFUJMxLwLuDy01o/TE3od29PeyYPp27w49UOvaigEY02fBzfI2IlO
py1jT53jCFCQZL7BOeqb3Cd7u7Q9ZwDv3WL6/Kw78ndgiBm4ewIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKmwOmFozgC6nrTCAWSn+j1hvWjNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNzk5MWIzZDQtMTAyYS0z
ZTkyLTlhMjEtZDIyZWRhM2Q3MzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuinww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAS0EaIgp21zEHR95leu4l97nG9mLU7nR8ePTKihYf9LCSC7dXrqrr
tQ7OYw32wK6XVECeJadaLxl6ePp5fDki03jGkmTcgtyJFbx3nlO8QIATQfZZVQM8
yLCTMU4FVgdeOgLMOhorAA2CbSU9EzvKYR5cEunfei8X2UjRyT+Je5VkQ5A8xVvJ
7uL6KbBM3SS7ZXdidliRQOe5+6iYtroFRfuAqptLrV9oqij1KXkbs5oab3MNezL7
fM3n+U2+WzvHJk3rU30+mV0z97hMeI1BOVHH5VYtPP8Ns8nKve3BSAIwzMSs5fYv
PQaagTr230jz5imZcaKesCzimxMaByxcCw==
-----END CERTIFICATE-----
Generated at Sat Oct 11 07:18:15 2025 by rpki-client