Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a56463e9-c50e-3aef-815b-589e0a0ba6dd.roa
File:                     a56463e9-c50e-3aef-815b-589e0a0ba6dd.roa (raw, json)
Hash identifier:          AVqqK5FoK6kh1XMfXzW3/A9jhq3mNpcjlexefTyBxKc=
Subject key identifier:   11:2C:24:2E:7D:87:D4:43:9A:88:CF:A9:12:20:15:02:93:88:85:42
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B64CE564D07A4D52CC1B25800
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a56463e9-c50e-3aef-815b-589e0a0ba6dd.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e8c:f000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:56:4d:07:a4:d5:2c:c1:b2:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=14904afc-e5e7-4ddc-8d44-7d4b2fa7df07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e0:c4:12:78:f6:2b:b0:d5:08:a4:9c:24:43:
                    f2:71:4b:0d:27:c6:b8:6e:1a:91:fb:39:70:9a:ee:
                    a2:6a:8b:b6:0c:7b:71:cd:88:24:ae:13:35:99:ab:
                    9a:5c:c0:a7:85:53:cb:db:d3:64:55:22:d3:2e:bd:
                    43:cb:7d:67:b3:9e:d6:ee:28:cc:4b:7a:64:db:90:
                    18:fc:f2:cf:b8:ed:c4:07:53:92:82:52:3e:d1:a3:
                    b9:08:0d:a9:36:48:59:61:48:ea:da:f3:4e:68:f5:
                    59:a6:2f:e1:b8:1d:2d:3f:04:28:7b:6a:e3:87:f3:
                    5f:95:96:1b:8e:5b:22:0a:87:0e:16:56:33:60:28:
                    cc:81:7e:d5:17:e4:36:db:ad:08:e3:2d:aa:41:2d:
                    e5:96:69:9c:15:11:8d:a8:c3:fe:e6:8a:0d:74:3a:
                    3b:5c:9d:bc:1b:a3:b6:03:2d:1a:68:40:e1:fb:21:
                    11:fd:41:09:49:b7:41:a4:23:08:86:3e:e8:75:a4:
                    13:8d:3e:dd:18:e8:4e:d2:f1:24:73:74:51:9d:73:
                    64:97:49:85:8c:2f:ae:d6:f0:bb:0b:2c:9b:e1:66:
                    f2:16:6c:d3:83:e6:ec:38:92:8f:dd:dc:d9:6e:4d:
                    74:fa:d5:70:cb:d9:7e:ac:29:05:59:e9:6c:57:ff:
                    19:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:2C:24:2E:7D:87:D4:43:9A:88:CF:A9:12:20:15:02:93:88:85:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a56463e9-c50e-3aef-815b-589e0a0ba6dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:f000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:9f:c9:f7:84:6b:08:f3:f4:a2:32:d0:7d:33:ad:d7:6f:3e:
         11:63:c0:3f:40:50:a0:3c:cc:c9:94:48:38:17:87:36:f5:ce:
         67:fb:5a:0a:91:07:74:98:03:83:6d:0b:d4:a4:cf:64:35:88:
         8b:72:b4:7d:4a:7d:dc:0a:1d:bc:56:a4:3a:99:d4:81:2b:d4:
         c1:fc:1d:8a:26:4e:ae:3f:57:38:ee:d0:da:36:de:e5:17:d4:
         75:a7:a9:26:91:c0:06:3c:ee:1f:19:ae:bf:84:c4:52:5d:17:
         b2:4b:8f:4a:29:fc:77:50:ae:be:b6:a4:d3:d9:09:c3:b7:0e:
         9c:6f:d4:05:7c:6c:f2:47:b4:15:c0:89:63:3b:ae:11:4a:3e:
         40:b5:f4:57:be:4a:3d:ec:66:20:a7:90:88:8c:3c:57:9b:17:
         9e:20:01:f7:09:03:23:3b:60:39:4c:69:89:00:f9:c3:bb:ae:
         27:c7:72:08:51:68:cd:01:b2:1c:65:4b:1a:b8:2b:e3:1e:2f:
         76:4d:c2:7c:46:b3:04:bf:3d:2e:b5:c1:03:c9:a1:cf:ea:8e:
         17:f2:ea:8e:0c:1c:73:15:f7:8b:9d:e3:42:d9:eb:6d:32:46:
         f0:3b:03:35:c1:92:80:af:16:b7:16:e1:cb:76:77:fa:b1:9a:
         d6:0c:c7:18
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtkzlZNB6TVLMGyWAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MTQ5MDRhZmMtZTVlNy00ZGRjLThkNDQtN2Q0YjJmYTdkZjA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5eDEEnj2K7DVCKScJEPycUsNJ8a4bhqR+zlw
mu6iaou2DHtxzYgkrhM1mauaXMCnhVPL29NkVSLTLr1Dy31ns57W7ijMS3pk25AY
/PLPuO3EB1OSglI+0aO5CA2pNkhZYUjq2vNOaPVZpi/huB0tPwQoe2rjh/NflZYb
jlsiCocOFlYzYCjMgX7VF+Q2260I4y2qQS3llmmcFRGNqMP+5ooNdDo7XJ28G6O2
Ay0aaEDh+yER/UEJSbdBpCMIhj7odaQTjT7dGOhO0vEkc3RRnXNkl0mFjC+u1vC7
Cyyb4WbyFmzTg+bsOJKP3dzZbk10+tVwy9l+rCkFWelsV/8ZeQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBEsJC59h9RDmojPqRIgFQKTiIVCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTU2NDYzZTktYzUwZS0z
YWVmLTgxNWItNTg5ZTBhMGJhNmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujPAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAXp/J94RrCPP0ojLQfTOt128+EWPAP0BQoDzMyZRIOBeHNvXOZ/ta
CpEHdJgDg20L1KTPZDWIi3K0fUp93AodvFakOpnUgSvUwfwdiiZOrj9XOO7Q2jbe
5RfUdaepJpHABjzuHxmuv4TEUl0XskuPSin8d1Cuvrak09kJw7cOnG/UBXxs8ke0
FcCJYzuuEUo+QLX0V75KPexmIKeQiIw8V5sXniAB9wkDIztgOUxpiQD5w7uuJ8dy
CFFozQGyHGVLGrgr4x4vdk3CfEazBL89LrXBA8mhz+qOF/LqjgwccxX3i53jQtnr
bTJG8DsDNcGSgK8Wtxbhy3Z3+rGa1gzHGA==
-----END CERTIFICATE-----
Generated at Sat Oct 11 07:15:28 2025 by rpki-client