Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b668ad56-855d-3d8d-9d31-8f7298d49e29.roa
File:                     b668ad56-855d-3d8d-9d31-8f7298d49e29.roa (raw, json)
Hash identifier:          sC6EqEyaYh+5E2og7j/39K1071wcacf9p8QxwyhsdhU=
Subject key identifier:   DC:A2:07:52:64:8D:E7:6F:B9:73:B8:B7:0A:07:28:E7:89:1E:46:FA
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B64CCB7483D3C4C215E6BD3A0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b668ad56-855d-3d8d-9d31-8f7298d49e29.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e89:fc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:b7:48:3d:3c:4c:21:5e:6b:d3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=cdc48deb-ea6a-46af-b62b-dcd3f010535e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e3:ef:ec:e8:f1:f8:f1:9b:83:fb:60:4d:f4:
                    61:b5:90:3d:14:91:cb:bd:63:c4:2e:00:1d:91:3f:
                    01:e8:78:16:8c:d2:00:ce:f1:d6:4e:63:78:69:be:
                    41:c6:5a:b5:64:1d:13:78:29:33:0f:71:07:a6:07:
                    32:50:6c:0a:fd:8d:63:ad:b3:16:37:43:07:10:15:
                    98:ec:a5:31:e3:49:40:53:03:03:76:fe:61:da:14:
                    b1:80:9f:54:a9:0b:46:06:b5:6d:85:41:5a:8d:6e:
                    3c:37:f8:5c:f4:88:f6:22:58:f0:9f:83:fb:9a:1d:
                    80:c1:81:6a:72:bc:3c:ed:09:2c:c8:41:71:9e:5e:
                    fd:8d:53:78:d9:52:b2:8e:f0:10:fd:f3:30:70:6b:
                    f3:b7:60:06:4e:dd:4d:6c:b8:e3:be:5d:32:e9:82:
                    64:80:d3:ff:f3:22:d6:8e:60:90:55:63:02:ff:cb:
                    81:64:2b:51:e8:b9:9e:23:4e:4f:0f:c5:bb:d0:98:
                    b4:61:2c:fe:7e:e2:46:a0:6e:8c:6c:60:f6:28:c6:
                    66:c3:8b:ad:4c:e8:25:9f:09:ec:ab:65:a3:fe:35:
                    62:33:e2:13:e5:80:2a:3c:24:ba:67:42:59:ed:bf:
                    84:54:e3:a7:bc:bc:c6:dc:d0:6a:31:56:d5:46:21:
                    96:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A2:07:52:64:8D:E7:6F:B9:73:B8:B7:0A:07:28:E7:89:1E:46:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b668ad56-855d-3d8d-9d31-8f7298d49e29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:fc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:5d:8b:02:bd:31:e4:61:12:e4:00:7c:1c:99:f4:36:3b:52:
         6c:eb:92:1f:a4:c7:a8:e8:ab:3d:39:d0:31:cc:10:2e:d1:f1:
         bb:04:fd:e9:85:f0:4f:e2:3d:76:f6:fb:89:a1:1c:57:13:49:
         1b:04:43:a9:8e:f9:8d:41:47:7d:9d:d2:73:7b:db:61:6a:9e:
         79:47:4a:80:9f:12:94:56:78:d5:93:17:65:14:fa:b4:d4:bf:
         28:aa:d8:a7:67:d4:86:00:73:9f:e2:41:b6:17:98:c3:59:77:
         a0:69:55:6d:2b:c4:ef:fe:12:13:ca:8d:c6:d4:5c:64:27:3b:
         fc:40:d3:e7:79:5f:a9:48:9a:21:b3:6e:b6:6e:4a:72:b3:57:
         0c:ce:54:90:6c:e1:35:05:9d:02:d7:d2:5f:d6:d6:fe:3e:95:
         46:0f:f1:0e:45:fd:2b:56:c6:23:db:b8:a2:dd:20:5d:48:f9:
         67:95:15:6f:22:09:35:03:d0:c9:8c:c8:f8:e5:d1:3f:c2:58:
         34:20:02:70:b9:fa:92:93:b9:1e:59:d2:3c:88:a0:4d:58:fa:
         f3:4e:08:e7:fd:12:f9:3e:4c:77:8c:83:6c:be:1d:a8:02:7a:
         e0:61:e4:c5:cd:31:06:23:fa:45:0c:c3:00:c4:bf:94:75:fd:
         82:71:c5:df
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtkzLdIPTxMIV5r06AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
Y2RjNDhkZWItZWE2YS00NmFmLWI2MmItZGNkM2YwMTA1MzVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOPv7Ojx+PGbg/tgTfRhtZA9FJHLvWPELgAd
kT8B6HgWjNIAzvHWTmN4ab5Bxlq1ZB0TeCkzD3EHpgcyUGwK/Y1jrbMWN0MHEBWY
7KUx40lAUwMDdv5h2hSxgJ9UqQtGBrVthUFajW48N/hc9Ij2Iljwn4P7mh2AwYFq
crw87QksyEFxnl79jVN42VKyjvAQ/fMwcGvzt2AGTt1NbLjjvl0y6YJkgNP/8yLW
jmCQVWMC/8uBZCtR6LmeI05PD8W70Ji0YSz+fuJGoG6MbGD2KMZmw4utTOglnwns
q2Wj/jViM+IT5YAqPCS6Z0JZ7b+EVOOnvLzG3NBqMVbVRiGWBwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNyiB1JkjedvuXO4twoHKOeJHkb6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjY2OGFkNTYtODU1ZC0z
ZDhkLTlkMzEtOGY3Mjk4ZDQ5ZTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuifww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAVl2LAr0x5GES5AB8HJn0NjtSbOuSH6THqOirPTnQMcwQLtHxuwT9
6YXwT+I9dvb7iaEcVxNJGwRDqY75jUFHfZ3Sc3vbYWqeeUdKgJ8SlFZ41ZMXZRT6
tNS/KKrYp2fUhgBzn+JBtheYw1l3oGlVbSvE7/4SE8qNxtRcZCc7/EDT53lfqUia
IbNutm5KcrNXDM5UkGzhNQWdAtfSX9bW/j6VRg/xDkX9K1bGI9u4ot0gXUj5Z5UV
byIJNQPQyYzI+OXRP8JYNCACcLn6kpO5HlnSPIigTVj6804I5/0S+T5Md4yDbL4d
qAJ64GHkxc0xBiP6RQzDAMS/lHX9gnHF3w==
-----END CERTIFICATE-----
Generated at Sat Oct 11 07:19:17 2025 by rpki-client