Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/81e521b1-7564-31d5-b771-02a09b358955.roa
File:                     81e521b1-7564-31d5-b771-02a09b358955.roa (raw, json)
Hash identifier:          oPNC/gsWh0nPKI1juU/gSzkCQY4PYPE26HHSqNrZkRw=
Subject key identifier:   CD:A3:56:D5:3F:F6:B5:B3:B3:DA:94:3E:E9:28:D2:A1:C4:43:97:3D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B67973E43AE8920254B50D780
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/81e521b1-7564-31d5-b771-02a09b358955.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     30036
IP address blocks:        2604:2e8e:b000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:3e:43:ae:89:20:25:4b:50:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=d805329c-0944-4e89-a2ba-8bcfb973ecbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ed:60:69:b4:05:9b:e9:92:8d:bb:4b:17:9d:
                    e2:80:06:40:3a:42:df:41:a4:7a:2c:6a:28:cc:7a:
                    f6:ff:19:3d:29:bd:e5:b7:27:ce:26:25:6b:70:13:
                    af:13:94:89:1b:60:c4:0f:fc:ed:a3:7b:04:fa:ad:
                    2b:d9:02:3d:a2:8a:ad:c5:3a:23:85:41:07:41:a2:
                    64:62:50:c2:ff:42:43:36:ea:02:52:49:4d:b2:60:
                    7b:19:4d:50:8c:51:e7:fc:2f:6a:c1:d5:3f:56:13:
                    12:ce:42:ae:40:dd:42:51:6b:62:b0:78:14:db:43:
                    26:0d:4e:de:05:6d:2f:c6:65:ab:4f:86:8e:e4:df:
                    2c:e6:f8:3e:a6:2c:fb:f9:2d:a3:15:96:b1:d1:71:
                    68:e1:82:81:dd:83:1e:14:67:6b:9b:ac:cb:30:b5:
                    56:91:dd:50:28:7f:5e:ff:65:1d:2f:fd:c6:d4:2a:
                    5f:f3:41:21:85:e3:78:21:ec:5d:1f:70:4c:22:f6:
                    85:76:41:0b:c9:63:4e:d4:f5:7f:14:de:29:1b:ff:
                    66:fa:70:1d:fe:ee:78:78:cd:16:3a:bd:ab:f9:22:
                    46:51:01:d3:71:16:b0:93:0a:67:55:71:6b:67:aa:
                    a9:d3:7c:56:16:ee:df:ca:fc:d7:91:5b:e8:c1:c7:
                    71:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A3:56:D5:3F:F6:B5:B3:B3:DA:94:3E:E9:28:D2:A1:C4:43:97:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/81e521b1-7564-31d5-b771-02a09b358955.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:b000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:ce:33:44:3c:39:b3:6c:cb:9a:6a:06:76:a9:aa:54:8f:9b:
         31:6f:a5:75:1e:b2:f9:69:5b:3e:13:81:cc:10:83:87:fc:a2:
         a7:b4:ae:10:be:63:d1:28:03:a8:28:f3:5c:70:44:79:f6:ce:
         d5:ae:e0:f5:93:b5:fd:77:bb:0f:4e:22:f7:49:4b:eb:d1:4c:
         b1:ce:c6:ba:29:01:59:29:c8:b7:6c:e6:33:e9:04:13:61:ef:
         53:4a:8d:d8:f3:0b:d4:14:41:c6:70:72:1e:94:1d:f9:eb:2b:
         17:f7:e0:e5:b6:29:df:1f:3f:2b:5c:66:9f:03:a9:02:4e:67:
         fe:c4:66:86:85:ec:c6:ea:9b:0a:68:aa:e0:3c:ab:10:a4:1b:
         3b:cc:8a:5d:66:cd:49:95:f7:ff:13:cf:9b:e1:0c:26:ad:4c:
         e9:74:b3:bb:24:5a:df:ae:a5:49:4f:8c:a8:d5:7e:8c:c6:a3:
         dd:d0:22:4c:46:5f:8e:5d:62:54:5f:99:d0:e1:d4:15:2d:28:
         b6:d4:74:0b:d6:59:c2:7c:dc:a6:3c:a4:57:a7:35:4f:4f:f6:
         58:60:46:02:14:a9:25:d0:f7:60:40:b3:2d:bd:24:8d:d0:26:
         6e:22:3c:32:b9:b7:85:36:48:c1:44:04:71:60:a9:8b:4b:fc:
         b9:5a:40:66
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtnlz5DrokgJUtQ14AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk
ZDgwNTMyOWMtMDk0NC00ZTg5LWEyYmEtOGJjZmI5NzNlY2JjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO1gabQFm+mSjbtLF53igAZAOkLfQaR6LGoo
zHr2/xk9Kb3ltyfOJiVrcBOvE5SJG2DED/zto3sE+q0r2QI9ooqtxTojhUEHQaJk
YlDC/0JDNuoCUklNsmB7GU1QjFHn/C9qwdU/VhMSzkKuQN1CUWtisHgU20MmDU7e
BW0vxmWrT4aO5N8s5vg+piz7+S2jFZax0XFo4YKB3YMeFGdrm6zLMLVWkd1QKH9e
/2UdL/3G1Cpf80EhheN4IexdH3BMIvaFdkELyWNO1PV/FN4pG/9m+nAd/u54eM0W
Or2r+SJGUQHTcRawkwpnVXFrZ6qp03xWFu7fyvzXkVvowcdxowIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFM2jVtU/9rWzs9qUPuko0qHEQ5c9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODFlNTIxYjEtNzU2NC0z
MWQ1LWI3NzEtMDJhMDliMzU4OTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujrAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAE84zRDw5s2zLmmoGdqmqVI+bMW+ldR6y+WlbPhOBzBCDh/yip7Su
EL5j0SgDqCjzXHBEefbO1a7g9ZO1/Xe7D04i90lL69FMsc7GuikBWSnIt2zmM+kE
E2HvU0qN2PML1BRBxnByHpQd+esrF/fg5bYp3x8/K1xmnwOpAk5n/sRmhoXsxuqb
Cmiq4DyrEKQbO8yKXWbNSZX3/xPPm+EMJq1M6XSzuyRa366lSU+MqNV+jMaj3dAi
TEZfjl1iVF+Z0OHUFS0ottR0C9ZZwnzcpjykV6c1T0/2WGBGAhSpJdD3YECzLb0k
jdAmbiI8Mrm3hTZIwUQEcWCpi0v8uVpAZg==
-----END CERTIFICATE-----
Generated at Sat Oct 11 07:16:27 2025 by rpki-client